00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x1000}}, 0x1006) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000041) 03:44:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:44:58 executing program 3: r0 = socket(0x25, 0x5, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) 03:44:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x6, 0x6}}}]}, 0x78}}, 0x0) 03:44:58 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='4']) unlink(&(0x7f0000000100)='./file0/file0\x00') [ 2163.364769][T23962] loop0: detected capacity change from 0 to 512 [ 2163.394501][T23968] fuse: Bad value for 'fd' 03:44:58 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) bind(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80) [ 2163.434439][T23962] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. 03:44:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:44:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000004c0)={0x30, r1, 0x209, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x30}}, 0x0) 03:44:58 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2d) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) [ 2163.465520][ T27] audit: type=1800 audit(2000000698.399:706): pid=23962 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1180 res=0 errno=0 [ 2163.498537][T23975] fuse: Bad value for 'fd' 03:44:58 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x5}}) 03:44:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) 03:44:58 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='4']) unlink(&(0x7f0000000100)='./file0/file0\x00') 03:44:58 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980)={0x8, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x1000}}, 0x1006) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000041) 03:44:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) 03:44:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:44:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x4, 0x8e, &(0x7f00000005c0)=""/142, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:44:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x2, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0x8e, &(0x7f00000005c0)=""/142, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2163.678744][ T3632] EXT4-fs (loop0): unmounting filesystem. 03:44:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000007200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}], 0x20}}], 0x2, 0xc0c4) 03:44:58 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x4800, 0x0, 0x160, 0x160, 0x62020266, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a, 0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) [ 2163.760577][T23992] fuse: Bad value for 'fd' [ 2163.778608][T24001] loop0: detected capacity change from 0 to 512 [ 2163.793771][T23075] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 03:44:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 03:44:58 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='4']) unlink(&(0x7f0000000100)='./file0/file0\x00') 03:44:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 2163.819753][T23075] Buffer I/O error on dev loop0, logical block 0, async page read [ 2163.849545][T24005] xt_CT: You must specify a L4 protocol and not use inversions on it 03:44:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x2c, r1, 0x1, 0x0, 0x0, {0x16}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}}, 0x0) [ 2163.877966][ T27] audit: type=1800 audit(2000000698.809:707): pid=24008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1154 res=0 errno=0 [ 2163.901355][T23075] loop0: unable to read partition table 03:44:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{&(0x7f0000000180)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x0) [ 2163.946064][T24011] fuse: Unknown parameter '0x0000000000000003' [ 2163.953151][T24001] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. 03:44:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000041) 03:44:59 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'bond0\x00', @ifru_names='gretap0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) ioctl$sock_ifreq(r0, 0x87, &(0x7f0000000100)={'veth1_macvtap\x00', @ifru_flags}) 03:44:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x7, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x0, 0xc, "f940174c2ea45269b27e"}, @noop, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast2}, {@local}, {@local}, {@remote}, {@empty}]}, @noop, @timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x3, "04"}]}}}}}) 03:44:59 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='4']) unlink(&(0x7f0000000100)='./file0/file0\x00') 03:44:59 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 03:44:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:44:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{&(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000180)="ab1e1af7f398f74785530f23e40572022742700742a978d3f3a5f9484bf0e6e8297e09d6a4f0a52545acfd777e7cb13f2670242c42d1d67bbb6557245d000b003d0b1f0362437e7f69ba750e1f90690311608f3a72baa2d0a2bbfe3ea89f440e81814f750ca1147d38510e1cedead25e3c9a6fac4093a7", 0x77}, {&(0x7f0000000240)="c9", 0x1}], 0x2}}], 0x1, 0x40800) 03:44:59 executing program 1: getrandom(&(0x7f00000003c0)=""/4096, 0x1000, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000001680)) [ 2164.154273][ T3632] EXT4-fs (loop0): unmounting filesystem. 03:44:59 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'bond0\x00', @ifru_names='gretap0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) ioctl$sock_ifreq(r0, 0x87, &(0x7f0000000100)={'veth1_macvtap\x00', @ifru_flags}) 03:44:59 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='4']) unlink(&(0x7f0000000100)='./file0/file0\x00') [ 2164.195442][T24027] fuse: Unknown parameter '0x0000000000000003' 03:44:59 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'bond0\x00', @ifru_names='gretap0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) ioctl$sock_ifreq(r0, 0x87, &(0x7f0000000100)={'veth1_macvtap\x00', @ifru_flags}) 03:44:59 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000900)={'#! ', './file0/file0', [{0x20, '\\8-*$/&'}]}, 0x19) [ 2164.268658][T24037] loop0: detected capacity change from 0 to 512 [ 2164.325469][T24037] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2164.363171][ T27] audit: type=1800 audit(2000000699.299:708): pid=24037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=17 res=0 errno=0 [ 2164.391637][T24042] fuse: Unknown parameter '0x0000000000000003' 03:44:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000041) 03:44:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 03:44:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:44:59 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='4']) unlink(&(0x7f0000000100)='./file0/file0\x00') 03:44:59 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'bond0\x00', @ifru_names='gretap0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) ioctl$sock_ifreq(r0, 0x87, &(0x7f0000000100)={'veth1_macvtap\x00', @ifru_flags}) 03:44:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x64, 0x30, 0x17b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 03:44:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x2, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)=""/146, 0x1a, 0x92, 0x1}, 0x20) 03:44:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) [ 2164.497265][ T3632] EXT4-fs (loop0): unmounting filesystem. [ 2164.512357][T24055] fuse: Unknown parameter '0x0000000000000003' 03:44:59 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'bond0\x00', @ifru_names='gretap0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) 03:44:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:44:59 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='4']) unlink(&(0x7f0000000100)='./file0/file0\x00') 03:44:59 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_ts_info}) [ 2164.627132][T24062] loop0: detected capacity change from 0 to 512 03:44:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000041) 03:44:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 03:44:59 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'bond0\x00', @ifru_names='gretap0\x00'}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) 03:44:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x18, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 2164.674751][T24062] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2164.696424][T24068] fuse: Unknown parameter '0x0000000000000003' 03:44:59 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'bond0\x00', @ifru_names='gretap0\x00'}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) 03:44:59 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='4']) unlink(&(0x7f0000000100)='./file0/file0\x00') 03:44:59 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='4']) unlink(&(0x7f0000000100)='./file0/file0\x00') 03:44:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}) 03:44:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 2164.788771][T24083] fuse: Unknown parameter '0x0000000000000003' [ 2164.791240][ T3632] EXT4-fs (loop0): unmounting filesystem. 03:44:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x8000000}]}}, &(0x7f0000000200)=""/146, 0x2a, 0x92, 0x1}, 0x20) 03:44:59 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'bond0\x00', @ifru_names='gretap0\x00'}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) [ 2164.861444][T24085] fuse: Unknown parameter 'fd0x0000000000000003' 03:44:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @mcast2, @loopback}}) [ 2164.929430][T24091] loop0: detected capacity change from 0 to 512 [ 2164.970972][T23075] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2164.980153][T23075] Buffer I/O error on dev loop0, logical block 0, async page read 03:45:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000041) 03:45:00 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='4']) unlink(&(0x7f0000000100)='./file0/file0\x00') 03:45:00 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 03:45:00 executing program 3: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) 03:45:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 2165.041849][T23075] loop0: unable to read partition table [ 2165.074999][T24091] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. 03:45:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_sset_info={0x47}}) 03:45:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) 03:45:00 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000900)={'#! ', './file0/file0', [{0x20, 'rose0\x00'}]}, 0x18) [ 2165.157471][T24106] fuse: Unknown parameter 'fd0x0000000000000003' [ 2165.189580][ T3632] EXT4-fs (loop0): unmounting filesystem. 03:45:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_sset_info={0x47}}) 03:45:00 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='4']) unlink(&(0x7f0000000100)='./file0/file0\x00') 03:45:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:45:00 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='GPL\x00', 0x0, 0x85, &(0x7f0000000080)=""/133, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) [ 2165.294951][T24121] loop0: detected capacity change from 0 to 512 [ 2165.322880][T24124] fuse: Unknown parameter 'fd0x0000000000000003' 03:45:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000041) 03:45:00 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) 03:45:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_sset_info={0x47}}) 03:45:00 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='4']) unlink(0x0) [ 2165.365427][T24121] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. 03:45:00 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x13, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc}]}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0x8e, &(0x7f00000005c0)=""/142, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:45:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:45:00 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) 03:45:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_sset_info={0x47}}) [ 2165.454337][ T3632] EXT4-fs (loop0): unmounting filesystem. 03:45:00 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) bind(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x2400000}, 0x80) 03:45:00 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='4']) unlink(0x0) 03:45:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:45:00 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) [ 2165.582549][T24146] loop0: detected capacity change from 0 to 512 03:45:00 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0x5421, &(0x7f00000001c0)={0x8}) 03:45:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000180)={0x0, 0x0}) 03:45:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000041) 03:45:00 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='4']) unlink(0x0) [ 2165.641289][T24146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. 03:45:00 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0x400448c9, &(0x7f00000001c0)) 03:45:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) 03:45:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 2165.722250][ T3632] EXT4-fs (loop0): unmounting filesystem. 03:45:00 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000010c0), 0x4000) 03:45:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x0, @pix={0x300}}) 03:45:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) 03:45:00 executing program 5: mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xf03c7d5465e85332, 0xffffffffffffffff, 0x0) 03:45:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x0, @pix={0x300}}) 03:45:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) 03:45:00 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000010c0), 0x4000) [ 2165.867707][T24177] loop0: detected capacity change from 0 to 512 [ 2165.942546][T24177] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. 03:45:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000041) 03:45:00 executing program 5: r0 = getpgrp(0x0) r1 = getpgrp(0x0) rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x82}) 03:45:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:45:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x0, @pix={0x300}}) 03:45:00 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000010c0), 0x4000) 03:45:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) 03:45:01 executing program 5: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) connect$caif(r0, &(0x7f0000000140)=@dgm, 0x18) 03:45:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x4e20, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) 03:45:01 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x0, @pix={0x300}}) [ 2166.106939][ T3632] EXT4-fs (loop0): unmounting filesystem. 03:45:01 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000010c0), 0x4000) 03:45:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:45:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, {0xa, 0x0, 0x0, @private1}}}, 0x48) 03:45:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000041) 03:45:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @dev}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @dev}, 0x10) 03:45:01 executing program 2: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, @pix={0x300}}) 03:45:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) 03:45:01 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @pix_mp}) [ 2166.327973][T24218] device batadv_slave_0 entered promiscuous mode [ 2166.333276][T24217] loop0: detected capacity change from 0 to 512 03:45:01 executing program 2: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, @pix={0x300}}) 03:45:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 2166.372903][T24215] device batadv_slave_0 left promiscuous mode [ 2166.401184][T24217] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. 03:45:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xfff}) 03:45:01 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xc901) [ 2166.425113][ T27] audit: type=1800 audit(2000000701.359:709): pid=24217 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=17 res=0 errno=0 03:45:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000041) 03:45:01 executing program 2: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, @pix={0x300}}) 03:45:01 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0x5421, &(0x7f00000001c0)) 03:45:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x0, 0x0, 0x8}, 0x48) 03:45:01 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) [ 2166.536685][ T3632] EXT4-fs (loop0): unmounting filesystem. 03:45:01 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pselect6(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x8}, 0x0, 0x0, 0x0) 03:45:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:45:01 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x0, @pix={0x300}}) 03:45:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}) 03:45:01 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) 03:45:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}}) 03:45:01 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x0, @pix={0x300}}) [ 2166.682191][T24250] loop0: detected capacity change from 0 to 512 [ 2166.768641][ T27] audit: type=1800 audit(2000000701.699:710): pid=24265 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1160 res=0 errno=0 [ 2166.799200][T24250] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. 03:45:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000041) 03:45:01 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80300, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000000440)="0000000000000000000000806856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="80", 0x1}], 0x1000001, &(0x7f0000000700)) 03:45:01 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000380)=@multiplanar_overlay={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3c531d69"}, 0x0, 0x3, {0x0}}) 03:45:01 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x0, @pix={0x300}}) 03:45:01 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) 03:45:01 executing program 3: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="e0", 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0)={r0}, &(0x7f0000000100)={'enc=', 'pkcs1', ' hash=', {'crct10dif-pclmul\x00'}}, 0x0, 0x0) [ 2166.892586][T24271] loop5: detected capacity change from 0 to 1025 [ 2166.924169][ T3632] EXT4-fs (loop0): unmounting filesystem. [ 2166.941604][T24271] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2166.986200][T24271] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2166.995932][T24271] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 2147483648 [ 2167.007908][T24271] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2167.057103][ T3633] EXT4-fs (loop5): unmounting filesystem. [ 2167.057967][T24279] loop0: detected capacity change from 0 to 512 [ 2167.120532][T24279] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2167.152067][ T27] audit: type=1800 audit(2000000702.089:711): pid=24279 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=17 res=0 errno=0 [ 2167.176870][ T3632] EXT4-fs (loop0): unmounting filesystem. 03:45:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:45:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) 03:45:02 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, @pix={0x300}}) 03:45:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0205647, &(0x7f0000000040)) 03:45:02 executing program 3: write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x8c, 0x200600) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) pipe2$watch_queue(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 03:45:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000041) 03:45:02 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, @pix={0x300}}) 03:45:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xfffffff9}) 03:45:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4, 0x2, 0x4}) 03:45:02 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) [ 2167.531363][T24289] loop0: detected capacity change from 0 to 512 [ 2167.601935][T24289] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. 03:45:02 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) 03:45:02 executing program 3: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) [ 2167.663466][ T27] audit: type=1800 audit(2000000702.599:712): pid=24299 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1186 res=0 errno=0 [ 2167.760100][ T3632] EXT4-fs (loop0): unmounting filesystem. 03:45:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:45:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000041) 03:45:03 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, @pix={0x300}}) 03:45:03 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) 03:45:03 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x161002, 0x0) write$damon_target_ids(r0, 0x0, 0x0) 03:45:03 executing program 3: socketpair(0x15, 0x5, 0x61, &(0x7f0000000000)) 03:45:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) 03:45:03 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$damon_target_ids(r0, 0x0, 0x0) 03:45:03 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @default, @bpq0, 0x0, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) [ 2168.516879][T24322] loop0: detected capacity change from 0 to 512 03:45:03 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, 0x0) [ 2168.564077][T24322] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. 03:45:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) 03:45:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000041) [ 2168.600398][ T27] audit: type=1800 audit(2000000703.529:713): pid=24322 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=17 res=0 errno=0 [ 2168.668741][ T3632] EXT4-fs (loop0): unmounting filesystem. [ 2168.792756][T24341] loop0: detected capacity change from 0 to 512 [ 2168.811822][T24341] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2168.832477][ T27] audit: type=1800 audit(2000000703.769:714): pid=24341 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=17 res=0 errno=0 [ 2168.864437][ T3632] EXT4-fs (loop0): unmounting filesystem. 03:45:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) socket$inet6(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:45:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) 03:45:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4, 0x2, 0x4}) 03:45:04 executing program 5: r0 = getpgrp(0x0) rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f00000000c0)) 03:45:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, 0x0) 03:45:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000041) 03:45:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @vbi}) 03:45:04 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) 03:45:04 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x107402, 0x0) [ 2169.431325][T24349] loop0: detected capacity change from 0 to 512 03:45:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, 0x0) 03:45:04 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000001500), 0xffffffffffffffff) 03:45:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000041) [ 2169.517541][T24349] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2169.532031][ T27] audit: type=1800 audit(2000000704.469:715): pid=24360 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1178 res=0 errno=0 [ 2169.615429][ T3632] EXT4-fs (loop0): unmounting filesystem. [ 2169.742550][T24369] loop0: detected capacity change from 0 to 512 [ 2169.756852][T24369] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2169.769950][ T27] audit: type=1800 audit(2000000704.699:716): pid=24369 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=17 res=0 errno=0 [ 2169.802806][ T3632] EXT4-fs (loop0): unmounting filesystem. 03:45:05 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) 03:45:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) socket$inet6(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:45:05 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0189436, 0x0) 03:45:05 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000080)) 03:45:05 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0xe}) 03:45:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000041) 03:45:05 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) 03:45:05 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000080)) 03:45:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000080)) [ 2170.346987][T24376] loop0: detected capacity change from 0 to 512 03:45:05 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x74, 0x0, &(0x7f0000000080)) 03:45:05 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000080)) 03:45:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 03:45:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x6, 0x0, &(0x7f0000000080)) [ 2170.429810][T24376] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2170.447624][ T27] audit: type=1800 audit(2000000705.379:717): pid=24376 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=17 res=0 errno=0 [ 2170.527399][ T3632] EXT4-fs (loop0): unmounting filesystem. [ 2170.618230][T24399] loop0: detected capacity change from 0 to 512 [ 2170.632244][T24399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2170.649457][ T27] audit: type=1800 audit(2000000705.579:718): pid=24399 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=17 res=0 errno=0 [ 2170.686164][ T3632] EXT4-fs (loop0): unmounting filesystem. 03:45:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) socket$inet6(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:45:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x30}}, 0x0) 03:45:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 03:45:06 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x890d, 0x0) 03:45:06 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000001b00)="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", 0x1fc, 0x4}, {&(0x7f0000002b00)="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", 0x1e1, 0x1}]) 03:45:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 03:45:06 executing program 3: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 03:45:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x30}}, 0x0) [ 2171.244326][T24408] loop0: detected capacity change from 0 to 512 [ 2171.251645][T24410] loop2: detected capacity change from 0 to 1 03:45:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 03:45:06 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2202, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'lock', ' ', 'mem'}, 0x9) [ 2171.322499][T24408] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2171.336387][T24410] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 2171.345087][T24410] loop2: p1 start 2863208257 is beyond EOD, truncated [ 2171.352689][T24410] loop2: p2 start 3340263851 is beyond EOD, truncated [ 2171.359508][T24410] loop2: p3 start 4048936393 is beyond EOD, truncated 03:45:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x30}}, 0x0) [ 2171.366393][T24410] loop2: p4 start 1792371683 is beyond EOD, truncated [ 2171.373405][T24410] loop2: p5 start 3435034538 is beyond EOD, truncated [ 2171.380248][T24410] loop2: p6 start 2291322350 is beyond EOD, truncated [ 2171.387036][T24410] loop2: p7 start 2915587923 is beyond EOD, truncated [ 2171.394418][T24410] loop2: p8 start 3551429829 is beyond EOD, truncated [ 2171.402050][T24410] loop2: p9 start 1423077699 is beyond EOD, truncated [ 2171.409464][T24410] loop2: p10 start 4286922412 is beyond EOD, truncated 03:45:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 2171.416534][T24410] loop2: p11 start 2109802936 is beyond EOD, truncated [ 2171.423467][T24410] loop2: p12 start 818395706 is beyond EOD, truncated [ 2171.502030][ T3632] EXT4-fs (loop0): unmounting filesystem. [ 2171.589830][T24427] loop0: detected capacity change from 0 to 512 [ 2171.593828][T23075] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2171.606846][T23075] Buffer I/O error on dev loop0, logical block 0, async page read [ 2171.616203][T23075] loop0: unable to read partition table [ 2171.632472][T24427] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2171.652190][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 2171.652204][ T27] audit: type=1800 audit(2000000706.589:720): pid=24427 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=17 res=0 errno=0 [ 2171.682941][ T3632] EXT4-fs (loop0): unmounting filesystem. 03:45:07 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 03:45:07 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x7fffdf006000, 0x1, 0x11, r0, 0x0) 03:45:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}]}, 0x28}}, 0x0) 03:45:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x30}}, 0x0) 03:45:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x21, 0x0, &(0x7f0000000080)) 03:45:07 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, &(0x7f0000000000)) 03:45:07 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x10010002) 03:45:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) 03:45:07 executing program 5: getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000140)) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 03:45:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0xa, 0x0, &(0x7f0000000080)) 03:45:07 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc1105511, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}) 03:45:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:08 executing program 5: syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)) 03:45:08 executing program 2: syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x8000, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}]}) 03:45:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) 03:45:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) 03:45:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 2173.134102][T24456] MTD: Attempt to mount non-MTD device "/dev/loop5" 03:45:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) 03:45:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) 03:45:08 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000000)={{0x5}}) [ 2173.182898][T24456] cramfs: wrong magic 03:45:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 03:45:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi}) 03:45:08 executing program 2: syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x8000, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}]}) 03:45:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) 03:45:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000080)) 03:45:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi}) 03:45:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) fdatasync(r0) 03:45:08 executing program 2: syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x8000, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}]}) 03:45:09 executing program 5: r0 = syz_clone(0x4000a000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x0, 0x5}) 03:45:09 executing program 3: ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="c74424003b000000c75424027c00e310ff1c2464450f01c2b808bde08eef66bafc0cec66b827018ed84783d3f10fc7b00080000064440f01c366baf80cb8dc3f7588ef66bafc0c66b80f000f00d00f01c4", 0x59}], 0x2f, 0x79, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:45:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x700, 'syz1\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 03:45:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi}) 03:45:09 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 03:45:09 executing program 2: syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x8000, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}]}) 03:45:09 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 03:45:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x4, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) 03:45:09 executing program 1: r0 = fsopen(&(0x7f00000003c0)='ocfs2\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000980)={&(0x7f0000000940)='./file0\x00', r1}, 0x10) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000640)='\xb9\x00\x00\x00\x00\x00', &(0x7f0000000900)='./file0/file0\x00', r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000040000000000000032000000851000000300000085000000bd000000850000005b00000085200000010000008510000005000000185800000a00000000000000000000005a48b45d0000000085100000f9ffffff850000005b0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x33f2, 0x27, &(0x7f00000001c0)=""/39, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xb, 0x0, 0x3ff}, 0x10}, 0x80) 03:45:09 executing program 3: syz_clone(0x4000a000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x0, 0x5}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:09 executing program 2: add_key$keyring(&(0x7f0000000000), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) request_key(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x11, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="0200000012000000220000006000", 0xe, 0x800}, {&(0x7f0000010500)="ffff0f00ff0f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x839, 0x1000}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000011d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x8000}, {&(0x7f0000011e00)="02", 0x1, 0x8400}, {&(0x7f0000011f00)="03", 0x1, 0x8800}, {&(0x7f0000012000)="04", 0x1, 0x8c00}, {&(0x7f0000012100)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff05", 0x801, 0x9000}, {&(0x7f0000012a00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008", 0x29, 0x9c00}, {&(0x7f0000012e00)="ed41000000080000d8f4655fd8f4655fd8f4655f00000000000004000400000000000800050000000af301000400000000000000000000000100000003", 0x3d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}, {&(0x7f0000013000)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af302000400000000000000000000000200000010000000020000000100000013", 0x49, 0x11180}, {&(0x7f0000013200)="ed41000000080000d8f4655fd8f4655fd8f4655f00000000000002", 0x1b, 0x11580}], 0x0, &(0x7f0000013c00)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r2, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "deb7a3295d176ea2f5b871d296ef60f16b47f6042a68ebda2d2367a31dd45abe91709fa61fd48efb0fd68ddfef96ade92078ef9970a7b9d5a8328c93bbf16450"}, 0x48, 0x0) 03:45:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000001340)="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", 0x40e}], 0x1) connect(r0, &(0x7f0000931ff4)=@un=@abs, 0x80) 03:45:09 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x3, 0xff, 0x0, 0x0, 0x9}, [@RTA_DST={0x8, 0x1, @loopback}]}, 0x24}}, 0x0) 03:45:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xffffffdc, 0xfffffffd}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r4, 0x0, 0xffffffe4, 0x23}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x4012, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180), 0x10) fsetxattr$security_evm(r6, &(0x7f00000001c0), &(0x7f0000000240)=ANY=[@ANYBLOB="05021100000008001cf24a6eef86a005b8bb38f673fb042ac596b6c7389d029f7df3633a84"], 0x25, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private2, 0x10, 0x1}}) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000800)}) [ 2174.976179][T24512] loop2: detected capacity change from 0 to 512 03:45:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) 03:45:10 executing program 0: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x42, 0x40000002, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') [ 2175.101134][T24512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2175.118666][T24512] ext4 filesystem being mounted at /root/syzkaller-testdir4072871385/syzkaller.f0y4ax/3927/file0 supports timestamps until 2038 (0x7fffffff) 03:45:10 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000100)='./bus\x00', r1, &(0x7f0000000180)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) lsetxattr(&(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x18000a0, 0x0) 03:45:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000140), 0x4) [ 2175.228643][T24529] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2175.266905][ T3634] EXT4-fs (loop2): unmounting filesystem. [ 2175.314300][T24529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2175.366951][T24529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 03:45:10 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 03:45:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKPG(r0, 0x125f, 0x0) socket$packet(0x11, 0x0, 0x300) 03:45:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKPG(r0, 0x127e, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 03:45:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0xd}]}, 0x1c}}, 0x0) 03:45:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000100)) 03:45:10 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKPG(r0, 0x400c12f5, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 03:45:10 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKPG(r0, 0x125d, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 03:45:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0xa, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) 03:45:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0xe, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 03:45:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000004c0)={0x28, r1, 0x209, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x28}}, 0x0) 03:45:10 executing program 2: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ff9000/0x3000)=nil) 03:45:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) dup3(r0, r1, 0x0) 03:45:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 03:45:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKPG(r0, 0x407412ec, 0x0) 03:45:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 03:45:11 executing program 3: io_setup(0x3, &(0x7f0000008280)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000008380)={0x77359400}, &(0x7f0000008400)={&(0x7f00000083c0)={[0x1]}, 0x8}) 03:45:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x9, @dev}, 0x10) 03:45:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) 03:45:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0xd, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 03:45:11 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKPG(r0, 0x401070cd, 0x0) 03:45:11 executing program 5: syz_mount_image$ext4(&(0x7f0000003940)='ext2\x00', &(0x7f0000003980)='./file3\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004e40)) 03:45:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:45:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKPG(r0, 0x4c03, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) [ 2176.917442][T24577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000001b00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:12 executing program 1: clock_adjtime(0x0, &(0x7f0000000000)={0x3, 0x0, 0xfffffffffffffffd}) 03:45:12 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="7e6ea53ed76f"}, 0x14) 03:45:12 executing program 5: r0 = epoll_create(0x6) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000000}) 03:45:12 executing program 0: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1a3a40, 0x0) readlinkat(r0, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/195, 0xc3) 03:45:12 executing program 3: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xa0040, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc028660f, 0x0) 03:45:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x5, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0xe}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}}, 0x0) 03:45:12 executing program 1: clock_adjtime(0x0, &(0x7f0000000000)={0x3, 0x0, 0xfffffffffffffffd}) 03:45:12 executing program 0: syz_mount_image$msdos(&(0x7f0000001ac0), &(0x7f0000001b00)='./file0\x00', 0x0, 0x0, &(0x7f0000002c00), 0x0, &(0x7f0000002c40)={[{@fat=@debug}, {@fat=@sys_immutable}, {@fat=@showexec}, {@dots}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}) 03:45:12 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKPG(r0, 0xc10812ff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 03:45:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKPG(r0, 0x125f, 0x0) 03:45:12 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000004d80)=[{&(0x7f0000003bc0)="cf", 0x1, 0x100000001}], 0x0, &(0x7f0000004e40)={[{@abort}, {@nodiscard}, {@auto_da_alloc}, {@jqfmt_vfsold}, {@bh}, {@delalloc}, {@bsdgroups}]}) [ 2177.832157][T24601] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2177.848102][T24602] FAT-fs (loop0): Unrecognized mount option "fscontext=root" or missing value [ 2177.856547][T24601] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 03:45:12 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000100)={{r0}}) 03:45:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891e, &(0x7f0000000100)={'gre0\x00', 0x0}) 03:45:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}}, 0x0) [ 2177.884939][T24608] loop5: detected capacity change from 0 to 264192 [ 2177.896576][ T2975] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 03:45:12 executing program 1: statx(0xffffffffffffffff, &(0x7f0000002c80)='./file0\x00', 0x0, 0x0, 0x0) 03:45:12 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 03:45:12 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKPG(r0, 0x12eb, 0x0) 03:45:12 executing program 0: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000880)={[{@uid}, {@undelete}]}) 03:45:12 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x1269, &(0x7f00000023c0)) [ 2177.940470][ T2975] Buffer I/O error on dev loop5, logical block 0, async page read [ 2177.977154][ T2975] loop5: unable to read partition table 03:45:12 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f00000002c0)='w', 0x1, 0x8741}, {&(0x7f0000000300)="f3", 0x1}, {&(0x7f0000000400)="aa", 0x1}], 0x0, &(0x7f0000000580)) 03:45:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xfc3ed8eba7a365e8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x2c}}, 0x2000080) 03:45:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x1c}}, 0x0) [ 2178.082953][T24621] loop4: detected capacity change from 0 to 135 03:45:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) 03:45:13 executing program 1: syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000005c0)={[{@nostrict}]}) [ 2178.124153][T24626] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 2178.137430][T24626] UDF-fs: Scanning with blocksize 512 failed 03:45:13 executing program 2: syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000480)={0x8}, 0x0, 0x0, 0x0, 0x0) 03:45:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x401000000001, 0x0) close(r3) r4 = open(&(0x7f0000000400)='./bus\x00', 0x104e042, 0x0) sendfile(r4, r3, 0x0, 0xfffffffb) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$binfmt_script(r5, &(0x7f0000000440)={'#! ', './file1'}, 0xb) sendfile(r4, r2, 0x0, 0xfffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x7ffff6, 0x4002011, r0, 0x0) 03:45:13 executing program 5: clock_gettime(0x40a8f1fb7d0508a3, 0x0) [ 2178.167731][T24626] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found 03:45:13 executing program 3: unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f80)=ANY=[], 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='k', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x2) 03:45:13 executing program 1: fsopen(&(0x7f0000000140)='selinuxfs\x00', 0x0) [ 2178.210398][T24626] UDF-fs: Scanning with blocksize 1024 failed [ 2178.250415][T24626] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 2178.278506][T24626] UDF-fs: Scanning with blocksize 2048 failed [ 2178.293895][T24642] loop4: detected capacity change from 0 to 15 [ 2178.312166][T24626] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 2178.329434][T24626] UDF-fs: Scanning with blocksize 4096 failed [ 2178.355293][T24642] Dev loop4: unable to read RDB block 15 03:45:13 executing program 0: r0 = fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='virtiofs\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) 03:45:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_getvlan={0x18, 0x72, 0x10}, 0x18}}, 0x0) 03:45:13 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000023c0)) [ 2178.378480][T24642] loop4: unable to read partition table [ 2178.398377][ T27] audit: type=1804 audit(2000000713.329:721): pid=24648 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4237320572/syzkaller.ZTOTNK/3562/file0/bus" dev="sda1" ino=1169 res=1 errno=0 03:45:13 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000000c0)={0x0, r1/1000+10000}, 0x10) 03:45:13 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000001180)) 03:45:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x0, 0x0, 0x0, 0x16}, 0x48) 03:45:13 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040), 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) [ 2178.414689][T24642] loop4: partition table beyond EOD, [ 2178.497696][ T27] audit: type=1804 audit(2000000713.379:722): pid=24648 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir4237320572/syzkaller.ZTOTNK/3562/file0/bus" dev="sda1" ino=1169 res=1 errno=0 [ 2178.514048][T24642] truncated [ 2178.607820][ T27] audit: type=1804 audit(2000000713.519:723): pid=24660 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir4237320572/syzkaller.ZTOTNK/3562/file0/bus" dev="sda1" ino=1169 res=1 errno=0 03:45:14 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x2000}) 03:45:14 executing program 1: r0 = fsopen(&(0x7f0000000000)='pstore\x00', 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='pstore\x00', 0x0, r1) 03:45:14 executing program 5: r0 = fsopen(&(0x7f0000000cc0)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='user_id', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) 03:45:14 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@blksize}]}}) 03:45:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x80) ftruncate(r1, 0x800) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x401000000001, 0x0) close(r3) r4 = open(&(0x7f0000000400)='./bus\x00', 0x104e042, 0x0) sendfile(r4, r3, 0x0, 0xfffffffb) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendfile(r4, r2, 0x0, 0xfffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x7ffff6, 0x4002011, r0, 0x0) 03:45:14 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) 03:45:14 executing program 4: syz_clone(0xc6280280, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:14 executing program 5: syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={[{@uid_forget}]}) [ 2179.153011][T24673] loop0: detected capacity change from 0 to 15 03:45:14 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0xc0481273, 0x0) 03:45:14 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000003840)='net/packet\x00') ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x1}, 0x48) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_getvlan={0x58, 0x72, 0x10, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x58}}, 0x0) 03:45:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) symlinkat(&(0x7f00000000c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') symlinkat(&(0x7f0000000240)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00') [ 2179.210353][T24673] Dev loop0: unable to read RDB block 15 [ 2179.241035][T24673] loop0: unable to read partition table [ 2179.246944][T24673] loop0: partition table beyond EOD, truncated 03:45:14 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) [ 2179.291385][ T27] audit: type=1804 audit(2000000714.229:724): pid=24681 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3777349395/syzkaller.ssCd8o/3570/file0/bus" dev="sda1" ino=1178 res=1 errno=0 [ 2179.293353][T24678] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found 03:45:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="5c4ced311180"}, 0x14) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[], 0x0) 03:45:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x1000, 0x1, 0x190}, 0x48) [ 2179.399395][ T27] audit: type=1804 audit(2000000714.229:725): pid=24681 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3777349395/syzkaller.ssCd8o/3570/file0/bus" dev="sda1" ino=1178 res=1 errno=0 03:45:14 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'tunl0\x00', {0x3}, 0x3}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'tunl0\x00'}) 03:45:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x4, &(0x7f0000000780)=@raw=[@alu, @jmp, @map_fd], &(0x7f0000000740)='GPL\x00', 0x0, 0xee, &(0x7f00000001c0)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, &(0x7f00000003c0), 0x10}, 0xc9) [ 2179.492683][ T27] audit: type=1804 audit(2000000714.359:726): pid=24673 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3777349395/syzkaller.ssCd8o/3570/file0/bus" dev="sda1" ino=1178 res=1 errno=0 03:45:14 executing program 0: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 03:45:14 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)='keyring\x00') 03:45:14 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x3, 0x0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) [ 2179.613425][T24678] UDF-fs: Scanning with blocksize 512 failed [ 2179.699303][T24678] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 2179.718478][T24678] UDF-fs: Scanning with blocksize 1024 failed [ 2179.735120][T24678] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 2179.751198][T24678] UDF-fs: Scanning with blocksize 2048 failed [ 2179.790320][T24678] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 2179.820720][T24678] UDF-fs: Scanning with blocksize 4096 failed 03:45:14 executing program 5: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0xe, r0, 0x0) 03:45:14 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r1) 03:45:14 executing program 1: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_BMAP(r0, &(0x7f0000002280)={0x18}, 0x18) 03:45:14 executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 03:45:14 executing program 0: add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 03:45:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000540)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:45:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000180)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 03:45:14 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) getpgrp(0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x10, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r2, 0xffffffffffffffff]}}], 0x24}, 0x0) 03:45:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000080)={@local, @random="7265e33d2c1a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"600d9f7613db34aad0bcfe5752eaf64074145b606fb687c78b0c2bbbd72a38748ab2b004b2c97f77502d4564bd9ef7ce35256f11c992e70b02"}}}}}}, 0x0) 03:45:14 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x3, r0, 0xfffffffffffffffc, 0x0, 0x0) 03:45:14 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKPG(r0, 0x4c05, 0x0) 03:45:14 executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x1, &(0x7f0000000080)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0}, 0x80) 03:45:15 executing program 5: r0 = openat$tcp_mem(0xffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000000), 0x48) 03:45:15 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0xcd01, r0, 0x0, 0x0) 03:45:15 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)) 03:45:15 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x10, r0, 0x0) 03:45:15 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x80) 03:45:15 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x2, 0x1) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) 03:45:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x0, 0xfd}) 03:45:15 executing program 4: pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 03:45:15 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000000)='user\x00', &(0x7f0000000040)='\x00') 03:45:15 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000002140), 0x6, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000002340), r0) 03:45:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000200), 0x4) 03:45:15 executing program 0: add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_clone(0x40140000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB=';'], 0x14}}, 0x0) 03:45:15 executing program 2: add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 03:45:15 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x2, r0, 0x0) 03:45:15 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "c0a7655f29bd7eec2f19116ee5a5414ac125cb14f545d303027f213ba4080109ec23658fca73646a2bbf725c8dbff370f6a4a2cba0b13d826990cc1a466e1c88"}, 0x48, 0xfffffffffffffffd) keyctl$unlink(0x5, 0x0, r0) 03:45:15 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 03:45:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0xd0, 0x1e8, 0xffffffff, 0xffffffff, 0x37c, 0x37c, 0x37c, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @private, 0x0, 0x0, 'bridge0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vlan0\x00', 'vcan0\x00'}, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@icmp={{0x24}, {0x0, "5012"}}, @common=@icmp={{0x24}, {0x0, "1a7d"}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xdc}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "45453478014f0c62a24f21d5da255c8c7f922c375c8bb068e4bc37b64bd96a321de1a78f232d0562aeabe1f181ad7df1b7572b215222fadb4befb18633f7cbf8"}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3b4) 03:45:15 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000440)={0x0, "0e6a1f0847733c9def0cfed33b9bdd6322c0b13f3b46137b4f88f179ef4a48be6b38131e5a1b8e9eddf30d606d250b874a8796309b0a36465cf4edceba6f8b94"}, 0x48, r0) keyctl$unlink(0xb, r1, 0x0) 03:45:15 executing program 1: r0 = openat$autofs(0xffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) 03:45:15 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x2, r0, 0x0) 03:45:15 executing program 3: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f00000021c0)={0xa0, 0x0, r1}, 0xa0) 03:45:15 executing program 5: r0 = openat$vnet(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$vhost_msg(r0, &(0x7f00000003c0)={0x1, {0x0, 0x0, 0x0}}, 0x44) 03:45:15 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x2, r0, 0x0) 03:45:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}]}}, &(0x7f0000000180)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 03:45:15 executing program 1: keyctl$KEYCTL_MOVE(0x1d, 0x0, 0xfffffffffffffff9, 0x0, 0x0) 03:45:15 executing program 3: r0 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x0, 0x0) 03:45:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000200)) 03:45:15 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x1}, &(0x7f0000000640)=[{}]) ptrace(0xffffffffffffffff, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) 03:45:15 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 03:45:15 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x2, r0, 0x0) 03:45:15 executing program 1: r0 = socket$inet(0x2, 0x3, 0x4) sendto$inet(r0, &(0x7f0000000000)="b0", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x200000d0) 03:45:15 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x6f691b50442e49d3, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000200)={0x80020}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="2400000012005f0214fffffffffffff80700000008001600000000000100000000000000", 0x24) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="68a62e2fb63386467a309336053aac11ad48e3b287a9cefecacd3ae2ce8c4aa8aa986ad8cf14e3d7264c7e9d3db562a82aa6595d817ef766dec10fc6b5d96b33ce1ba8264f39fd16baeb6801b3f93c414da916bc521c0338663a9e41a5abdcb96a751f695acb12fb192be8359ef59de619907c7d8f12b540ab6adb", 0x7b, 0x10, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback, 0x1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000300000000000000000ec0004000000ffffffef2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='D', 0x10002, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x0) 03:45:15 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f00000021c0)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}}}}, 0xa0) 03:45:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2081c14, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x910428, &(0x7f0000000140)={[{@max_batch_time}, {@resgid={'resgid', 0x3d, 0xee00}}]}) 03:45:15 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "c0a7655f29bd7eec2f19116ee5a5414ac125cb14f545d303027f213ba4080109ec23658fca73646a2bbf725c8dbff370f6a4a2cba0b13d826990cc1a466e1c88"}, 0x48, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x11, r1, r0) 03:45:15 executing program 1: keyctl$KEYCTL_MOVE(0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0) 03:45:15 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1d, r0, r0, r0, 0x0) 03:45:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=@newtclass={0x23, 0x28, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @tclass_kind_options=@c_mq={0x7}]}, 0x34}}, 0x0) 03:45:15 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 03:45:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x1d) bind$netlink(r0, &(0x7f0000000000), 0xc) r1 = socket$netlink(0x10, 0x3, 0x1d) bind$netlink(r1, &(0x7f0000000000), 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r1) 03:45:15 executing program 0: io_setup(0x2112, &(0x7f0000000000)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 03:45:15 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "554c08564d95555e"}) 03:45:15 executing program 1: add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000000)={0x0, "c0a7655f29bd7eec2f19116ee5a5414ac125cb14f545d303027f213ba4080109ec23658fca73646a2bbf725c8dbff370f6a4a2cba0b13d826990cc1a466e1c88"}, 0xfffffffffffffe9d, 0xfffffffffffffffd) 03:45:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) sendto$inet(r0, &(0x7f0000000000)="b0", 0x1, 0xfffffffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 03:45:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x1d) bind$netlink(r0, &(0x7f0000000000), 0xc) r1 = socket$netlink(0x10, 0x3, 0x1d) bind$netlink(r1, &(0x7f00000000c0), 0xc) 03:45:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x10}]}}, &(0x7f0000000180)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 03:45:16 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "554c08564d95555e"}) 03:45:16 executing program 1: syz_clone(0x1820000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0xcc, 0x0, 0xcc, 0xffffffff, 0xffffffff, 0x264, 0x264, 0x264, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "772bc3b1676a3bc32f945583f87381993abcbbd60378abb58f79fe4e3068"}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x30c) 03:45:16 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0xcc02, &(0x7f0000000040)=@framed={{}, [@kfunc]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xd7, &(0x7f00000000c0)=""/215, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:45:16 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) [ 2182.021260][T24806] EXT4-fs: error -4 creating inode table initialization thread [ 2182.029192][T24806] EXT4-fs (sda1): re-mounted. Quota mode: none. 03:45:17 executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="070066696530000084c7f316254af731d358dc6b2e6c65f051b149d84b8fe48ef617f541605a727237d55b36bea2cdbd3849f7c682418b3883ed7c7fb2b1a0e52368dcdcc1e2bcaa446939039244b217a95386da422d447ffcb15a97d3febd6f412b48b95190cd94766b3c5872360841aa52f20ade8cedebeaf58b3b57bce24de7c256372ec997a611430950b0a02cd58f4e5cdbf8a1bebc0bd89149d665c0f355b6ad2f109da8fa0e7622024c4da222ed2e80eae4c584f6fc"]) openat$zero(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$zero(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r3 = openat$zero(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, 0x0) openat$zero(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000f21508e82a004f00e9bf0000000000000000aed138757dc85b658500005c32d19be43a1283cacd9882ab97c36ab36d65c7d4115e2ce19b4c034ae0a71b7eea28fc619c1e970860acbc590bd06de3fc21844a135dee013205"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xd2, &(0x7f0000000080)=""/210, 0x41000, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x9, 0x20}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) 03:45:17 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "c0a7655f29bd7eec2f19116ee5a5414ac125cb14f545d303027f213ba4080109ec23658fca73646a2bbf725c8dbff370f6a4a2cba0b13d826990cc1a466e1c88"}, 0x48, 0xfffffffffffffffd) keyctl$unlink(0xc, 0x0, r0) 03:45:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:17 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1}) r2 = socket$unix(0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x2000200f}) 03:45:17 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), &(0x7f0000000080)=0x8) 03:45:17 executing program 0: chdir(&(0x7f00000003c0)='./file1\x00') symlink(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)='./file0\x00') 03:45:17 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0xc0189436, &(0x7f0000002140)) 03:45:17 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000480)) 03:45:17 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x541b, 0x0) 03:45:17 executing program 1: r0 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$smackfs_ptrace(r0, &(0x7f0000000040), 0x14) 03:45:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000380), 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x8000451a, 0x0) 03:45:17 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) 03:45:17 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 03:45:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) 03:45:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:17 executing program 1: open$dir(&(0x7f0000001080)='./file0\x00', 0x0, 0x0) 03:45:17 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) 03:45:17 executing program 3: shmget(0x1, 0x3000, 0x6aa, &(0x7f0000ffc000/0x3000)=nil) 03:45:17 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x0, @empty}, 0x10) 03:45:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x2c}}, 0x0) 03:45:17 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) 03:45:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:17 executing program 1: socketpair(0xa, 0x2, 0x1, &(0x7f0000000000)) 03:45:17 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000280)) [ 2182.885758][T24891] fuse: Bad value for 'fd' [ 2182.899810][T24896] fuse: Bad value for 'fd' 03:45:17 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) 03:45:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:17 executing program 4: syz_open_dev$vcsa(&(0x7f0000000000), 0x493, 0x18340) 03:45:17 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(r0, 0x80000001) r1 = socket$inet6(0xa, 0x6, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6(0xa, 0x2, 0x400) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xf) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x84100, 0x0) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @local, 0x10001}, 0x1c) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x19) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000380)=0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000002c0)=0xd25, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000100)="a4", 0x1, 0x800, &(0x7f0000000140)={0xa, 0x0, 0x1e4, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @empty}, 0x1c) 03:45:18 executing program 0: lseek(0xffffffffffffffff, 0x8, 0x0) 03:45:18 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)={[{@utf8}, {@utf8}, {@mode}]}) [ 2183.255712][T24910] fuse: Bad value for 'fd' 03:45:18 executing program 0: lseek(0xffffffffffffffff, 0x8, 0x0) 03:45:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) 03:45:18 executing program 0: lseek(0xffffffffffffffff, 0x8, 0x0) 03:45:18 executing program 4: syz_mount_image$iso9660(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x0, &(0x7f0000000340)=[&(0x7f0000000140)='(/,/&\x00', &(0x7f0000000180)='}\xca\x00', &(0x7f00000001c0)='\\)#\x00', &(0x7f0000000200)='\xf4*-:&}(\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='*\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000d40)='![l\\@&$/#^&%\\@\x00'], 0x0) [ 2183.517926][T24917] ISOFS: Unable to identify CD-ROM format. [ 2183.597609][T24923] bond0: Caught tx_queue_len zero misconfig [ 2183.613049][T24921] fuse: Bad value for 'fd' 03:45:18 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x8, 0x0) 03:45:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x10, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000280)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 03:45:18 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) [ 2183.745700][T24925] fuse: Bad value for 'fd' 03:45:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x18, &(0x7f00000000c0)={r1}, 0x8) 03:45:18 executing program 1: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[{0x0, 0x0, 0x100000001}], 0x0, 0x0) 03:45:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:18 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x8, 0x0) 03:45:18 executing program 4: execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x1000) 03:45:19 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x8, 0x0) 03:45:19 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x0, @desc3}) getdents64(r0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) fchmodat(r0, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) 03:45:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') syz_clone(0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40), 0xffffffffffffffff) [ 2184.106142][T24942] fuse: Bad value for 'fd' 03:45:19 executing program 1: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x5, &(0x7f0000000900)=[{0x0, 0x0, 0x10001}, {&(0x7f0000000840)="121188679ca8a26425dd", 0xa, 0x7fffffff}, {&(0x7f0000003480)="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", 0xfe6, 0x63}, {&(0x7f0000004480)="baab9710568b8e00d02c6fbfbb2e34323bc8d566e9f5fd68e8da802d921c18f7d9b2cbe32afed1c6f38fc0affe2ecf9bf84d99e99c0556e9f27b79b09c8858b2ef5f96be517e165febb8f2564ba46430f6a547c449c7797af03df06f0acdb861b4da31f26389a2612e4576261fb774a57c4794e6ddaed165505cb419500d48128b61a98406e8b4ddc422dd3ca30127a18dcff58d6ddc86d11b60180aa241ce5791c4a7e6c35b30aabaa7a2a9af0afd2b6266c8e39f2fac311fe1b4c30e955c1572a779e92322ed19183959089b0eeb84eda850e58e77af027f8fa1472f34dc6c928410c7fefc7a1531e174477d155cdaeab5d5a18ca2ba40794457f8ef98cc178b28f6f105d997a3e4fce9edc2c57eb892c55e4c60f2016190075ed4fcc4c1bae4aaaf3145c08f06558680137c4f4e018e53cd217a42735366877da0e60264799a19f8e10f39612b6068bf714198f94920a7c5a1c6fe83c230c4b2fa657a97f94836fe815f11c690dae3c2ab25e872ac94ac5f7edc8b45a93e129860cd71054f34cd83d2e4a57e3629dd96c0e7a184b6ade3d3b5aa6f5ae470b4e427256e5c06ace2252e7b7956615fdf8bf5c867cacbdc969ff69931a588c94f781e2a7406dcdcfb39dc6976f50fcff37df75d55f8edff37952b3c1d105ecd4553eadd420425d7afaa20124c465ac6ac7104ae5255ad3bd3be63fc56d38de9e20d0a7205c258bf8d0037165bf0b6bf198659bc5180dcc832ac89a9222a3d500780ed45c6e60d4db419590e8e3eb189176e2d8fbb4e09f9943e6bde77155303cda49ce85ef95938f34379a20f7ab617cf0af23c0671ed89c91e0a0681e99f94462bbad6bdebb3f4b8b81b2c55ff54ef9f846d2999add2c11d9ce8765c79af6b5b1054c83ddf4b5f5f908a7dad513839ffc1978e9c0dfe9dcdb620d83a8e70b1a38e32484053731544a12434c0ce469d630a2fcb899f53abf3a66ef5f4f3469f4f4f96c281c87fa60e8803803c92d3cd3f7697d69e1a822470e1168a3adb456c830dcd04a567844fa8bb9b13f1fbd581ab81f7eb05e492f4cd3d18fc981d61bbdfb714467caae671e2b981bf2d018d348b8bbd146f3125be88719f66c38d109874dc94ef1967f284421bd0ab963c4277a90f1bfb314bd3b59d9aa8d1bd91bd412b5f9d616b28e18d095b3d68588d4734781522b24539e40e0d95d01c5d4ff4fa6fc7f98a091dfc1680bb24e39d24ce9c7d33ee8054767d795204180d2db78f5b4d748032ea53927c704fe2a80663cf35eb6e8ca4163f6e9f2d800bccf001b8c0b69fa79af315a71795aec6593966eed97115cfcb4289741bdbe56723b783ff0a4f5d6faa6282e789a974057fbc85ce2961fb757e352d5d2c068d658ec5e5d1e5669f4309dbee4e50a843c6bc087104230244f56e895c1567225e660b6dd56b8a65d2a665470b907519fbb89253fa7d4146d47f7b1148877d11d953b364b5caddacaab5311b4c0e20f864db155bd25c04156b39e9e707672a196d58eebcf50a87cb94ec5e0056228360bdacf417175869b3300df0b71863b44c6d58933be5772942828728759ef8710f44ab2b0d140f0d81c9834b0be5e62fc30964470ddb75d51d6b79b46662c43293ab12a74bdf41a7ca7b033b81f44d27bbdc2d5abe59679dda8857eb9d6f7762e2a7221a47a71987caa9dcae0be19f7135a0b54843d9fa35042ceb8db6f67e2cd4f612bd220b739f8ebd8608583544052691ea62f96cf0293ab6c4b25e818dbcbc900a12e0fe1ed0a7fd2edf16d98c1b06c81c014a7922a8b2358d35c2fc725a08479226d9b373cf94959d30059bb6841b88f1ac859a99cc91dd97004490ee950514598f45378309544481544b9e707f020fee15f1a13edf11e370df516c5610e5b58049e99277b509c27ff143934befc078ba451278d23721c7778a9b9e8a466dce2c8595c91a03b5ff97f75a9a5d81e3afaa6eb91dac83ea15b89db3fe6a284a93b5fb8350521ee43866aaff3a1861cc3b7dd03909206c0767dc6e6462815682f94486e7058ddfb2fc3a9c24817e85f7b3c3806a3ba2894ec434e5cc08f71f2c5a83526c11767868f3ac4003346fd031ed043f74b267c0130eef715cebb2b554083af0c5c8a2dc98c75bdaf2cc20ba3dc75cfb1499bed5704f9721f5bdf121cacd225667395294bd8100cfbf36184d3f706b49aad9bec22c044000b3ec245ff82108ad3254c4fac8065ccc2ea1bdf4236aa31e75161de9a9974d5c4399ee19c3c9cbf786f5c441240751f93c67d3796e4bc0ee1f541cdc88af28c7fcd30864eb780a0e3f8fba190ca04388d2221b9b1fc181903b5fa7c6ad6b31b24368bb55e5bec406411521c2ee24ffa0a41a288395a38172f18ed81db2d197670122be781f793094e79173d39d14589487c716cec4db8d806b5f2fcf623a24af3a1df38dcaa3ded19479492352d20f40cab237ba2991a1912ee1e693e4e2a713a3c766037c4494501fb559313c164a7065a9126e918162f94a2d657c65f0b3f9496a2e026160e2a4a22e20897f4cfda303952e26c17f156530626e57c0a90fb7c53d63ec44512e8d551d784c80b30d9836f7f24af1e384011a227effb18cb9bb4dbc5e79842d7d841d94e7c5e7d7776336cfb5f5e2dfcb1670a99e7677b13c14f6aec1dcc101729aa29224b17226e02d62b35724eddc2590a8d85c4bf7a3a18719c0b820b07950c6c8be69fb0b2ec07c51b4e7be64d4d4b5a780f533a55f04500cfb2a0e3916ed6a046844e1e032c2dafa4c127ff1dabf420cbac9949a149ff332120d849cf060224a8662e5cffa317f4a979ed73c751197ee40fc34380a6fc23e35db824edf8c25e28100cbcc4a8da74ebb29333ff914ce593f2260981885aed3e7009567d6074affd70c1879a08cd87ac7f025b525e04ddf44b76f4db431c9abfab45b8045d28277a6dbd74a6dea13eb350e95d94891a33fbcde8b5b70256a84e8ac46532cd44acabcff17c60d67ac886d769c41e129921ddb6958147ef86c2027f17fc30435324fc33e5cf87781fc4b0ffc004d2c4b1c73605551b5b227931a87125046f58a57e46dd325525470d029d6b4dc8b5497c5dde6a71292588b031640ceaa8830cb5bab6bc1193af75840b7df759959f9050cbf2145cc9108fabfae02b1fdf7fbe9ffd1c7d4d535dd9c71164dad2c451d819c81f14d105000ad75e706ed8495017b53ad1002eb5838aa14dd66b97025cf517eb3ba9fb39c63b18eca0d3449ad6f8efc60cd12bf75f1ad0c75e9b5c570f45773a92ea76f529d50c7f66e55bac894f674c6296809415df4fc7ce3b4deec22d600645e39bfb9f2818ddb51388bda6e98b05999ed1aa1a5e18b1496563ec8b5261e772f3864077a06b016b670d8fd2386cbc03d65e9a51222fb024f4eb2fed86a6595bd1bff05072f463aaefc40527bb9a039ebadd604c24b5d8a0cd10433caf7a47a636c85b10b0fbd8c8850390a08d8b559c5ab8ee909bbc2d2cc35b08a53463c044ae239cb770b4eee78bc369acb94a79fe3d2b8f371365d7206279eda1d8c91d82e12cc79d765b631cf6e5ea596e4495aebec583f107dfe29cfc5525969b722d3a243a74b5c88b6100774f287123a56e6f89c7fe55f3eacdbdc8c25246cb29bb72962add414e5df1f836e52b5d116a1f90c147669831c9b5f9545912fda2ce5b5c35da014b11f3232576502bd7947b9816429050a479acf4904857785ef3df2f07bf986332653b473142bbe14d00025f68447b1049452817706dc26fdde70661077adb29dd7dccdf6b6abcff8d15be10b7095656cf01a1a7c4844d588e41ef95d177608462a2ccf46375324310814c2607a7a329218b8972b0325911b339af690c31dc00de276dceac34bf8b4bf8596ff43a6dbb04c73565eeb790963e5e80708f534876b1a0450e485576d94647571feac536420e9a88e8de6abfab23d5bc13002fd7fb0ca13943ef77a4d8224c4638e95bc7e9ea39d409685a1ceec8d1ff9782cc42e88e01fedae8cda83210d6c84628cff988b7186fc2dccb0b46f376d9892461c647717f804a14c19db93ab2ed9f5b7afb6d9bfc6fc99ebc88ad20ff7fb732117c569bbd665dd7d4e32e713eb9dc0023b6f78e033c99e29da9bb26b44aa549df39a4f555b48efcdc1a5bbf453378f7881ef0f91d458b1ab9597f1cfd1bf40452f4f58ed7df56cb5d41e44219477924b3218ad27b640669d751bda57268bf199de82ad98c9ce4e9cdb22b5a2ff5b34f6acc2d32fde782c38764ad11f251b541a42ace2df93ad055a2bcc851c8622f3b5cb394ab6788f5db58a8b378c09efd46a31047030a73417dd20b6028bf2b586dc90e7896c8de66074a804a0c960c9ad71ce87f5a9f28cb952bb3b9a8034bfdd4ae4b89fbe3d92f4d52bb4a1ad9f44b27459796ff027b8cb9b2b564a5481c8837e9f5b75f51522d4669f73454ace027c395ffa126176d6040edd509c0c66def310a0fd25a768b14269a2729f9aaea3c722af0f845dbf524c0c7b906cc90c3eb668145d1e6cf0bbdd355ef180e8d909faed1995a12fc406b016ae531038885324694a3996f3bdc6faf12d590d811485f38cd2653f01dc2955925b89ecda7c1c10394be316ff1941d52bc3d901260810d2e1a94a99b0fdd42fd7086e1b2c01318be980ae9cfdfa10f64930b4b0a315e4396abe12647686bec6b0dabc934c4e69694f9dc41d28c7d3383c6f3ce99d818378a49c9ec9ff4877aaab6d5dc42660600c534c7fd469005077325c1e2182883db411d24fd2a40e21174b43bf18161e9df005d97a63177fb49f7795dd94a515b1ca81fe4f268989541a4eb421970aad5c9838b8fe9dafa20c5ba5ddc9ddbb06de0ab83e28dd4495173e1cedc37f0b1e1030c7ba3a810a5aec1ffdc0ebc7da619f84d3cc8c7417719107f710f19cafc1cfc0aaa3f254672b5ef178a080620833fc743b2fb4f56c589b444924146df91fd4872ffb4a4572cb7a522f2d0df53085d0ba03d49b387248090e96d17fce555e978853d0b9dc6e09ae80c56ef93dedec4176bb38d99c1af366c5ca6774d6451ba82f6c826b3a1ab7ed5b3bccb413bad8400348d14a5ce7f71670145f25dee9f9b57a256770cea77874b020f63f7ce941b47a4eff2f5f681705aaa2ffe13ba8a47bf3804b1c064a346cd7a2d67a4b2106f308220a4aaa0b4c9692bf2d9868875b9c8d5b6887bbb36feac8c25354ebf8d35ace67c0ada8903b5b5f17e17749127ae329ef70dee71ad689ec69d18e711e50d18589402a2ba8c226884a530b3f48a2e51e242e41818a3945f8a66a563b6ab13e0920a4b654ca3d306dcec83c8dc8e6270c1539545b5e1e9b04e6bbc3af1b9de6f7373f7fa805c51887cdbf9ad6026e3c38ce61f207292d263f6c875167a85e5985a2e971e8a174b9c42e187f32c64110abc1f5cfcc5ae1ee58f22475f6eaca0f3401d1c16d16430d7fb7c5b88f90d7e87a4f2ce74a7628cc4134ee604ce7f9cb9623700120cb7ca84cb88f126b7e1bcc9efbfd9b2c5a780d4eda57af84518cdee5b193af938d08fa1db15e6ac69a8b7043a6e6287372df84d202fc1736ea0ad4412af93187042b19963620187b4b59e0ad1ae69517a8e0b38ebb3603fad24f2ff5fb3f4283f53ceed43029e9a490bc41d65f04a342aa5d619d1e28e7b155fa6c661c7355ca0bde5494adc80260e9c74976c11e4266f7d799d54a98a5f893a7f1df4b3e1699f1755cb7f1aa3bcfcd2ccdadb172c08902f2e51548b9877438a1f30f055ad50978ba341e4f5e", 0x1000, 0x5}, {&(0x7f00000008c0)="953ed914ff653265af7a8766c2b54bda75eb3c", 0x13, 0xff}], 0x12400b1, &(0x7f00000009c0)={[{@mode={'mode', 0x3d, 0x7d8}}, {@dmode}, {@map_off}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 03:45:19 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x8, 0x0) [ 2184.212954][T24949] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 2184.252625][T24949] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload 03:45:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000280)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 03:45:19 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x0, @desc3}) getdents64(r0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) fchmodat(r0, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) 03:45:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) 03:45:19 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x8, 0x0) 03:45:19 executing program 3: syz_mount_image$iso9660(&(0x7f0000000e00), &(0x7f0000000e40)='./file0/file0\x00', 0x0, 0x900000000000000, &(0x7f0000003340), 0x0, &(0x7f0000003440)={[{@hide}, {@check_strict}]}) 03:45:19 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000280)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 03:45:19 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x8, 0x0) [ 2184.723958][T24968] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 2184.758956][T24970] fuse: Bad value for 'fd' 03:45:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) 03:45:19 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 2184.777448][T24968] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload 03:45:19 executing program 4: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xffffffffffffff01) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x280) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) [ 2184.961910][T24977] fuse: Bad value for 'fd' 03:45:19 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 03:45:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) [ 2185.157132][T24984] fuse: Bad value for 'fd' 03:45:21 executing program 2: syz_open_dev$evdev(&(0x7f0000000500), 0x3, 0x501) 03:45:21 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000e00), &(0x7f0000000e40)='./file0/file0\x00', 0x1100, 0x0, &(0x7f0000003340), 0x0, &(0x7f0000003440)) 03:45:21 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 03:45:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r0, 0x1000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x2, @dev}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 03:45:21 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, &(0x7f00000003c0), 0x5488, &(0x7f0000001380)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x4000000008800}], 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, 0x0, 0x0) write(r0, &(0x7f0000004200)="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", 0x7ffff000) 03:45:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8901, &(0x7f0000000ac0)={'wpan3\x00'}) 03:45:21 executing program 0: syz_clone(0x40020400, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:21 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@size={'size', 0x3d, [0x25]}}], [{@uid_gt}]}) [ 2186.299201][T24992] fuse: Bad value for 'fd' [ 2186.305968][T24995] loop4: detected capacity change from 0 to 8 03:45:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x491}]}) 03:45:21 executing program 1: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) [ 2186.372451][T24995] Dev loop4: unable to read RDB block 8 [ 2186.378092][T24995] loop4: unable to read partition table 03:45:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b80)={0x14}, 0x14}}, 0x0) [ 2186.424402][T25008] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 2186.435589][T24995] loop4: partition table beyond EOD, truncated [ 2186.458897][T25007] fuse: Bad value for 'fd' [ 2186.470918][T24995] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 03:45:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) 03:45:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x800}) 03:45:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000106}]}) 03:45:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000015000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="08000900eb186885b205000efe8a000008000200e00000010800041414aa08000100e0ff000208000800220100000000ece51e11b348c79158f51133fd"], 0x48}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c00)=ANY=[@ANYRES16=0x0, @ANYBLOB="02002bbd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="d002028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080102805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400d500020102000000b5013f0105000000000006ff0400000006000104050000008b377504000000003800010024000100616374697665706f", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c656400"/46, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300"/40, @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYBLOB], 0xa80}}, 0x0) 03:45:21 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="bc", 0x1) 03:45:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0x8008ae9d, &(0x7f0000000000)) 03:45:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0000103}]}) 03:45:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010015}]}) [ 2186.631435][T25022] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2186.664215][T25019] fuse: Bad value for 'fd' 03:45:21 executing program 1: syz_mount_image$udf(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@session}, {@noadinicb}, {@umask={'umask', 0x3d, 0x100000000}}]}) 03:45:21 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x4004743d, &(0x7f0000000140)) 03:45:21 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x200, &(0x7f00000016c0), 0x0, 0x0, 0x0, 0x0) 03:45:21 executing program 1: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) fallocate(r0, 0x0, 0x0, 0x9a) 03:45:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 2186.879600][T25044] fuse: Bad value for 'fd' 03:45:21 executing program 0: syz_mount_image$udf(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@session}]}) 03:45:21 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) 03:45:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0xa80, 0x965f0a1440cd7d6c) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:45:21 executing program 2: ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000000)={0x414}) getresgid(&(0x7f0000000780)=0x0, 0x0, 0x0) r1 = semget$private(0x0, 0x3, 0x50) r2 = geteuid() semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r2, r0, 0x0, 0xffffffffffffffff, 0x50, 0x1}, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1c}) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x10, 0xee, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x35, {0x9, 0x21, 0x2ede, 0x7b, 0x1, {0x22, 0xf25}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x7f, 0x84}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x40, 0x7, 0x2}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x1, 0x1, 0xfe, 0xff, 0x10}, 0x36, &(0x7f00000002c0)={0x5, 0xf, 0x36, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "7cc5f8ddf91edcac32e13357aa1b1ed5"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x6, 0x7f, 0x7f, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x3, 0x59}, @wireless={0xb, 0x10, 0x1, 0x4, 0xcd, 0x80, 0x42, 0x3, 0x20}]}, 0x1, [{0xf4, &(0x7f00000003c0)=@string={0xf4, 0x3, "9b85a3a7056cca65b3e0751948f6a858e84096f2642a5813197cfbee274760eb0ee48ec6ba68ee29121fe5e96d33e22f3b31e0925b90bde0bea48d10c00b59853aeae771cc6b8c40be616a06d33d39dddfb664393e799b758f344459c8140df57c31237228f585bfc6111701474adb87b7f20e2319d879d92d61236741bc1aa9c7563113e34d2f0fcf3bdb032d1bf2cd82c424d6f74ab304521169f1a8c40d051e77b6f9960f3ab666e4104ac77f0cd600561e6d84756cea463772a88624319b301423f9f8120c9bfd552d2fb24783acd6b460a0502e04eb881bf730956ba429e186789af39df5e2d215b41c34b028100dc6"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000880)={0x24, &(0x7f00000004c0)={0x40, 0xb, 0xba, {0xba, 0x30, "d87855fa245ad9d03424ed71bf4ce86a5f3527f9c9fe1702ab3023ab677d9e40bcc5cb82a8d40dd4a5ae7fd69c1d48dd18956012e2113ce1a21c52d94eb02b6b2e3d9820068ed2e48f397d07e31ff96f528d1a1bb9d82bc1e4db2a69d7c26be9b190e7fcbb278dd260462a9a6bd0f52db3dedff882124f41839a482f1239c51dcfe12ea932ff34509e341776e3863fbc22d880e7c12d9d2d310ccbe4b01ee7a5b5723261f5d23ac38cbc3672229a4291ce580247b41c40a4"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}, &(0x7f0000000580)={0x0, 0x22, 0x19, {[@main=@item_4={0x3, 0x0, 0xc, "4323f357"}, @local=@item_012={0x0, 0x2, 0x7}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_012={0x0, 0x2, 0x3}, @global=@item_012={0x1, 0x1, 0x3, "8c"}, @local=@item_4={0x3, 0x2, 0x8, "85931caf"}, @local=@item_4={0x3, 0x2, 0x1, "fe908c53"}, @local=@item_012={0x2, 0x2, 0x5, "27e6"}, @main=@item_012={0x1, 0x0, 0x9, 'N'}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffa, 0x81, 0x1, {0x22, 0xf1b}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000640)={0x20, 0x10, 0x7, "d7061eb870b79c"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000007c0)={0x20, 0x1, 0xac, "cdfb2ef274b78c3412a96eb5d01409a40079b616b519c132397ff996b095a108f21767fcbc7566c98360f3cc20ad8cc1ed4dc010f55bf8b95161cbf70b28ae183f492c34706b6ae9ab9a1557251e51e7c2963a2c02d899b1b3a3450d6b875418c859cb1d88eeceab2b30dbf10a236e19c337c58e1e5640eceb4988f8967e59799e9293d64e8546e8747b48e0367e21d0460e3273e199ebce6c4e378537a6aa425ea38c2d4399f0877c570076"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x5}}) r4 = gettid() r5 = syz_open_procfs(r4, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x6c, 0x4a, 0x1, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0x0, 0x6}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x40) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000380), 0x2, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f0000000080)={0x9487}) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x5) 03:45:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:21 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x660341, 0x0) 03:45:21 executing program 3: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) fstat(r0, &(0x7f00000007c0)) 03:45:22 executing program 1: bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) [ 2187.005335][T25056] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 2187.027955][T25058] fuse: Bad value for 'fd' 03:45:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:22 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x35, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) [ 2187.073030][T25056] UDF-fs: Scanning with blocksize 512 failed [ 2187.085096][T25056] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 2187.102744][T25056] UDF-fs: Scanning with blocksize 1024 failed 03:45:22 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007880)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2187.118628][T25056] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 2187.133404][T25056] UDF-fs: Scanning with blocksize 2048 failed [ 2187.157027][T25056] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found 03:45:22 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0xc004743e, &(0x7f0000000140)) [ 2187.168664][T25056] UDF-fs: Scanning with blocksize 4096 failed [ 2187.176096][T25068] fuse: Bad value for 'fd' 03:45:22 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 2187.287492][T25075] loop0: detected capacity change from 0 to 512 [ 2187.302441][T25075] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2187.340283][T21748] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2187.352903][ T3632] EXT4-fs (loop0): unmounting filesystem. 03:45:22 executing program 2: geteuid() syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x35, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xf25}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) [ 2187.630962][T21748] usb 5-1: Using ep0 maxpacket: 8 [ 2187.830589][T21748] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2188.040440][T21748] usb 5-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.40 [ 2188.070347][T21748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2188.078399][T21748] usb 5-1: Product: syz [ 2188.090816][T21748] usb 5-1: Manufacturer: syz [ 2188.095488][T21748] usb 5-1: SerialNumber: syz [ 2188.162717][T21748] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 2188.370324][T21748] usb 5-1: USB disconnect, device number 79 03:45:23 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) 03:45:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:23 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 03:45:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}}, 0x0) 03:45:23 executing program 3: ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000100)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @name="239e5b0607af6c528b30a5df32680b71d1355f38c6f4f79f0957303d708199d308846f308e4d6fa7e0db38010599f2ec32bd2ce873c8d6d50c51c915add9edeb9ba1101ba9e8b26f4ff46a7aca9c042b95ad4d912881506ade3e10f42c49f5ba39ebb191fe4bb84132274923f7459fcb4ab9f19f6dfecf556d4111bbdbb8866f32a69406607c0997914cbdcf71ee9c4cfc6c9893e965d677753ec047a7466f7fdd4a9f42b23d5e926ab528b230ae86a0b20bbc9e444f010e1e1a9c2b61a21b56e15865bef1ab2b2a3064cbfdaf4e61de54a61b20b6229bcc394d0521a0ad9e364b70769e22b6400fc4017a013e03fb4f5f15b91fdf5e4997884feb8e5084b94088b641bc33ad05a9065edfdfd7fb04d18d5a385ebb2538d8d2debe4af2f389bc15e0925ff8a08d07e441c70f5459b591f6d5b4695c6952cc864e3012f970ddf5e75a3a855585ab4b6415cb2d1efe15699d3528f381703c5880c6c82503bfb82b2fe3610415844fbf05f1d5d70f854b78f0f6b0bbb973259bb415f6bf842beb9af3dd43f8f688bd1f007fbdf6f43824d6e6dfa2b76d6eeb0f088eaccf3dc29d07de2e64cd884b27995ceb5b1df49c4b160e5dcb5603f073bb42bdcbb59104ecb596ec87355e4481fac6c2006984c40d0d8faccfe75a481ffa686bd6f96f07080eac62c1423ee52506b6181aa9e996cabceb921776b93201914ae56eb3003dbd7625f7f79759ae1b2f0e71a0599302f83544dcc4b2011e7662d55a2778de799ef61a2f754bcf6c998b0de65e1e67c8d6b9c4c74ae6207d22a4cc5e646281879335c1eacede0f3abdf665adadc7b4ea1842dfe8741d758b0dac9e4b04691dada43907f93b30a3eec3c78926a6fa8d0f318a608f1b28f90c245917352e4558a95854fc60263f08291a0677ec16fc5876171e5720c6b7c1cc5dc971ca956bd0e223bf78f6fa4ca020de3a037209766b41ee33b52bbf8c4ed8b606d76cdf8766e9578501bfeecaa1bc32a5e38ce0c3fb31cf366f888cf5332d99ef3cd87edc210b3340b324b3306363dfb147263a47e80c53057a44f6aba7155d9a447660c2f05916a7078bd4c9b318c56b4673989f6187de7082e2953be65bbc3a4aab9d02fbaf58d98eaa9bb55d2c48a6c7a158d7c64058f29d36502b6d6a38d3d91207fecb05fe21293a666d9c618ce6a64660a3667dd7f34a7a0aad3c59d14546503cfe4c6e2ba1f920a4a8cb7a34140b7e2bdb64217e31934057f756dbc695a5477098ed17cb476bf2ef14c88614089bde44839f0e3a4f2ab0ca82a85bf5a154a7ff106d366cfe7892a51b3c6c17c1de3cf7b469e54bc1f5a1e97cbcdc785f00cc980d36246d1d171730d5119e98bbf7ac44ef0db262477bb17aa83dc757e6bbda4b65eee7cbc313b281827df04d9a6ff9cf721446e2191f55dc219e4e73e73ff3f5780a86133234de127ef6cfafb986a093545f3b6f2405d3e1d8ba27d40828122929a34e3c745c0917f37f685683fd4b1421c609bce8865e91f5fd7d26b0129d9bc7decf4e04555f798f119371eeebf4bbf19496c2eab441b0209f9ef2d7cc15f961e024f4fdeb4212645c5789e0b7e7aad00044a36f7ebdd3a5c641dd0a6e32f6095403179961088c2664ef67d37c0365d860c3d0900eb6d90f91eb2be067ff41c60a3244fb3af88ed9bd65515a4f016fb4fa86794be7edb01ba74a18b60de3a614620d1f53ba31d18d6a7fa30185a6c6251c68aecdac333f2ae135f7aff025f29d9865075ea8a1f183d158cdcfd3d2d7a4db060522e4d969424edababe6405659f5438055a0f1aa17c417d89775a496a61baf8bac95ef46b6057add586266528fa3eb6c071e3f39d8394edcdb79409d5255a7385abfde8ff4b211957925c7b27362df9496f0c398ef559dd2e6dd64de483d332d4c8494b0a21a46e2eb5654bb6ab4aaa3dca75890b6438650a394b64b45be8be9476df807df8bf1991d38c54e9a67f581e3219197230d20fe8a4abc709bd49adf5b5d0b134fa919cc340e6840231dd5fe5faca752375701ed2d227c7a2a744e2268f7545a6ca328fab98ab8cffbb222527726c8c967b95dc5e233438be0b36e03fb2931128276831154848f63fb33de8af1ac09b4707b0f53e928d34a891abd2b5310f722499dfc7fa2176d3e344db48057eb58af5a6ae669c99fb5cb9ce84a0f9fbfbf9965e58b9dc8a43f356a0852716d1e08fc97cfeef68cc336a5535ada0fe3b235e9cda4aecd48991df6ec40c2536995e7e6a7c3b6eb3c78c2bed3b7c0f1368c5e95b2d44ccc56e61ccc5ef09e76509a75bca00f05328b455f9a015e7bacf429d5761c58c0c6d324b748e58aa2433f180f674fd61169c8e1fa076b0af3c41a591ab0f70aef9bffa41468fe88c98b14a144940468d028bae34a27597c7a049993b7b95c21463f59ee7212983cc38df11d188a90222bb6f637f565c0000c695a6303f325dbd72e6cd562a42130e4e7aa0bb20388c17cf05924baecea0770d78bed099abd9f3dcd6a591cffbb3c4f0cef0299d4be1fe30214923e687ddca5494ec6c65a59df1c71caa7ca1701bdca3f3b32ccd8600defcbb62310918730934f4c30420b9aab1f69f58f22607ed9bb4ffa6dd14e16e3318bba85b68844acb12481b73c7c0b857f62c18ccf1ca4274826a238366659caacd431fb7cb2e7fe8c4b1c3fd12bc22aec6da4f1a7ef4decca72bb2363adbf5b359c4013c2199e9cb2fd031d97f419616b9a8f80946d7a3aaf9ac4ede20a0684ddc66964726c9631b6160fa961e6ae4b5bcb8f1faeb4ec042056abe2246dfce271e9c40039c7c114161aebe924f80691bb38ffcb768fcdc591ff8afbfa270046ca517919560e78cc003034a51f01ac929da10eb164edfacff5c074333f30f1cf7c5aefd6d34763f96eb804435cf687e70aac9cdd623a2a903f2c6017902e13b794feb50e23aaca6fc1c5687c555f5ef32f344045870bc565cb84fb55f4c2869a0ef882c8d9bb7b3c050e50e1801adc0352d3a327b3eac5f93d090fea5686e6f1ef38f277485bf4fe26d7e661d19c5be56875786130e6cb4a6fe969152c68ebb1116930dba70b3a17fcae34e10d31526e287e255e0abe6a60f02c82eaf43fb7d04ca803424f78254b3bd627137394de435124bc8630c16d34b816a0856601f5a38dd710eea9b01357b11470716830c6bdb9450e8b591f4273575522fb5064ce27fb841ae9c2e19ab199ac48a5acf121ffd2b9f58d724497424714e17939236a8ccb589458e8ce5a64c48f543bec8b6237fed63961e96b7437776fc52ccdfd18a39e00d48233324a26f9998f641ab5f9eae5f1d417b254dbaf477bc12a7fde10dbf378590b227113463d5761f4e0a261b4676951afb884f7ca48f400fac64e3acf157775e18021c77b327bdfd644a065f363b9d0bc9e4a19cf3d620aa33a41aa3ba12e989902b8275e89bc29bb20b713fb1b16f8633c25d4e567e71c163f241483e9d2f3ebe65f5b2b9581d3bf670fc527331e24c25ee39f6d71de0e5d89dd6f8b179320393918cfe98fc44681a1282cd21122d8c8cde79cddda7c37e42f179bfc59f968d0a4f7bc05605a62baef69d629b28b14bf574d2c3a5c5e8a3aafa3860fc64c2e77fa18765d6856ce436fd77eb6485a68430dc4d27abb60718899e97de411c2e67329ba7f9a426348fa14d49ed3dc9dcc5b120107dc168485899b1afcb43c5f1b2a263b10dbef8c10e03c1c70be7cf239cde92d311906b18aa125e261ee0f474034f72c8e56724d376de14e25357bb244e81baab1f697a2936ff45857faf218b8046758b9eb84a5ee6ff29934c96ff1641fa4c82de2e385021e7da75112f3addfc21eb761e9f3b8c89c210b3767678d0aa7d6bc489824a56c2a464df1b46035956d2e53e1c635584fdfe9d5c2c7f09ff4512ff4533fd2e8e972ea8ce94e3b420e7fc4080f998c1f5d45157175b46a7f47638f1f58ac21f34566fa973a22d1b5cd54277c88580073720ddf7df6d72472c25f39575d2e6408dc2455558afc9d693911f3112c838f3be1d9b950a72739205e3f927c2dd6ff755ea95ed2fc9a57f7779f3cacc291886f2a227acd1adf7e31ec8d6ebd7d57f0d1054a1396a94c17114b128c438205986aed773c981a60c448a929a07b6405b6476a055b09f1b3464034881a65d1bb801706ae15ee334dfcc6306a594308015755c05e3e13653841c8fc9680b80e6b3a5579f2c0ef5bc88c554d98571681aaee04a38eea5bda5cdeed7e8ac99e277b13f47ba0daac41656e40f233b738131f38400b7a21940163f69928f7194742ecebfc940a29fe87f45533a54aa5a8ed677098259c792a056f976e6b3dc2ea3afe2e05a2ac66cfce7d30f6781c47b6e9fa361ec0fbdb3f090e6a44bbfb680940dcf2aa8a7d5c8237ac2f6621f7098ffef6ffc71000f1555cf110920103274e819e3162304e03350caf156cb6cedc68d71ee00299c9d5f0ccd12b9ca9d6a5e50ad5bebf146521825ce1967f5458e75ebe4d7619e38760aa7c3c33aabbd2e41015b6790f318ed9e9ddde4112ab56891231f8301590a1b912a27f9d07f056957a2ef78d68460c7abed1d22a7b86e5b3c1c1151cc4f6afe522cd6b0fdc8a44c4e56cf3f8156294dd0f91460f23c58a358b94bf1da7646ff932a7337e2655598c6123a7b516affe03566d71655ab8cdcf372a2661fe1b11a18b118b9234f5c4020792e12049244697b0817cfc920631ea0b826f938a3ff8fa68843ea2d653a660298d1f5275febad19e0709ae6ea5dbffcb3913b5dc1d750a35c072ee2de5f5ff09297b165d0c35827719b770680580228feab38176c92ad54d57de64d2b0de4b64b0e78262006947ccd7f153edfbe33df3136eee8ae379cabc7efa5acf91477a03e24d8957f3ace807d1a56c81da4e4f01f7052bd7a89051d67425d5c8a1e7f34ba3ba576a481b7ed3f210b179956f1412d21fc882b259a313fae8f3759e132945c769700a3c23380f9391a3b8f62ab038eb234b622acd9ecec2e79643bbdff0073724c624458a5e3c709409be90beac94627afd8564ee11788eaf4a61e13985dd92648bdbf0dbf10d43add0efdd5cda83b270f5d3d81ea2620d605a6b2cdfc0018696640f3b0aa53bcdf27f950a0ade8348b56f5df0104ee301fd92d765bf2332a8151049d64773923a25a693688b9eec709a033be9855f87d6b115db95c87a5d7e08b934233ffaa3ba98c4ecfef895256ef6f6435deb9850db32460fe963ec7ed0061979084ffbf2589e607cc69ad7690ae204a968f4f234f8e2376d95018cc09038675c15bbc56e7589828c978e40da5a93cce1241e0c4ba51dbd5b503b441ee880deece7e3dbf005816847ce8571e7933d8363919cddb43bc73c6f8bea4ac5ef54327ce104a76cad13fa319a44f221ff773a66d60e9d00bc1d9bfa053628cb9bffe34381ef9cf34ab92ad147a50b56f2bf29728bd60ece68537a6b34a2324787aa966868b51e43a81c941ff5526b64b0a43dc87f244d4c7f4c18c4fe967c022b0ddc1f5c0376bc6477484ba524e64d690a132b6b87d2951ddc5aac576a8321dd90e337828135e0f4d3532c1d8fc3fccd1192e92d1d987ed26d7f28836f222244b16cf4fe3f89af5a89a0ebebd92f158285e236ee1275cc7546cc4662c593f0d4114f10deeb6c1bfc795a4cfdb791778421bf3086faf92d3cea6c335ad"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd227dfc7468514b9a5e6ef4ae9dd2dfd56819e2ec2a4bfba282959a76049cf5acd41d8bdcd2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 03:45:23 executing program 2: syz_open_dev$loop(&(0x7f0000001a80), 0x0, 0x2) 03:45:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d02}]}) 03:45:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x18}, 0x48) [ 2188.942276][T25087] loop0: detected capacity change from 0 to 512 [ 2188.973128][T25088] fuse: Bad value for 'fd' 03:45:24 executing program 2: bpf$BPF_PROG_TEST_RUN(0x19, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)}, 0x48) 03:45:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2189.023296][T25087] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. 03:45:24 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 2189.184814][ T3632] EXT4-fs (loop0): unmounting filesystem. [ 2189.210131][T25104] fuse: Bad value for 'fd' 03:45:24 executing program 1: bpf$BPF_PROG_TEST_RUN(0x14, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)}, 0x48) [ 2189.279873][T25109] loop0: detected capacity change from 0 to 512 [ 2189.291057][T11645] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2189.302842][T23075] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2189.359158][T23075] Buffer I/O error on dev loop0, logical block 0, async page read [ 2189.377661][T23075] loop0: unable to read partition table [ 2189.396986][T25109] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2189.442975][ T3632] EXT4-fs (loop0): unmounting filesystem. [ 2189.530367][T11645] usb 5-1: Using ep0 maxpacket: 8 [ 2189.731205][T11645] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2189.900423][T11645] usb 5-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.40 [ 2189.909537][T11645] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.918066][T11645] usb 5-1: Product: syz [ 2189.922501][T11645] usb 5-1: Manufacturer: syz [ 2189.927100][T11645] usb 5-1: SerialNumber: syz [ 2189.992672][T11645] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 2190.203696][T11645] usb 5-1: USB disconnect, device number 80 03:45:25 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) 03:45:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 03:45:25 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x6}]}}, &(0x7f0000000e80)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 03:45:25 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="ce51916fda0eab08", 0x8}, {&(0x7f0000000100)="b80fd51bd6b376357f77f905a61104a8f0b980e03fd20c0f9bdeded21113471790d651e0613b1ead10db3398698a331aa6f3062b4162e949ee92ab596611a5d1fee047e631906d310aacbc91ba80230aad3b7a406f97c63a9737834c23c71be2dabfa1f51e4b89cccd2d615ae9658e0d834b448ec8a225f353aba234e5a5ea707b819c85e82244ed9372b436ad93cbee8349363e0df709165973f94317bdc069", 0xa0}, {&(0x7f00000001c0)="a08ae914150dcc6b05c69357addebb7fd05f4063db75512ceb5d56f1bfbf622505c86d234b47135ed0ec33f01b8d2285277f2dfc9151fd03a99a93374b445cb9e82eec7955a465b737ff21022d690e20eba084fb8a9b24d76ea3162009eadce64cdf04c7d2eda31feeb55bb92c7d9a102bdb0c7182efbd61916abb74dedda591f83fe5bf", 0x84}], 0x3}, 0x0) recvmsg(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000010c0)=""/241, 0xf1}, {&(0x7f0000000080)=""/59, 0x3b}], 0x2}, 0x0) 03:45:25 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 2190.750841][T25121] loop0: detected capacity change from 0 to 512 03:45:25 executing program 3: bpf$BPF_PROG_TEST_RUN(0x8, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 03:45:25 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x4000000}]}}, &(0x7f00000000c0)=""/204, 0x26, 0xcc, 0x1}, 0x20) 03:45:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f0000000180)=""/16, 0x10}], 0x2}, 0x0) sendmsg$inet(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)="b7", 0x1}], 0x1}, 0x0) [ 2190.797909][T25122] fuse: Bad value for 'fd' 03:45:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2190.855692][T25121] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2190.889938][T25137] fuse: Bad value for 'fd' 03:45:25 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="ce", 0x1}], 0x1}, 0x0) close(r0) [ 2190.948275][T25140] fuse: Bad value for 'fd' [ 2191.016405][ T3632] EXT4-fs (loop0): unmounting filesystem. [ 2191.110285][ T6327] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2191.360275][ T6327] usb 5-1: Using ep0 maxpacket: 8 [ 2191.560420][ T6327] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2191.730416][ T6327] usb 5-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.40 [ 2191.739585][ T6327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2191.748163][ T6327] usb 5-1: Product: syz [ 2191.752727][ T6327] usb 5-1: Manufacturer: syz [ 2191.757450][ T6327] usb 5-1: SerialNumber: syz [ 2191.802534][ T6327] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 2192.017869][T21749] usb 5-1: USB disconnect, device number 81 03:45:27 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) 03:45:27 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f0000000e80)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 03:45:27 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2}}, &(0x7f00000000c0)=""/204, 0x32, 0x117, 0x1}, 0x20) 03:45:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000005c0)='cgroup.threads\x00', 0xc, 0x0) write$cgroup_pid(r1, 0x0, 0x0) 03:45:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:27 executing program 3: socketpair(0x2, 0x1, 0x0, &(0x7f0000000340)) 03:45:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0189436, &(0x7f0000000000)={'syz_tun\x00'}) 03:45:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xffff, 0x1, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 03:45:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x12, 0xc28d, 0x8, 0xff, 0x1202}, 0x48) 03:45:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0xb102}) 03:45:27 executing program 2: clock_gettime(0xf54844ab335d3483, 0x0) 03:45:27 executing program 1: r0 = msgget(0x3, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, 0x0) [ 2192.661236][T25150] fuse: Bad value for 'fd' [ 2192.860332][ T6327] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2193.100439][ T6327] usb 5-1: Using ep0 maxpacket: 8 [ 2193.310556][ T6327] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2193.490497][ T6327] usb 5-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.40 [ 2193.499619][ T6327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.508181][ T6327] usb 5-1: Product: syz [ 2193.520228][ T6327] usb 5-1: Manufacturer: syz [ 2193.524908][ T6327] usb 5-1: SerialNumber: syz [ 2193.572796][ T6327] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 2193.798299][T21749] usb 5-1: USB disconnect, device number 82 03:45:29 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 03:45:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:29 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$watch_queue(r0, 0x0, 0xfffffffffffffec9) 03:45:29 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 03:45:29 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') 03:45:29 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000359850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_enter\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 03:45:29 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1809000000000000000000000000000071100f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:45:29 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) [ 2194.410946][T25175] fuse: Bad value for 'fd' 03:45:29 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x83}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:45:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xe, 0x4, 0x4, 0xfd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8}, 0x8, 0x10, 0x0}, 0x80) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/56}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) close(r1) 03:45:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:29 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/4137], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e142b08004de7f9c764362ae28e0207002000000703a08b7989080594e5d04e0d44180416b474b67b2b4b777b5c15d51e3e7b1263afc0bac3", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 03:45:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x29, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) r1 = socket(0x11, 0x800000003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="d003000100000000000000bbbbbb00000c000e8005000100ff000000"], 0x34}}, 0x0) r2 = socket(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x34}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000840)={0x0, 0x1, 0x6, @multicast}, 0x10) 03:45:29 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r1, 0x0) sched_rr_get_interval(r1, &(0x7f0000000040)) syz_clone3(&(0x7f0000000340)={0x880000, &(0x7f00000003c0), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {}, &(0x7f0000000100)=""/229, 0xe5, &(0x7f0000000200)=""/247, &(0x7f0000000300)=[r0, r0], 0x2}, 0x58) ptrace$cont(0x7, r2, 0xfffff9fe, 0x464) clock_gettime(0x2, &(0x7f0000000000)) ptrace$cont(0x10, r0, 0x0, 0x0) 03:45:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) [ 2194.554884][T25187] fuse: Bad value for 'fd' 03:45:29 executing program 3: socketpair(0x11, 0x2, 0xe572, &(0x7f0000000240)) 03:45:29 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/4137], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e142b08004de7f9c764362ae28e0207002000000703a08b7989080594e5d04e0d44180416b474b67b2b4b777b5c15d51e3e7b1263afc0bac3", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 03:45:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000300)) 03:45:29 executing program 3: syz_clone(0x3000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:29 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) 03:45:29 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2823fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b5e5a076d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeee4eb6cc9b5b14f99a510fc22578d79f3bb622003b538dfd8e012e71f6420b90addfaf61b5b0a340a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183b13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346dfebd31a08b32808b80200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10d858e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31f4dde99f3e14d50c64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe530a34e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0010a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d0857340000000000000e47ad97f4ead7cf754a52e4b2d0f22d428a30e2366c6a06b3367a37bca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c35070669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd96b069ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4e50eda2c8067ab730c1d82a5687f2ed690000522a0b7426000400000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a7da26cc86d7e18631c2061b1c8a8e3c06837fe08de62f8710ca977960b74da8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaff80153636ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b177e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040200a1b8fe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e6ef2120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d633216349245ce3e3a097fb82f4e3b61a570946160fed016bae9fdff305c7496afc2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e882f8375e7d06f641eafcc5b4ba7a01000000000000001caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f4052e2ff1dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000c387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50817996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b4366567717744888daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e9b3bba7d6ceca38d3dda2d7bf03d61c159dc5869bebb92eb9aeb1d14d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf5000000000000000000000000000000121788830452aa6d26e4614d511710abeec84b78c027c160ba375d0200000000000000b91122193d514ee93a8b7fd992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed580f8f9587ffa89197230797f55f9fe8510423409629acf55f3dd9a35d9ca7b8e1de508f1e9e525210d62bc85eb08480161c70d4010cc0f8035040ad9e562be00797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b61cfe63cab66b7d5a800000000006e76f0294fee7d19a0f327f8796d77b6e24b8d4198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb171163e9faca03b24fa300ef90bfe4ad3642877cfb6abc27f156937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886eb8a787b31d964018de9896540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21ee2124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51316045fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bd67147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf35cca2e577e206a758a3f02816b4e097cfa3d46e45e7949c5b50691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1fc62ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6e29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d4ea0000000000000098d750c7073ed75391683b762fe9d69d41ba573ae10c64c2f2ad6a106d828023310bc4d00500000000000090f2c10906ff2a60017598a3f2cf8b39b5a2bdd4f742b6f1942f2fe47260d900073ef5fa9507df02786d58cae4b3cb69384109bb1e19eae1589b1457a4b3d458a921e351818f35a14aa642dd96866647742036e696247ae7a5bef30fd0ea67883b6286ba6f544f63b369186df93f8bdcd00c0b8a40bc78fdc75eb8cd5b352abaf78673225afb916d84a9957f13e582d3816b76903d74913cfddd2e6118fc7c4a78bd31b954dd74a66c46df8cc66f1c1a6c3676813928c7c4f0f58151c49c424ae7bf11c7f1cd015bdac2f78991d46b4848430fb8f41f0effa072d3855af5ead18fb9aa9e10621e13bbd97b304f9360b60850a7551b2c7caf4d4cbd0e4dc94adbedbc37e77f21fde2710d0b45a9bc1deb4cc653e8dd72c64684bec1822d1b00bdb6a8841cc8cb2dcf28a6555a7191acfbb13723a74cf7346c4f60b79d3889b4d91fcb5afe36c3d88ed8c46a70d41d7c9210d46d5abcda57d86598800c9a5500000000000000ff0000000000000078bcc9928194d6eb4beb37e728e419be9a77641595ff224053826aae0ec434ec6b86cb6736e5b504a8e8f15eb211895ae4749c3704ceafb696b4e76f73dc68428f85694dc5106f2aac72c24fd709f2f33aec50464a00e089bc6547db060b7a01605cd8c1581338490cb777b1ff88034e606e5189b870477f12fa7555e754f837b61e3239bb6135778912107446985b000000000000000000000000000000000000003d6394593fd87f8f6ef3a9b8ae46ce652ce328fc4c5008aa3bce8477b5f85b1db700030d7acde2146af581cae9131ea9904d6d41539c026eb80e2a0bc9e0358ea738b2842c3d7a20b77d2baf66e30cfaa6b1dab9fb6195d37e07fd848701129a66d0a77b197a5b01f3b6e0b8b5d82abecd2541c3998ccd532ee452fad1d2d486b1effab466865855ffbaf700"/4137], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e142b08004de7f9c764362ae28e0207002000000703a08b7989080594e5d04e0d44180416b474b67b2b4b777b5c15d51e3e7b1263afc0bac3", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 2194.789613][T25211] fuse: Bad value for 'fd' 03:45:29 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/4137], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e142b08004de7f9c764362ae28e0207002000000703a08b7989080594e5d04e0d44180416b474b67b2b4b777b5c15d51e3e7b1263afc0bac3", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 03:45:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x2, 0x0, 0x1f}, 0x8) 03:45:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 03:45:29 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 2194.902481][T25225] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2194.956383][T25227] FAT-fs (loop0): bogus number of reserved sectors [ 2195.000521][T25227] FAT-fs (loop0): Can't find a valid FAT filesystem 03:45:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 03:45:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:30 executing program 4: syz_clone(0x2829000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:30 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000003100)=[{{&(0x7f0000000300)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x10, 0x84}, {0x10, 0x108}], 0x20}}], 0x1, 0x0) 03:45:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x24000800) 03:45:30 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000019c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 03:45:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000120000002200000060", 0xd, 0x800}, {&(0x7f0000010500)="ffff0f00ff0f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x800, 0x1000}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {0x0}, {&(0x7f0000011f00)}, {0x0, 0x0, 0x8c00}, {&(0x7f0000012e00)="ed41000000080000d8f4655fd8f4655fd8f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x0, &(0x7f0000013c00)) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0xee01, r1) [ 2195.594082][T25234] fuse: Bad value for 'fd' 03:45:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:30 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2481, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xf00000000000000, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 03:45:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) tkill(0xffffffffffffffff, 0x1c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x1dd00) [ 2195.744462][T25250] fuse: Bad value for 'fd' [ 2195.749870][T25253] loop0: detected capacity change from 0 to 512 [ 2195.807821][ T27] audit: type=1804 audit(2000000730.739:727): pid=25256 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4237320572/syzkaller.ZTOTNK/3602/bus" dev="sda1" ino=1193 res=1 errno=0 [ 2195.860318][ T27] audit: type=1800 audit(2000000730.739:728): pid=25256 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1193 res=0 errno=0 [ 2195.881405][T25253] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2195.896463][T25253] ext4 filesystem being mounted at /root/syzkaller-testdir3777349395/syzkaller.ssCd8o/3615/file0 supports timestamps until 2038 (0x7fffffff) [ 2195.956443][ T3632] EXT4-fs (loop0): unmounting filesystem. 03:45:31 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 03:45:31 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() wait4(r0, 0x0, 0x0, 0x0) 03:45:31 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) [ 2196.518284][T25266] fuse: Bad value for 'fd' 03:45:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x5}]}, 0x28}}, 0x0) 03:45:31 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:31 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000200)="ec57d98f5ccc3d0a11cdf86c2987c06e9a83d7ca9f44f7931e9dd6a65edd7d67741b99c11db23fe068906a1e7638de3c8d50a772b31ae256593c04330ad3170dbe990fd9d327e66978a833a9dbafd23e1d1bc64989e45fcd189a50e7cda86e106c776fca8ec43d7339f85105379ebf951d3ff9dad06e2e09591be2dceaa40fb926cd46667331eaff37bc2a65e81aa0c126", 0x91, 0x0, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000100)=""/223, 0xdf, 0x42, 0x0, 0x0) dup2(r0, r1) 03:45:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x41449}, [@IFLA_IFALIASn={0x4}]}, 0x24}}, 0x0) 03:45:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:31 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0xfc94) bind$packet(r0, &(0x7f00000003c0)={0x11, 0x19, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 03:45:31 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) 03:45:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) 03:45:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8927, &(0x7f0000000ac0)={'wpan3\x00'}) 03:45:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:31 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 2196.752870][T25285] fuse: Bad value for 'fd' 03:45:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./bus\x00', 0x1a1142, 0x0) writev(r0, 0x0, 0x0) 03:45:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01e1d113c81fcf7603ca5a8d500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:45:31 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) unlink(&(0x7f0000000100)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000005f40)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x2fd5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000ca80)="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", 0x2000, &(0x7f0000005ec0)={&(0x7f0000004300)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) 03:45:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x20, r1, 0x103, 0x0, 0x0, {}, [{{0xb, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 03:45:31 executing program 4: socket$xdp(0x2c, 0x3, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x2007ffe) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x28011, r2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x3) 03:45:31 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 2196.897785][T25299] fuse: Bad value for 'fd' 03:45:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2196.982235][T25309] fuse: Bad value for 'fd' 03:45:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tkill(0xffffffffffffffff, 0x1c) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) [ 2197.011136][T25311] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 03:45:32 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 2197.078312][T25314] fuse: Bad value for 'fd' 03:45:32 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454d9, 0x0) 03:45:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, 0x0, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:32 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000580)="8f", 0x82a70b9aff31a91e, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000180)=0x83d60, 0x4) [ 2197.289588][ T27] audit: type=1804 audit(2000000732.219:729): pid=25331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4072871385/syzkaller.f0y4ax/3985/bus" dev="sda1" ino=1171 res=1 errno=0 [ 2197.443118][T25335] fuse: Bad value for 'fd' [ 2197.569070][ T27] audit: type=1800 audit(2000000732.219:730): pid=25331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1171 res=0 errno=0 03:45:32 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:32 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) r1 = getpid() fcntl$setown(r0, 0x6, r1) fcntl$setown(r0, 0x6, 0x0) 03:45:32 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x3) 03:45:32 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, 0x0, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2197.835995][T25346] fuse: Bad value for 'fd' 03:45:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)='t', 0x1}], 0x1}}], 0x1, 0x0) 03:45:32 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:32 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x905c}, 0x0) 03:45:32 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x3) 03:45:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, 0x0, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x88, 0x0, 0x0, 0x0) 03:45:33 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) [ 2198.047083][T25355] fuse: Bad value for 'fd' 03:45:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 03:45:33 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:33 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x3) 03:45:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:33 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x608401) fsync(r0) 03:45:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:33 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 03:45:33 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:33 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x3) 03:45:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:33 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x608401) fsync(r0) 03:45:33 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:33 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:33 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) lseek(0xffffffffffffffff, 0x0, 0x3) 03:45:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x2, 0x2, 0x801, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @remote}}}]}]}, 0x58}}, 0x0) 03:45:33 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x608401) fsync(r0) 03:45:33 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:33 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) lseek(0xffffffffffffffff, 0x0, 0x3) 03:45:33 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="dcb02698917f", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fef11c", 0x8, 0x3c, 0x0, @private1, @local, {[@srh]}}}}}, 0x0) 03:45:33 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:33 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x608401) fsync(r0) 03:45:33 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) lseek(0xffffffffffffffff, 0x0, 0x3) 03:45:33 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:33 executing program 3: select(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x28f9}, &(0x7f00000000c0)={0x77359400}) 03:45:33 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(0xffffffffffffffff) 03:45:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000b80)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:33 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:33 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:33 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x3) 03:45:33 executing program 2: fsync(0xffffffffffffffff) 03:45:33 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2198.729863][T25420] fuse: Bad value for 'fd' 03:45:33 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:33 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:33 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x3) 03:45:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000b80)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:33 executing program 2: fsync(0xffffffffffffffff) 03:45:33 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:33 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 2198.876224][T25426] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 2198.911381][T25426] team0: Port device batadv2 added 03:45:33 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x3) 03:45:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000013c00)) 03:45:33 executing program 2: fsync(0xffffffffffffffff) [ 2198.994549][T25439] fuse: Bad value for 'fd' 03:45:33 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:33 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:34 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) 03:45:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000b80)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:34 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x3) 03:45:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000180)=""/127) 03:45:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:34 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:34 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) 03:45:34 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x3) [ 2199.199951][T25459] fuse: Bad value for 'fd' 03:45:34 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) 03:45:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:34 executing program 3: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052406000005240000000d240f010000ee000000000000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 03:45:34 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:34 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x3) 03:45:34 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x9c, 0xa7, 0xb0, 0x10, 0x17ef, 0x304f, 0xc1e0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x0, 0x0, 0x1, "90"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x21, 0x1}}) 03:45:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:34 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:34 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(0x0, 0x0) lseek(r0, 0x0, 0x3) 03:45:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:34 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(0x0, 0x0) lseek(r0, 0x0, 0x3) 03:45:34 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:34 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001700)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f0000000962b2e0990b00000000b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x1, 0x15, "c47e387e4be6c92f47226f51258278d0733d2f0537"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x1}}) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x3}) 03:45:34 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(0x0, 0x0) lseek(r0, 0x0, 0x3) 03:45:34 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x4020940d, &(0x7f00000004c0)=""/41) 03:45:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:34 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) 03:45:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:34 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:35 executing program 2: request_key(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="0200000012000000220000006000", 0xe, 0x800}, {&(0x7f0000010500)="ffff0f00ff0f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x800, 0x1000}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000011d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x8000}, {0x0}, {&(0x7f0000012e00)="ed41000000080000d8f4655fd8f4655fd8f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}, {&(0x7f0000013000)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af302000400000000000000000000000200000010000000020000000100000013", 0x49, 0x11180}], 0x0, &(0x7f0000013c00)) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0xee01, r1) 03:45:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:35 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 2200.114053][T25519] fuse: Bad value for 'fd' 03:45:35 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x4000c2, 0x0) 03:45:35 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) 03:45:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:35 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:35 executing program 2: r0 = semget$private(0x0, 0x2, 0x0) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000040)=""/87) 03:45:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:35 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x43) 03:45:35 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) 03:45:35 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 2200.574503][T25531] fuse: Bad value for 'fd' 03:45:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:35 executing program 3: statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 03:45:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:35 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) 03:45:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:35 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 2200.742505][T25546] fuse: Bad value for 'fd' 03:45:35 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:35 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 03:45:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:35 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) 03:45:35 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) 03:45:35 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:35 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 03:45:35 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x0, 0x0) getsockname(r0, 0x0, 0x0) [ 2200.905575][T25558] fuse: Bad value for 'fd' 03:45:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:35 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) 03:45:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:35 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) 03:45:35 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:35 executing program 3: mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) 03:45:36 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) 03:45:36 executing program 2: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xc69b}], 0x1, 0x0) [ 2201.095866][T25580] fuse: Bad value for 'fd' 03:45:36 executing program 3: fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:45:36 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:36 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:36 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) 03:45:36 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:36 executing program 3: pipe(&(0x7f0000000500)={0xffffffffffffffff}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0) 03:45:36 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:36 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) [ 2201.241419][T25597] fuse: Bad value for 'fd' 03:45:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:36 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 2201.392108][T25611] fuse: Bad value for 'fd' 03:45:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r0, 0x8, 0x0, 0x0, 0x0) 03:45:36 executing program 3: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0xc6a) 03:45:36 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:36 executing program 4: semget$private(0x0, 0x4, 0xc3e1a940916ffe44) 03:45:36 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:37 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/class/dmi', 0x10000, 0x4) 03:45:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:37 executing program 4: semget$private(0x0, 0x3, 0x48a) [ 2202.063407][T25623] fuse: Bad value for 'fd' 03:45:37 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:37 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 03:45:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:37 executing program 4: symlinkat(&(0x7f0000000500)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00') 03:45:37 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x122) 03:45:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:37 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) [ 2202.195199][T25637] fuse: Bad value for 'fd' 03:45:37 executing program 4: semget$private(0x0, 0x1, 0x71d) 03:45:37 executing program 3: semget$private(0x0, 0x4, 0xd0) 03:45:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:37 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000140)) 03:45:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:37 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:37 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00') [ 2202.363983][T25651] fuse: Bad value for 'fd' 03:45:37 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) 03:45:37 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 03:45:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:37 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:37 executing program 4: r0 = epoll_create(0x3) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 03:45:37 executing program 3: openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x4040, 0x0) 03:45:37 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:37 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x200200, 0x0) [ 2202.547407][T25667] fuse: Bad value for 'fd' 03:45:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:37 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f0000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:37 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 03:45:37 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 03:45:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) 03:45:37 executing program 3: syz_clone(0x0, &(0x7f0000000540)="a4", 0x1, &(0x7f0000000280), 0x0, 0x0) 03:45:37 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f0000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:37 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/power_supply', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='.\x00', 0x0, 0x0) 03:45:37 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) [ 2202.754635][T25691] fuse: Bad value for 'fd' 03:45:37 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x80080, 0x0) 03:45:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000b80)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r2, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:37 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f0000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:37 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) 03:45:37 executing program 3: syz_clone(0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, &(0x7f0000000480)) 03:45:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f0000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:37 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) 03:45:37 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:37 executing program 4: symlinkat(&(0x7f0000000500)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) [ 2202.987763][T25711] fuse: Bad value for 'fd' 03:45:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000b80)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r2, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:37 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x20000, 0xd0) 03:45:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f0000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:38 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1193c0, 0x0) 03:45:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) 03:45:38 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:38 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f0000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:38 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 2203.171355][T25729] fuse: Bad value for 'fd' 03:45:38 executing program 4: r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000002280)=[{}], 0x1, &(0x7f0000002340), 0x0, 0x0) 03:45:38 executing program 2: r0 = eventfd(0x0) fremovexattr(r0, &(0x7f0000000100)=@known='user.syz\x00') 03:45:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000b80)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r2, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:38 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:38 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:38 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 03:45:38 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) fchmodat(r0, &(0x7f0000000180)='./file0\x00', 0x0) 03:45:38 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_freezer_state(r0, 0x0, 0xe) 03:45:38 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x901861, 0x0) 03:45:38 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 2203.386579][T25752] fuse: Bad value for 'fd' 03:45:38 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:38 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/139, 0x8b) 03:45:38 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fchdir(r0) 03:45:38 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000b80)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r2, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r1, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:38 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$eventfd(r0, &(0x7f0000000100), 0x8) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) 03:45:38 executing program 4: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) 03:45:38 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:38 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:38 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) mknodat$loop(r0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x1) 03:45:38 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 2203.634101][T25772] fuse: Bad value for 'fd' 03:45:38 executing program 2: r0 = eventfd2(0x5, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) 03:45:38 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x141000, 0x11) 03:45:38 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 03:45:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000b80)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r2, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r1, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:38 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:38 executing program 2: mincore(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, &(0x7f0000000040)=""/25) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) 03:45:38 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:38 executing program 3: renameat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0xffffffffffffffff, 0x0) 03:45:38 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000180), 0x10) 03:45:38 executing program 2: getpid() r0 = syz_clone(0x20000, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)) ptrace(0x10, r0) 03:45:38 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) [ 2203.864931][T25794] fuse: Bad value for 'fd' 03:45:38 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:38 executing program 4: pselect6(0x45, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 03:45:38 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000b80)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r2, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r1, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:38 executing program 3: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f00000000c0)=[{0x0, 0xfffe}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}) 03:45:38 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0x8004510a, &(0x7f0000000100)={"0425a0d3982b91403d7000a04d6c8f3ecb5cb9ad5f78ee79aeb3614335f5"}) 03:45:39 executing program 4: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x26000) 03:45:39 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:39 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:39 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, r0) 03:45:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1003, 0x0, 0x0) 03:45:39 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000440)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) [ 2204.126207][T25817] fuse: Bad value for 'fd' 03:45:39 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x25}]}) 03:45:39 executing program 5: r0 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000b80)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r2, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r1, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) 03:45:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:39 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:39 executing program 4: r0 = msgget(0x3, 0x0) msgrcv(r0, &(0x7f0000000100)={0x0, ""/98}, 0x6a, 0x0, 0x3000) 03:45:39 executing program 2: syz_clone(0x0, &(0x7f0000001d40), 0x0, &(0x7f0000001e40), &(0x7f0000001e80), 0x0) 03:45:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:39 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 2204.307720][T25833] fuse: Bad value for 'fd' 03:45:39 executing program 5: r0 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000b80)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r2, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r1, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:39 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 03:45:39 executing program 3: msgsnd(0x0, &(0x7f0000000480)=ANY=[], 0xde, 0x0) 03:45:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 03:45:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 2204.495070][T25851] fuse: Bad value for 'fd' 03:45:39 executing program 4: r0 = eventfd(0x0) write$eventfd(r0, &(0x7f0000002c80), 0x8) 03:45:39 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_int(r0, 0x0, 0x0) 03:45:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 03:45:39 executing program 5: r0 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000b80)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r2, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r1, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:39 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:39 executing program 4: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x1000, 0x1) [ 2204.664818][T25865] fuse: Bad value for 'fd' 03:45:39 executing program 3: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) 03:45:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:39 executing program 2: open(&(0x7f0000000300)='./file0\x00', 0x444202, 0x0) 03:45:39 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000001100), 0x8) dup(r0) 03:45:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:39 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:39 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 03:45:39 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) read$watch_queue(r0, &(0x7f0000000040)=""/93, 0x5d) [ 2204.823931][T25881] fuse: Bad value for 'fd' 03:45:39 executing program 4: recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000001, 0x0, 0x0) 03:45:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:39 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:39 executing program 3: r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$userns(r1, &(0x7f0000000040)) 03:45:39 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:39 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:39 executing program 3: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 03:45:39 executing program 4: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, 0x0) [ 2204.986773][T25894] fuse: Bad value for 'fd' 03:45:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:40 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 2205.185963][T25914] fuse: Bad value for 'fd' 03:45:40 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 03:45:40 executing program 3: pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 03:45:40 executing program 4: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 03:45:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:40 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(0x0, 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:40 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:40 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000040)) [ 2205.824343][T25924] fuse: Bad value for 'fd' 03:45:40 executing program 4: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) 03:45:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(0x0, 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:40 executing program 2: syz_clone(0x0, 0x0, 0x0, &(0x7f0000001e40), 0x0, 0x0) 03:45:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:40 executing program 4: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 03:45:40 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:40 executing program 3: timer_create(0x0, 0x0, &(0x7f000000a440)) timer_gettime(0x0, 0x0) 03:45:40 executing program 2: r0 = msgget(0x3, 0x0) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/90}, 0x62, 0x0, 0x3800) 03:45:40 executing program 3: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) 03:45:40 executing program 4: syz_clone(0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0x0) 03:45:40 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) [ 2206.060540][T25945] fuse: Bad value for 'fd' 03:45:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(0x0, 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:41 executing program 3: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 03:45:41 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) 03:45:41 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3010c2, 0x0) 03:45:41 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 03:45:41 executing program 2: pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) 03:45:41 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 2206.246660][T25961] fuse: Bad value for 'fd' 03:45:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:41 executing program 3: mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4000019, 0xffffffffffffffff, 0x0) 03:45:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:41 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) 03:45:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:41 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:41 executing program 2: mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1000007, 0x40831, 0xffffffffffffffff, 0x0) 03:45:41 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000640)='./file0/file0\x00', 0x0, 0x0) [ 2206.481955][T25980] fuse: Bad value for 'fd' 03:45:41 executing program 4: setitimer(0x0, &(0x7f0000000180)={{}, {0x0, 0xffffffffffffffff}}, 0x0) 03:45:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:41 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:41 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000006300), 0x0, 0x0) read$FUSE(r0, &(0x7f0000004240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpriority(0x0, r1) 03:45:41 executing program 2: mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1000007, 0x40831, 0xffffffffffffffff, 0x0) 03:45:41 executing program 4: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 03:45:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) [ 2206.714990][T25998] fuse: Bad value for 'fd' 03:45:41 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={0x0}) 03:45:41 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:41 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) 03:45:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x23, &(0x7f0000000040), 0x4) 03:45:41 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780), 0x0, 0x0, 0x0, 0x0) 03:45:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) 03:45:41 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x6, 0x0, &(0x7f0000002440)) 03:45:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) sendfile(r2, r1, 0x0, 0x100000004) [ 2206.946808][T26014] fuse: Bad value for 'fd' 03:45:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) 03:45:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)='\t', 0x1}], 0x1}, 0x0) 03:45:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:42 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x2}}}, 0x24}}, 0x0) 03:45:42 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780), 0x0, 0x0, 0x0, 0x0) 03:45:42 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) 03:45:42 executing program 3: r0 = socket(0x25, 0x1, 0x0) connect$nfc_raw(r0, &(0x7f0000000280), 0x10) [ 2207.146943][ T27] audit: type=1804 audit(2000000742.079:731): pid=26035 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4072871385/syzkaller.f0y4ax/4042/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 03:45:42 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) process_vm_writev(0x0, &(0x7f0000001780), 0x0, 0x0, 0x0, 0x0) [ 2207.195180][T26036] fuse: Bad value for 'fd' 03:45:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:42 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) 03:45:42 executing program 3: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x3c, r0, 0x1, 0x0, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) [ 2207.422741][T26048] fuse: Bad value for 'fd' 03:45:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) sendfile(r2, r1, 0x0, 0x100000004) 03:45:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}}, 0x0) [ 2207.629891][ T27] audit: type=1804 audit(2000000742.559:732): pid=26052 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4072871385/syzkaller.f0y4ax/4043/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 03:45:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2b, &(0x7f0000000040)=0x95, 0x4) 03:45:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x2) 03:45:42 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x0, @private}}, 0x1e) 03:45:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:42 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x3c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x3}}]}, 0x3c}}, 0x0) 03:45:42 executing program 3: r0 = socket(0x2, 0x6, 0x0) connect$qrtr(r0, &(0x7f0000006880), 0xc) 03:45:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x2) [ 2207.917405][T26061] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2207.933481][T26060] fuse: Bad value for 'fd' 03:45:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(0x0, 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x24, &(0x7f0000000040), 0x4) 03:45:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@bridge_getlink={0x20, 0x12, 0x425, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 2208.025940][T26061] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2208.093748][T26071] fuse: Bad value for 'fd' 03:45:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) sendfile(r2, r1, 0x0, 0x100000004) 03:45:43 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x2) 03:45:43 executing program 4: r0 = socket(0x2, 0x6, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 03:45:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@gettaction={0x20, 0x32, 0x101, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) 03:45:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(0x0, 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2208.177371][T26061] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 03:45:43 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x2) [ 2208.267376][T26061] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2208.285468][T26081] fuse: Bad value for 'fd' [ 2208.421018][T26061] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2208.455053][ T27] audit: type=1804 audit(2000000743.389:733): pid=26086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4072871385/syzkaller.f0y4ax/4044/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 2208.516928][T26061] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2208.536668][T26061] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 03:45:43 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x3c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x3}}]}, 0x3c}}, 0x0) 03:45:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@deltfilter={0x23, 0x2d, 0x4d4c3f659ee7b4e7}, 0x24}}, 0x0) 03:45:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(0x0, 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:43 executing program 1: getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x2) 03:45:43 executing program 4: syz_clone(0x40044000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) [ 2208.567918][T26061] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2208.597281][T26061] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 03:45:43 executing program 1: getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x2) [ 2208.664740][T26093] fuse: Bad value for 'fd' [ 2208.759052][T26099] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2208.793048][T26099] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2208.859547][T26099] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 03:45:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) 03:45:43 executing program 3: getpgid(0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x44042480, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180)="58d126cd6e4c561d55207830ca6203250b47f188ae7c8efd99083a4bf89a891f31390b734bb71aab00a0193df6f7ba6eadac356fb022bcc650191d4bb105f09b0b3f93599442f9628d83710884f16bf73ef4ee50e980583bac80f6a66725892607ee7091d45666f621f45d36ba1c3907a3") sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="aa", 0x1}], 0x1, &(0x7f0000000000)}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="c885010080610000050027000000000008002e0003000000d67449b585b638c29dd60a000200aaaaaaaaaabb0000"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000040) 03:45:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:43 executing program 1: getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x2) [ 2208.933976][T26099] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 03:45:43 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x2) 03:45:44 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10}, {}]}]}}, &(0x7f0000000540)=""/140, 0x36, 0x8c, 0x1}, 0x20) [ 2209.018513][T26099] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2209.036277][T26107] fuse: Bad value for 'fd' [ 2214.532616][T26099] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2214.546857][T26099] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2214.561594][T26099] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 03:45:49 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x3c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x3}}]}, 0x3c}}, 0x0) 03:45:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:49 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x2e}, @empty}, 0xc) 03:45:49 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r0, 0x0, 0x865cae16a3b335c7, 0x0, 0x0) 03:45:49 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x2) 03:45:49 executing program 3: syz_clone(0x46280000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2214.576532][T26099] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 03:45:49 executing program 4: open$dir(&(0x7f00000022c0)='./file0\x00', 0x40, 0x0) 03:45:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000180)={'sit0\x00', 0x0}) 03:45:49 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x2) [ 2214.686126][T26125] fuse: Bad value for 'fd' 03:45:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000005a0001"], 0x24}}, 0x0) 03:45:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2214.742006][T26129] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000080)) [ 2214.808365][T26129] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.869684][T26141] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2214.871462][T26138] fuse: Bad value for 'fd' [ 2214.958096][T26129] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2215.066368][T26129] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2215.105356][T26129] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2220.493506][T26129] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2220.507764][T26129] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2220.523314][T26129] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 03:45:55 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x3c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x3}}]}, 0x3c}}, 0x0) 03:45:55 executing program 4: syz_clone3(&(0x7f0000000280)={0x100021000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:45:55 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 03:45:55 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f00000004c0), 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x7, 0xc, 0x6, 0x0, 0x0, [0x0, 0x0]}]}}}], 0x20}, 0x0) 03:45:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x44) 03:45:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2220.537987][T26129] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 03:45:55 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 03:45:55 executing program 2: syz_clone(0xc3000000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:55 executing program 3: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1, 0x0, 0x0, 0x1c, 0x4}}) [ 2220.602986][T26153] fuse: Bad value for 'fd' 03:45:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:45:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x8993, &(0x7f0000000180)={'sit0\x00', 0x0}) [ 2220.666948][T26158] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:55 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) [ 2220.745322][T26158] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2220.795798][T26168] fuse: Bad value for 'fd' [ 2220.843003][T26158] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2220.916051][T26158] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2221.015838][T26158] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2221.611572][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.617957][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 2226.295639][T26158] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.309927][T26158] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.325865][T26158] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 03:46:01 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000) 03:46:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x8949, &(0x7f0000000180)={'sit0\x00', 0x0}) 03:46:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}) 03:46:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:01 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, 0x0) 03:46:01 executing program 2: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={[], [{@subj_role={'subj_role', 0x3d, '^'}}, {@fsuuid}, {@dont_appraise}]}) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) [ 2226.350043][T26158] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 03:46:01 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 03:46:01 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000005240)) 03:46:01 executing program 2: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x97}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000480)=@string={0x2}}, {0x2, &(0x7f0000000500)=@string={0x2}}]}) 03:46:01 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000001cc0)='/proc/sysvipc/sem\x00', 0x0, 0x0) [ 2226.433861][T26178] fuse: Bad value for 'fd' 03:46:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, 0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:01 executing program 0: mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffd) 03:46:01 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xbd, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1, 0x2, 0xff}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0xff, 0x1, 0x40, 0x0, 0x9e}, 0x3c, &(0x7f0000000100)={0x5, 0xf, 0x3c, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x8e, 0x4, 0x3f, 0xff0f, 0x5, [0x3f0f, 0x0, 0x3fc0, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xf, 0x7, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x81, 0x7, 0x3ff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6}]}, 0x8, [{0x27, &(0x7f0000000180)=@string={0x27, 0x3, "2fb77b0bfb8e5b0558bc1360c240a0a91e4facbf916e92ab42d0578f6010841a8a6456827c"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1037}}, {0x8a, &(0x7f0000000200)=@string={0x8a, 0x3, "b3b21e8f8e17fa1744063755904cd073ba113668208ac77abfcb2f665f9c309f76d1b418ee54f479c9c59b592250f2b8f54d899dfacb3a304ceec058f98025c19fe5e5b84028b4d2c44fa29fa1c0bf1dce16e3cffaba95d40e209972b7f29e1f245bf8cda7098eff5d7bb84b82b9a87d2fc3b046ac2c33e6c8d27f0aaebab885b75d1933746f79c9"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x416}}, {0x53, &(0x7f0000000340)=@string={0x53, 0x3, "6895a81896866ceb3997ad5d1c27a943eb50ea4e55c4c5a228dc5082c7a9494f8f91d8b655c8c3a6ff34feb1b6d0364903e209e319ba991e7089ebf6ea1156d4e7099eb4e30d6569b2fc64d4e6bda57b14"}}, {0x28, &(0x7f00000003c0)=@string={0x28, 0x3, "8781d1226418cb18763d826609755ee85348ae0623c6477441e70a983b72a2f4b00da1c98540"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2401}}]}) 03:46:01 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f0000000200)="e4", 0x1}], 0x3}, 0x0) 03:46:01 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000003740), 0xc) 03:46:01 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 03:46:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, 0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:01 executing program 1: unshare(0x30000500) 03:46:01 executing program 3: wait4(0x0, 0x0, 0x2000000d, 0x0) 03:46:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, 0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2226.900289][T23292] usb 5-1: new high-speed USB device number 83 using dummy_hcd 03:46:01 executing program 2: pipe2$9p(&(0x7f0000000340), 0x0) 03:46:01 executing program 3: timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)) 03:46:01 executing program 1: sched_setscheduler(0x0, 0x0, &(0x7f0000002040)) 03:46:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100), &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2226.960643][T21751] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2227.034452][T26217] fuse: Bad value for 'fd' [ 2227.250387][T21751] usb 1-1: Using ep0 maxpacket: 8 [ 2227.260790][T23292] usb 5-1: config 1 interface 0 altsetting 189 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2227.275554][T23292] usb 5-1: config 1 interface 0 altsetting 189 bulk endpoint 0x82 has invalid maxpacket 0 [ 2227.296730][T23292] usb 5-1: config 1 interface 0 altsetting 189 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2227.308211][T23292] usb 5-1: config 1 interface 0 altsetting 189 bulk endpoint 0x3 has invalid maxpacket 0 [ 2227.318603][T23292] usb 5-1: config 1 interface 0 altsetting 189 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2227.332227][T23292] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2227.380746][T21751] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2227.397459][T21751] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2227.419360][T21751] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2227.439406][T21751] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2227.449388][T21751] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2227.460000][T21751] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2227.491996][T23292] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2227.504660][T23292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2227.513777][T23292] usb 5-1: Product: 늳輞ណ៺ل唷䲐珐ᆺ栶訠竇쮿是鱟鼰텶ᢴ哮秴엉妛倢룲䷵鶉쯺〺壀胹섥룥⡀튴俄龢삡ᶿᛎ쿣뫺풕‎犙ᾞ嬤췸ধﾎ筝䮸릂綨쌯䚰Ⲭ틈੿몮薸嶷㌙潴쥹 [ 2227.535802][T23292] usb 5-1: Manufacturer: ့ [ 2227.540789][T23292] usb 5-1: SerialNumber: Д [ 2227.591397][T23292] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 2227.640566][T21751] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2227.653108][T21751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2227.670505][T21751] usb 1-1: Product: syz [ 2227.679260][T21751] usb 1-1: Manufacturer: syz [ 2227.689576][T21751] usb 1-1: SerialNumber: syz [ 2227.797288][T23292] usb 5-1: USB disconnect, device number 83 [ 2227.970451][T21751] cdc_ncm 1-1:1.0: bind() failure [ 2227.982637][T21751] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2227.996356][T21751] cdc_ncm 1-1:1.1: bind() failure [ 2228.014680][T21751] usb 1-1: USB disconnect, device number 49 03:46:03 executing program 4: r0 = semget(0x3, 0x0, 0x0) semop(r0, &(0x7f0000000040)=[{0x2}], 0x1) 03:46:03 executing program 1: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000007}) 03:46:03 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x531240, 0x0) 03:46:03 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) dup(r0) 03:46:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100), &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:03 executing program 2: r0 = semget(0x1, 0x0, 0x0) semtimedop(r0, &(0x7f0000000140)=[{}], 0x1, 0x0) 03:46:03 executing program 3: r0 = semget(0x1, 0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000000c0)={{0x2, 0xee00}}) 03:46:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, 0xfffffffffffffffe, 0xff09) 03:46:03 executing program 1: clock_getres(0x91119bd4cd230817, 0x0) 03:46:03 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x3c1c02, 0x0) 03:46:03 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r1 = signalfd4(r0, &(0x7f00000002c0), 0x8, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000300)) 03:46:03 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) 03:46:03 executing program 4: io_setup(0x0, &(0x7f0000000040)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 2228.522896][T26233] fuse: Bad value for 'fd' 03:46:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100), &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:03 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 03:46:03 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 03:46:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "b62557a827b71be1", "9a89aefe45c54dd6d137f3badaef7989", "db44792d", "08ccf545038cadaf"}, 0x28) 03:46:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000100)="ed", 0x1) 03:46:03 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) 03:46:03 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) [ 2228.702411][T26253] fuse: Bad value for 'fd' 03:46:03 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) 03:46:03 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000001740), 0x30401, 0x0) 03:46:03 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) 03:46:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:03 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 03:46:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) 03:46:03 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/dmi', 0x151082, 0x0) 03:46:03 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, 0x0) 03:46:03 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 03:46:03 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000001980), 0x8) read$char_usb(r0, 0x0, 0x0) 03:46:03 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/power_supply', 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 03:46:03 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) [ 2228.932907][T26277] fuse: Bad value for 'fd' 03:46:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:03 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101301, 0x0) 03:46:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0) 03:46:03 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x84000, 0x0) 03:46:03 executing program 1: getgroups(0x1, &(0x7f0000000000)=[0xffffffffffffffff]) setregid(0x0, r0) 03:46:04 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x88140, 0x42) 03:46:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000015140)=@filter={'filter\x00', 0xe, 0x4, 0x0, [], 0x0, 0x0, 0x0}, 0xe48) 03:46:04 executing program 0: open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x501800, 0x0) [ 2229.086276][T26295] fuse: Bad value for 'fd' 03:46:04 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x6800, 0x0) 03:46:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002e40)) 03:46:04 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 03:46:04 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/power_supply', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 03:46:04 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/power_supply', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) 03:46:04 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 03:46:04 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0) [ 2229.243735][T26306] fuse: Bad value for 'fd' 03:46:04 executing program 3: pipe2(&(0x7f0000001080)={0xffffffffffffffff}, 0x0) read$watch_queue(r0, 0x0, 0x0) 03:46:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:04 executing program 2: pipe2(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_subtree(r0, 0x0, 0xffffffffffffff20) 03:46:04 executing program 4: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 03:46:04 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)) 03:46:04 executing program 1: pipe2(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_subtree(r0, 0x0, 0x84) 03:46:04 executing program 3: pipe2(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$watch_queue(r0, 0x0, 0x92a4555d27ebc529) 03:46:04 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:46:04 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) r1 = dup(r0) preadv(r1, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0) [ 2229.421899][T26329] fuse: Bad value for 'fd' 03:46:04 executing program 1: mknod(&(0x7f0000000140)='./bus\x00', 0x80008005, 0x5300) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0, 0x101}], 0x1, 0x0) poll(&(0x7f0000000180)=[{}, {r0, 0x5c}], 0x2, 0x0) 03:46:04 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000000)) 03:46:04 executing program 0: setrlimit(0x8, &(0x7f0000000500)) pipe(0x0) 03:46:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:04 executing program 3: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6) 03:46:04 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0xffffffffffffffdc}, {0x0}], 0x2, 0x0, 0x0) 03:46:04 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) flock(r0, 0x0) 03:46:04 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) fchdir(r0) [ 2229.586592][T26347] fuse: Bad value for 'fd' 03:46:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:04 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000200), 0x9cb28cd7cb2730fb}, 0x5) 03:46:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) 03:46:04 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 03:46:04 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @remote, @val, {@ipv6}}, 0x0) 03:46:04 executing program 3: openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x200, 0x0) [ 2229.703002][T26360] fuse: Bad value for 'fd' 03:46:04 executing program 1: r0 = socket$inet6(0x18, 0x2, 0x0) sendto$inet6(r0, 0x0, 0xffffff5c, 0x0, &(0x7f0000000040)={0x18, 0x2}, 0xc) 03:46:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000b80)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r2, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r1, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:04 executing program 2: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) 03:46:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) r1 = dup(r0) fcntl$setown(r1, 0x6, 0x0) 03:46:04 executing program 4: syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60400b2c00503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa030090780000000060b38e6b000000000000000000000000000000000000000100000000000000000000000000000000000b000000000000a5040100010700000000000000040181000100c2"], 0x0) 03:46:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000343000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x55d09000) 03:46:04 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="ce", 0x20000181}], 0x3}, 0x0) 03:46:04 executing program 2: syz_emit_ethernet(0xe, &(0x7f00000000c0)={@local, @empty, @val, {@generic={0x8847}}}, 0x0) [ 2229.919797][T26377] fuse: Bad value for 'fd' 03:46:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000280)=0xa8a, 0x4) 03:46:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000b80)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r2, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r1, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001b80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000000), 0x4) 03:46:05 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @val, {@ipv4}}, 0x0) 03:46:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x3c, r2, 0x101, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'gre0\x00'}]}, 0x3c}}, 0x0) [ 2230.155245][T26399] fuse: Bad value for 'fd' 03:46:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xae, &(0x7f0000000080)=""/174, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:46:05 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @loopback}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000001c0)=0x10) 03:46:05 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:46:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000b80)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r2, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r1, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2230.349541][T26413] fuse: Bad value for 'fd' [ 2230.770237][ T27] audit: type=1804 audit(2000000765.699:734): pid=26395 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3777349395/syzkaller.ssCd8o/3704/cgroup.controllers" dev="sda1" ino=1184 res=1 errno=0 03:46:05 executing program 0: socket(0x23, 0x0, 0x7ffffffd) 03:46:05 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1a, 0x0, 0x3, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 03:46:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0xba0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 03:46:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8993, &(0x7f0000000ac0)={'wpan3\x00'}) 03:46:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:05 executing program 1: unshare(0x6c060000) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x803}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000640)=0x2, 0x8) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) 03:46:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:05 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @empty}}}) [ 2231.024906][T26420] fuse: Bad value for 'fd' [ 2231.134525][T26426] fuse: Bad value for 'fd' [ 2231.140308][T26427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:06 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @empty}}}) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x223, 0x0, 0x0) 03:46:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8912, &(0x7f0000000d00)={'sit0\x00', 0x0}) 03:46:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:06 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x8, 0x2, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) [ 2231.261436][T26427] lo: Caught tx_queue_len zero misconfig [ 2231.337402][T26436] fuse: Bad value for 'fd' 03:46:06 executing program 0: mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) 03:46:06 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 03:46:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, &(0x7f0000000540)}, 0x0) 03:46:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:06 executing program 4: mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x6) [ 2231.597800][T26453] fuse: Bad value for 'fd' 03:46:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) 03:46:06 executing program 0: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 03:46:06 executing program 3: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c0024", 0xf, 0x400}, {&(0x7f0000000100)="06004531954473e85f52da320259d8015d5e6ae4982fd9328f029c2f72844ad84c789edb22b9b7a50312f303d9d6", 0x2e, 0x480}], 0x0, &(0x7f00000002c0)=ANY=[]) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000380)={0x0, 0x10001, 0x0, 0x1}) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004106) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x7) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000001c0)=0x1, 0x4) write$binfmt_misc(r1, &(0x7f0000000880)=ANY=[@ANYRES64=r0, @ANYRESHEX=r4, @ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESHEX=r5], 0xfffffecc) 03:46:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x5, 0xdc, 0x9, 0xe9}, {0x0, 0x0, 0x2}]}, 0x10) 03:46:06 executing program 4: syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) getresuid(&(0x7f0000000bc0), 0x0, 0x0) 03:46:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6a0889bc"}, 0x0, 0x2, {0x0}}) 03:46:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) 03:46:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "56b1a451"}}) 03:46:06 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) [ 2231.881188][T26467] fuse: Bad value for 'fd' 03:46:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) 03:46:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 03:46:06 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, 0x0) [ 2232.075384][T26477] fuse: Bad value for 'fd' 03:46:07 executing program 3: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[]) 03:46:07 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "114782d7"}}) 03:46:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) 03:46:07 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x0, 0x0}, 0x10) 03:46:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, 0x0, 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x2, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x2, 0x4}) 03:46:07 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setns(r0, 0x0) 03:46:07 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000440)={{0x3, @null}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 03:46:07 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040), 0x4) 03:46:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, 0x0, 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:07 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/time_for_children\x00') 03:46:07 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) 03:46:07 executing program 2: socket$caif_seqpacket(0x25, 0x5, 0x3) 03:46:07 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, 0x0, 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:07 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) 03:46:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@local}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@multicast2}, [@replay_esn_val={0x1c}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x154}}, 0x0) 03:46:07 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)) 03:46:07 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) 03:46:07 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/pid_for_children\x00') 03:46:07 executing program 2: syz_open_dev$vim2m(&(0x7f0000000200), 0x2, 0x2) 03:46:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:07 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) dup3(r0, r2, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0xffb9, 0x0}, 0x10023) 03:46:07 executing program 4: socketpair(0x26, 0x0, 0x0, &(0x7f0000001380)) 03:46:07 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) [ 2233.094455][T26528] fuse: Bad value for 'fd' 03:46:08 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:08 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x2, @sdr}}) 03:46:08 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) 03:46:08 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 03:46:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:08 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x200, 0x1, 0x0, "d50f377402f8b0108faa5e1bdfc15b03896615fc643b5e555eaa93e65bbb4e8e"}) 03:46:08 executing program 2: socket$caif_seqpacket(0x25, 0x5, 0x8) 03:46:08 executing program 4: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x5, 0x0, 0x9, 0xe9}]}, 0x10) 03:46:08 executing program 3: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) 03:46:08 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) [ 2233.294221][T26547] fuse: Bad value for 'fd' 03:46:08 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x0, 0x0, {0x2, @pix_mp}}) 03:46:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2233.435914][T26561] fuse: Bad value for 'fd' 03:46:08 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:08 executing program 4: syz_usb_connect$cdc_ecm(0x2, 0xde, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x1, 0x1, 0x8, 0x40, 0xa8, [{{0x9, 0x4, 0x0, 0x1f, 0x2, 0x2, 0x6, 0x0, 0x58, {{0x5}, {0x5, 0x24, 0x0, 0x3f}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4, 0x8, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0xa6, 0x4, 0x9, 0xb6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x0, 0x7f, 0x0, 0x800, 0x20}, @mbim_extended={0x8, 0x24, 0x1c, 0x1045, 0x0, 0x3f}, @mdlm_detail={0x71, 0x24, 0x13, 0x7, "bae78776a889cd8c169efd694d93a720874936fb072612355048ffee6b3bb8e3dc797eb6157f715d2c8cdb515f49919fe0df172080a5a8cbe45c780e0a01961f488201966c0be83cd2435c4c0fd2cb1b3220b95a7ed8866e3014007ef480fc2f387a37f1b17ebac199902f0f17"}, @call_mgmt={0x5, 0x24, 0x1, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x20, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1f, 0x5}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xff, 0x7, 0x5, 0x0, 0x2}, 0xb5, &(0x7f0000000180)={0x5, 0xf, 0xb5, 0x4, [@generic={0x8a, 0x10, 0x4, "a7a8e6e73c8ef1f52442a7f580da98ff61226a32e31ba9a2fc59315a8a2ca5af3cc3ab636c74e0e104fdf6e2c9b29741b35d99213589577ab29b196b9595ddf4945e5f9f74672a244e9effbc7db5656865b8b57f879065110693bd3adf5def37473d843b741de1c65b5dc5352123bbb6d5920312d2d48f27f2979190b8b424ab6522f0ff98b109"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x30, 0x24, 0x3f, 0x5, 0x6}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x0, 0xf0f, 0x8000, [0xc000, 0xffc030]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x9, 0x3569}]}, 0x7, [{0xea, &(0x7f0000000240)=@string={0xea, 0x3, "c45dc157a0ca4aa3b373c83c6aeeac5fe93117fab8d1107929a32d1b8ab71cd759d585c07891abdecf95d8f07427138a1dcfae9072042709257d2565e75f2c0579f48ec5b6a95515d65c437780956a77074c856a2676b23dbf888bb9ee2c224d402c28105df227a5912787730510bf90737f429a2f1616a35cb3a15ddc9f934f11ba275246ed547e73e2f00145c48c443a11803e59d4a85867f077a7b59b3c5d6a83aabd1f80cf53ec5db913df7cf4402e1a499173e99ff6d3b4e48e6b66c036cc592150ee1429c2bfcb3ad39b098540c81eab662efda47c05ac3380451a42b47b1a018bb74bcf8d"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41f}}, {0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4c, &(0x7f0000000400)=@string={0x4c, 0x3, "e9cf23ef89c6a640f4b87f36ce1022cc61fcf1d7a20daf05cbdcdd3b1f72553bf8cb5698426a4f143cfd4071ca82ef24b7aaba6db44e68a7ec19822a98fb283d515e44da775f4ab95a33"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x441}}]}) 03:46:08 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) 03:46:08 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x200, 0x1, 0x0, "d50f377402f8b0108faa5e1bdfc15b03896615fc643b5e555eaa93e65bbb4e8e"}) 03:46:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @pix_mp={0x81, 0x41}}) 03:46:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:08 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) 03:46:08 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req={0x98, 0x10000000}, 0x10) 03:46:08 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7f, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}}}) 03:46:08 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) 03:46:08 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:08 executing program 2: syz_clone(0x10840000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2233.681018][T26573] fuse: Bad value for 'fd' 03:46:08 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x40000}, 0x20) [ 2233.823037][T23293] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 2234.230443][T23293] usb 5-1: not running at top speed; connect to a high speed hub [ 2234.310463][T23293] usb 5-1: config 1 interface 0 altsetting 31 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2234.321398][T23293] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2234.680699][T23293] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2234.689802][T23293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.698347][T23293] usb 5-1: Manufacturer: П [ 2234.703155][T23293] usb 5-1: SerialNumber: ⠁ [ 2234.720622][T26564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2235.040489][T23293] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 2235.060475][T23293] usb 5-1: USB disconnect, device number 84 03:46:10 executing program 4: r0 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000200)) 03:46:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:10 executing program 1: syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) 03:46:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1c5}]}) 03:46:10 executing program 3: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0xbe8c1, 0x0) 03:46:10 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) 03:46:10 executing program 1: syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) 03:46:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8947, &(0x7f0000000080)={'sit0\x00', 0x0}) 03:46:10 executing program 3: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000540), 0x4) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 2235.516520][T26597] fuse: Bad value for 'fd' 03:46:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@mcast1, 0x0, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x60, r2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r3, 0x4b30, &(0x7f0000000080)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200000, 0x0) sendmsg$WG_CMD_GET_DEVICE(r4, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0xa8441, 0x0) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x4000, 0x13000}) ioctl$KDADDIO(r3, 0x4b34, 0x8000) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200000, 0x0) sendmsg$WG_CMD_GET_DEVICE(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000027bd7000fbdbdf251c00000008000300", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x28}, 0x1, 0x0, 0x0, 0x2004c001}, 0x46) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, r7, 0x6, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x57}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x162}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1d}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000045}, 0x40000091) 03:46:10 executing program 3: r0 = epoll_create(0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 03:46:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:10 executing program 1: syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) 03:46:10 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc102, 0x700) 03:46:10 executing program 3: fanotify_mark(0xffffffffffffffff, 0xb4, 0x0, 0xffffffffffffffff, 0x0) [ 2235.708165][T26613] fuse: Bad value for 'fd' 03:46:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 03:46:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@mcast1, 0x0, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x60, r2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r3, 0x4b30, &(0x7f0000000080)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200000, 0x0) sendmsg$WG_CMD_GET_DEVICE(r4, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0xa8441, 0x0) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x4000, 0x13000}) ioctl$KDADDIO(r3, 0x4b34, 0x8000) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200000, 0x0) sendmsg$WG_CMD_GET_DEVICE(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000027bd7000fbdbdf251c00000008000300", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x28}, 0x1, 0x0, 0x0, 0x2004c001}, 0x46) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, r7, 0x6, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x57}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x162}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1d}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000045}, 0x40000091) 03:46:11 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) 03:46:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:11 executing program 3: syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="7e6ea53ed76f"}, 0x14) 03:46:11 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',nr_blocks=']) 03:46:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 03:46:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@mcast1, 0x0, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x60, r2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r3, 0x4b30, &(0x7f0000000080)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200000, 0x0) sendmsg$WG_CMD_GET_DEVICE(r4, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0xa8441, 0x0) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x4000, 0x13000}) ioctl$KDADDIO(r3, 0x4b34, 0x8000) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200000, 0x0) sendmsg$WG_CMD_GET_DEVICE(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000027bd7000fbdbdf251c00000008000300", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x28}, 0x1, 0x0, 0x0, 0x2004c001}, 0x46) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, r7, 0x6, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x57}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x162}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1d}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000045}, 0x40000091) [ 2236.333759][T26631] tmpfs: Bad value for 'nr_blocks' 03:46:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) [ 2236.370768][T26628] fuse: Bad value for 'fd' 03:46:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@mcast1, 0x0, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x60, r2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r3, 0x4b30, &(0x7f0000000080)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200000, 0x0) sendmsg$WG_CMD_GET_DEVICE(r4, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0xa8441, 0x0) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x4000, 0x13000}) ioctl$KDADDIO(r3, 0x4b34, 0x8000) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200000, 0x0) sendmsg$WG_CMD_GET_DEVICE(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000027bd7000fbdbdf251c00000008000300", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x28}, 0x1, 0x0, 0x0, 0x2004c001}, 0x46) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, r7, 0x6, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x57}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x162}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1d}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000045}, 0x40000091) 03:46:11 executing program 2: ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000001c0)) 03:46:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@mcast1, 0x0, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x60, r2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r3, 0x4b30, &(0x7f0000000080)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200000, 0x0) sendmsg$WG_CMD_GET_DEVICE(r4, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0xa8441, 0x0) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x4000, 0x13000}) ioctl$KDADDIO(r3, 0x4b34, 0x8000) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200000, 0x0) sendmsg$WG_CMD_GET_DEVICE(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000027bd7000fbdbdf251c00000008000300", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x28}, 0x1, 0x0, 0x0, 0x2004c001}, 0x46) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, r7, 0x6, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x57}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x162}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1d}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000045}, 0x40000091) 03:46:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/current\x00') write$char_usb(r0, &(0x7f0000000140)="c54dcd8f922a", 0x6) [ 2236.583235][T26647] fuse: Bad value for 'fd' 03:46:12 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) 03:46:12 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x100c0a, &(0x7f00000001c0)) 03:46:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) 03:46:12 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@mode}]}) 03:46:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000001340)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224cbabd0ee44575771335695c885f66e31abdc146bcb28d21e06c3031dc382df5bcf31a5715d2e694db3e65d351de91ac800f036f6662317934d1604dd808272a31857cc3c337cae9410ccba01fe97025b0fb4f6730c0df305a23af8c2b7e8434a6e69beabe81fbac2deddc0169f354b86af5dbac23f0c4e59b19ca12249c91f166af8ac253a8d26f53e045f034248117eb1c0de49317e48fe01d85a8e2f96f375567b65e9d1f091e67eec7094e6770a3e7b04ccb605d832b4ac61f090e14a138fa3adf3b89eb17717e2f47834bd7ecdb7327339990d08e2e7abb45ab07069792c43469d65c3cef32815d07586ef48f11f467e60d943e30ca030c40e1f518bcbd822023c3c9310e93705604f67d6f277d845676fe79699a5a33e53ec92d82cf72930f4959bdad50db7c794a616aa8649fda3b6d3d7b230130454133ecc8a69f2d7a251c24b08c4a2c949244bc899749984571f12848b1c4401d65dfd50da42b9c8249def4b786d70d06a5c4f9f192e6a6a3d977e5e0659ecb3fe6bbf1c33e78068a5b218d430a81b19d86670d555017617abcd63d07c8644182f6efeb6234a95f80d7d82bea89acb05490edad223b08cee8e8f0f0524a1424b13eabf91e90e7c0f51635c9fa4cf01ce96f778bbbd6c9111daca23e552b86814edc4d5bf07e618f913e4070f29996a20041e94c33d906419ed66779a4c71ab70c5fd5f55973afe75b5fcd83978c9d4782cb6ef1a5dbb5f4d43dbffaa91c720f6cdbc96b34e2d3bd9a1fe0909f9335ea5e4cc10179851a23630c399a78b16c1427363df49902e939fe9bac7bc76c14f1aac498c592ae52ded00c4f296767cc208eae5279a3aac98652f270e57dce28d77576b258346497465a43909bb744b8c77946d791221f8893a9be308db8d70a6a0995ca1dd054eaf8159dca97ff8483c6930dd43f058c8a48f6e7809974d2a1a55e4e96ffc4e25a5a4ac03f08ecb9b9f6d4041d191bb66fafb574c3bf725de632029d4015ec734942b6d0b259cabf229b26b371ac285dd83fb0a87ef5d7379aea6194cc817071864c9b9f12e398d72986cf95eacc35a3106bb94534f488ade57295c359246cda278797a81b2dd12aa7e81d91c46d165704b02fa36949e5b09df03ea45f153311ce56e4cdb981612dc1a095a3f7c8081127de57cce285c767e3ed712e9eace91814dd91d49940aa082617fdfba68dde4f5bd4ff03c0186a760b3c8683a4dfe8cb284decd9e0fa4f08185cccb43fefeaf3e72a45939d4e4918102540b3a8424986bf62cf06fbabb0ba075fab3d8292b46f72652d21b27b1439a11858d7ba5dd64f24cfbae81fd95b3912bf0b3e1394a3f08edca429c4f69fc3c6c0aca8fe1eac025d13892d6ab42511292628ce8f03545479d3ade85e05644c70c0219db0d70c3fcf42fc96d576be3b791dd151703eb629c1172463cb0d7d35977e17ad331d073e71f944ba459", 0x479}], 0x1) connect(r0, &(0x7f0000931ff4)=@un=@abs, 0x80) 03:46:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x8, 0x0, 0x4, 0x0, 0x15d1}, 0x48) 03:46:12 executing program 2: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0xffffffffffff8002}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 03:46:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) [ 2237.396438][T26659] fuse: Bad value for 'fd' 03:46:12 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000400)={@broadcast, @random='\x00\x00\x00\x00\x00\b', @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) 03:46:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x4b30, &(0x7f0000000000)) 03:46:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2237.537344][T26674] fuse: Bad value for 'fd' 03:46:13 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}) 03:46:13 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "0e6f2098cc8670bdea6d6e787ee83106"}) 03:46:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x4d, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) dup3(r1, r0, 0x0) 03:46:13 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@huge_never}]}) 03:46:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:13 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/123) 03:46:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=@delqdisc={0x23, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x23}}, 0x0) 03:46:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1}) 03:46:13 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67]}}]}) [ 2238.331665][T26681] fuse: Bad value for 'fd' 03:46:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:13 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)) [ 2238.490024][T26698] fuse: Bad value for 'fd' 03:46:14 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:14 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x894c, 0x0) 03:46:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1}) 03:46:14 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8921, &(0x7f0000001100)) 03:46:14 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "0e6f2098cc8670bdea6d6e787ee83106"}) 03:46:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 03:46:14 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000001380)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}}) 03:46:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1}) 03:46:14 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0xffd) [ 2239.204082][T26706] fuse: Bad value for 'fd' 03:46:14 executing program 1: bpf$MAP_CREATE(0x2, &(0x7f0000000040), 0x48) 03:46:14 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x3e, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000040)) 03:46:15 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:15 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 03:46:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 03:46:15 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105517, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 03:46:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) 03:46:15 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000001380)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}) 03:46:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 03:46:15 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x0) 03:46:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000001380)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 2240.182824][T26734] fuse: Bad value for 'fd' 03:46:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:15 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x80045500, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 2240.330481][T26749] fuse: Bad value for 'fd' 03:46:15 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:15 executing program 3: socketpair(0x18, 0x0, 0x3f, &(0x7f0000000440)) 03:46:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 03:46:15 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x3e, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000180)={0x1, 0x8, [0x0, 0x0]}) 03:46:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x82}]}]}, 0x28}}, 0x0) sendfile(r5, r4, 0x0, 0x10000a006) 03:46:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:15 executing program 3: syz_emit_ethernet(0x76, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x7c, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "1ec8a4336dbe7abe848e4572bce6ecc9"}, @eol, @exp_fastopen={0xfe, 0x8, 0xf989, "838c37b0"}, @exp_smc={0xfe, 0x6}, @nop, @generic={0x0, 0xd, "060b264e2a27d588b060f0"}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 03:46:16 executing program 2: r0 = getegid() syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB='mode=00000000000020000000000,mode=00000000000020000000001,gid=', @ANYRESHEX=r0, @ANYBLOB=',gid=', @ANYRESHEX=0xee01, @ANYBLOB=',uid=', @ANYRESHEX=0xee00]) openat2$dir(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x4000}, 0x18) 03:46:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x4, 0x0, 0x20000000) [ 2241.069164][T26760] fuse: Bad value for 'fd' 03:46:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x10, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "1ec8a4336dbe7abe848e4572bce6ecc9"}, @eol, @exp_fastopen={0xfe, 0x8, 0xf989, "838c37b0"}, @exp_smc={0xfe, 0x6}, @nop, @generic={0x0, 0xd, "060b264e2a27d588b060f0"}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 03:46:16 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_ACTIVATE(r0, 0x5413, 0x0) 03:46:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2241.152533][ T27] audit: type=1804 audit(2000000776.089:735): pid=26757 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877944193/syzkaller.ZVtzIz/4145/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 03:46:16 executing program 3: socketpair(0x1, 0x0, 0x0, &(0x7f0000000200)) 03:46:16 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') read$ptp(r0, &(0x7f0000000100)=""/23, 0x17) [ 2241.275593][T26777] fuse: Bad value for 'fd' 03:46:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x82}]}]}, 0x28}}, 0x0) sendfile(r5, r4, 0x0, 0x10000a006) 03:46:16 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) 03:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x6, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 03:46:16 executing program 2: syz_clone(0x80223400, 0x0, 0x0, &(0x7f0000003940), 0x0, 0x0) 03:46:16 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:16 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f80)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x7a00}]}}, &(0x7f0000000e80)=""/233, 0x2a, 0xe9, 0x1}, 0x20) 03:46:16 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x17, 0x0, 0x1, 0x3dc1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 03:46:16 executing program 4: syz_clone(0x80223400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2241.499839][T26792] fuse: Bad value for 'fd' 03:46:16 executing program 2: getitimer(0xa23427c8fcee3040, &(0x7f0000000040)) 03:46:16 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 2241.613260][ T27] audit: type=1804 audit(2000000776.549:736): pid=26804 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir877944193/syzkaller.ZVtzIz/4146/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 03:46:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000002040)) 03:46:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x4b37, 0x0) 03:46:16 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:16 executing program 4: syz_clone(0x48900200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 03:46:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x4b46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "4d2d43cd65c1a483a89f85198bb12fadc4abd1"}) 03:46:16 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x2a, 0x1, 0x0, 0x0, 0x0) 03:46:16 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:16 executing program 3: syz_clone(0x64a00000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:46:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x4b30, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "4d2d43cd65c1a483a89f85198bb12fadc4abd1"}) 03:46:16 executing program 1: syz_clone(0x48c0000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:46:16 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x16, 0xfff}], 0x81009a, &(0x7f0000000180)=ANY=[]) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000001, 0x0, 0x2811fdff) creat(0x0, 0x1d7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) 03:46:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:17 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:17 executing program 4: syz_clone(0x48900200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 03:46:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x4b3a, 0x0) 03:46:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x4b30, 0x0) 03:46:17 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 03:46:17 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:17 executing program 1: prctl$PR_GET_NAME(0x10, &(0x7f0000000340)=""/99) 03:46:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS2(r0, 0x5609, 0xfffffffffffffffd) 03:46:17 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x2, 0x3}, {0xd}, {0x6}, {}]}]}}, &(0x7f0000000080)=""/236, 0x46, 0xec, 0x1}, 0x20) 03:46:17 executing program 1: syz_clone(0x48900200, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:17 executing program 4: syz_clone(0x48900200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 03:46:17 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000140)=""/216, 0xd8}}, 0x120) 03:46:17 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000240), 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 03:46:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:17 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3, 0x1, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7ff, 0x80000000, &(0x7f0000000280)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, 0x0) 03:46:17 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:17 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, &(0x7f0000001a80)=[{&(0x7f00000016c0)=""/199, 0xc7}, {0x0}], 0x2, 0x0) 03:46:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') read$ptp(r0, 0x0, 0x0) 03:46:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) 03:46:17 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x38}}, 0x0) 03:46:18 executing program 4: syz_clone(0x48900200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 03:46:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:18 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f80)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe8}]}}, &(0x7f0000000e80)=""/233, 0x2a, 0xe9, 0x1}, 0x20) 03:46:18 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) unshare(0x40400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0x0, 0x0}, 0x10) 03:46:18 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:20 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff) 03:46:20 executing program 2: syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee01}}) 03:46:20 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0xf, 0x1, 0x0, 0x0, 0x0) 03:46:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:20 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:20 executing program 4: socketpair(0xa, 0x0, 0xffffffff, &(0x7f0000000000)) 03:46:20 executing program 3: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xfffffff7}, 0x8) 03:46:20 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x12, r0, &(0x7f0000000280), &(0x7f0000000640)) [ 2245.521786][T26943] fuse: Bad value for 'fd' 03:46:20 executing program 2: openat$ttyS3(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) 03:46:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:20 executing program 1: bpf$BPF_GET_BTF_INFO(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x16, 0x0}, 0x10) 03:46:20 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007880)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000035200852000008095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:46:20 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2b, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x538, 0x598, 0x310, 0x598, 0x0, 0x0, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', @ipv4=@multicast2}}}, {{@ipv6={@private0, @dev, [], [], 'veth1_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@dev, @local, [], [], 'lo\x00', 'ip6erspan0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "6bc2b4292f212d81761a7712b4860c1227214d0abf089c71611bf53d0e19"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 03:46:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000400)="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", 0x171}], 0x1}, 0x0) 03:46:20 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000002c0)=ANY=[], 0xf9) read$FUSE(r0, &(0x7f000000b6c0)={0x2020}, 0x2020) 03:46:20 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:20 executing program 3: openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) 03:46:20 executing program 2: r0 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)=',-[]\x00', 0x0, 0x0) 03:46:20 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x3}]}}, &(0x7f0000000100)=""/151, 0x26, 0x97, 0x1}, 0x20) 03:46:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000400)) r1 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000003c0)) 03:46:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8e2ee543a4e137ee}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x38}}, 0x0) 03:46:20 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x15, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x95}]}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0x8e, &(0x7f00000005c0)=""/142, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:46:20 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000100)=""/151, 0x28, 0x97, 0x1}, 0x20) 03:46:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6}]}, 0x10) [ 2245.935013][T26972] fuse: Bad value for 'fd' 03:46:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x20000618, 0xb0, 0x338, 0x338, 0x278, 0x278, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'sit0\x00', 'wg0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@owner={{0x38}, {0xffffffffffffffff}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'hsr0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@ah={{0x30}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'wg1\x00', 'lo\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team_slave_0\x00', 'team_slave_0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) 03:46:21 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @local}}}], 0x40}}], 0x1, 0x0) 03:46:21 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007880)={0x2, 0x2, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0xad}, @exit], &(0x7f0000007700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:46:21 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000140)=""/237, 0x26, 0xed, 0x1}, 0x20) 03:46:21 executing program 1: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @multicast}, 0x0, {0x2, 0x0, @dev}}) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000008, 0x8010, r0, 0x0) unshare(0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, "000000000000000200"}}}]}, 0x48}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x67) sendto$inet(r4, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000024000bc600ba90000008aa0000000000", @ANYRES32=r7, @ANYBLOB="00ffffffff00000000080019af8d657211918c79f6a54b7a0dd5265c3d9fa5"], 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@gettfilter={0x2c, 0x2e, 0x4, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xe, 0xe}, {0xc, 0xfff0}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4020000) 03:46:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, r1, 0x709, 0x0, 0x0, {0x38}}, 0x14}}, 0x0) 03:46:21 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 2246.172041][T26994] fuse: Bad value for 'fd' 03:46:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x25, &(0x7f0000000100)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "8d1e6e1d80e8c0a5e5cd71a5317dcea35131ed7a0adda5e107c0013d5adbeb67a6a0ba4be92e7f5760cbc55ecaaccc122888262eba94e819bf76c18563e9cb01f616dabd1ec9c4c2576e697d8c54ed05"}, 0xd8) 03:46:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001a005f0214f9f4070009040800000000000000000000000008000f0000000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000002300)={0x0, 0x0, 0x0}, 0x0) 03:46:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0xa8, 0xa8, 0xffffffff, 0xa8, 0x298, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@ip={@empty, @remote, 0x0, 0x0, 'hsr0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x7}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @local, @icmp_id, @icmp_id}}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth1\x00', 'wg0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @multicast1, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @broadcast, @rand_addr, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 03:46:21 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:21 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007880)={0x6, 0x2, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7d}, @exit], &(0x7f0000007700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:46:21 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007880)={0x5, 0x2, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0xae}, @exit], &(0x7f0000007700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:46:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0xd3663f0f1d8a3baf, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 2246.425843][T27015] fuse: Bad value for 'fd' 03:46:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2246.502939][T27021] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2246.595195][T27030] fuse: Bad value for 'fd' 03:46:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) 03:46:21 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:21 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x0}) 03:46:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@isdn, 0xf) 03:46:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x21, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x538, 0x598, 0x310, 0x598, 0x0, 0x0, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', @ipv4=@multicast2}}}, {{@ipv6={@private0, @dev, [], [], 'veth1_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@dev, @local, [], [], 'lo\x00', 'ip6erspan0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "6bc2b4292f212d81761a7712b4860c1227214d0abf089c71611bf53d0e19"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 03:46:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000019c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001a40)={'veth0_to_batadv\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="37000000aafefffff9ff"]}) 03:46:21 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0xd3663f0f1d8a3baf}, 0x14}}, 0x0) [ 2246.759626][T27042] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:21 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x0}) [ 2246.812392][T27038] fuse: Bad value for 'fd' 03:46:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0x8e, &(0x7f00000005c0)=""/142, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:46:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000024c0)={'ip6_vti0\x00', 0x0}) 03:46:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000140)=""/51, &(0x7f0000000080)=0x33) 03:46:21 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 2246.933737][T27052] fuse: Bad value for 'fd' 03:46:21 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x0}) 03:46:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}}], 0x1, 0x0) 03:46:21 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x58, r1, 0x103, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) 03:46:21 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x3, &(0x7f0000001040)=@framed, &(0x7f0000001100)='GPL\x00', 0x2, 0xd0, &(0x7f0000001140)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:46:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:22 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x0}) 03:46:22 executing program 3: unshare(0x6c060000) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) unshare(0x10000000) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e4001f000000ff01f1eb00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca020000b0"], 0x140}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 03:46:22 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007880)={0xf, 0x2, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x8}, @exit], &(0x7f0000007700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:46:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 03:46:22 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000480)=@framed={{0x10}}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0x8e, &(0x7f00000005c0)=""/142, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:46:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=@framed={{}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1840}]}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0x8e, &(0x7f00000005c0)=""/142, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2247.212444][T27073] fuse: Bad value for 'fd' 03:46:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x38}}, 0x0) 03:46:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:22 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:22 executing program 2: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0) [ 2247.354281][T27086] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. 03:46:22 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1005, 0x0, 0x0) [ 2247.422349][T27091] fuse: Bad value for 'fd' 03:46:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2247.597340][T27104] fuse: Bad value for 'fd' 03:46:22 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) readv(r0, &(0x7f00000012c0)=[{0x0}], 0x1) 03:46:22 executing program 2: open(&(0x7f0000000100)='./file0\x00', 0x8280, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:46:22 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:22 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x8280, 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 03:46:22 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x8, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000100)=""/204, 0xcc, 0x0, 0x0, 0x0) 03:46:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, 0x0, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:22 executing program 4: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000340)) 03:46:22 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "fcee3de886f3a88cd4aeda7b033e611353d3dc8ba4a56f298d1511e79dd13da270efcb91fad1ebe8669068940767a111f3521e0492b1b0276665a6bbcbe32538"}, 0x48, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "fcee3de886f3a88cd4aeda7b033e611353d3dc8ba4a56f298d1511e79dd13da270efcb91fad1ebe8669068940767a111f3521e0492b1b0276665a6bbcbe32538"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x0) 03:46:22 executing program 1: syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x401, 0x0, 0x7f}, {0x0, 0x0, 0x0, 0x10000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) 03:46:22 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 2247.830350][T27112] fuse: Bad value for 'fd' 03:46:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, 0x0, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:22 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "fcee3de886f3a88cd4aeda7b033e611353d3dc8ba4a56f298d1511e79dd13da270efcb91fad1ebe8669068940767a111f3521e0492b1b0276665a6bbcbe32538"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) 03:46:22 executing program 4: semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000000)=""/234) 03:46:22 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2710}) 03:46:22 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:22 executing program 4: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffa98, 0x0) 03:46:22 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./bus\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 03:46:22 executing program 2: mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x2, @thr={0x0, 0x0}}) [ 2248.024539][T27132] fuse: Bad value for 'fd' 03:46:23 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, 0x0, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@migrate={0xa8, 0x21, 0xb8e77dbc981349b1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in6=@dev}]}, @XFRMA_IF_ID={0x8}]}, 0xa8}}, 0x0) 03:46:23 executing program 4: r0 = semget$private(0x0, 0x0, 0x210) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$vcsa(&(0x7f0000002480), 0x0, 0x282082) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x800) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x78, r4, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x63}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x44810}, 0x200484c0) r5 = semget(0x1, 0x2, 0x721) semctl$GETZCNT(r5, 0x0, 0xf, &(0x7f0000001000)=""/22) 03:46:23 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f00000000c0), 0x881, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xd1a}]}) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) 03:46:23 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/241, 0xf1}], 0x1, 0x1, 0x0) 03:46:23 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 2248.199355][ T27] audit: type=1804 audit(2000000783.129:737): pid=27140 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/file0/file0/root/syzkaller-testdir933185304/syzkaller.YyXyqZ/4257/file0/file0" dev="ramfs" ino=247159 res=1 errno=0 03:46:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@migrate={0xa8, 0x21, 0xb8e77dbc981349b1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in6=@dev}]}, @XFRMA_IF_ID={0x8}]}, 0xa8}}, 0x0) 03:46:23 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/241, 0xf1}], 0x1, 0x55, 0x0) [ 2248.358000][T27151] fuse: Bad value for 'fd' 03:46:23 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xffffffffffffff01) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x280) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x1000) syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000e40)='./file0/file0\x00', 0x0, 0x2, &(0x7f0000003340)=[{&(0x7f0000000e80)="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", 0xc43, 0x3be}, {&(0x7f0000002180)="fe", 0x1, 0x52b9000000}], 0x0, 0x0) 03:46:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x0, 0x0, 0x0, 0x6, 0x1}, 0x48) 03:46:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 03:46:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@migrate={0xa8, 0x21, 0xb8e77dbc981349b1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in6=@dev}]}, @XFRMA_IF_ID={0x8}]}, 0xa8}}, 0x0) 03:46:23 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:23 executing program 3: futex_waitv(&(0x7f0000001ec0)=[{0x0, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) 03:46:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x34}}, 0x0) [ 2248.575882][T27170] fuse: Bad value for 'fd' 03:46:23 executing program 4: r0 = io_uring_setup(0x1d5e, &(0x7f0000000900)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 03:46:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x0, 0x0, {0x14}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x2c}}, 0x0) 03:46:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@migrate={0xa8, 0x21, 0xb8e77dbc981349b1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in6=@dev}]}, @XFRMA_IF_ID={0x8}]}, 0xa8}}, 0x0) 03:46:23 executing program 4: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[{&(0x7f0000000ac0)="01", 0x1, 0xfffffffffffffff7}], 0x0, 0x0) 03:46:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f00000004c0)='x', 0x1}, {0x0}, {&(0x7f00000017c0)='~', 0x1}], 0x4, &(0x7f00000018c0)=[@ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}], 0x30}, 0x40) [ 2248.768809][T27187] fuse: Bad value for 'fd' 03:46:23 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x80081270, 0xffffffffffffffff) 03:46:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:23 executing program 2: syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="bb", 0x1}], 0x0, &(0x7f0000000440)={[{@overriderock}, {}, {@map_off}], [{@pcr}]}) [ 2248.824475][T27193] loop4: detected capacity change from 0 to 16383 [ 2248.955254][T27199] fuse: Bad value for 'fd' 03:46:23 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:23 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@migrate={0xa8, 0x21, 0xb8e77dbc981349b1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in6=@dev}]}, @XFRMA_IF_ID={0x8}]}, 0xa8}}, 0x0) 03:46:23 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x10182) 03:46:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8943, &(0x7f00000000c0)={'vxcan1\x00'}) 03:46:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xb24e, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 03:46:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2248.980220][T26191] I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 03:46:23 executing program 4: capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 03:46:23 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@migrate={0xa8, 0x21, 0xb8e77dbc981349b1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in6=@dev}]}, @XFRMA_IF_ID={0x8}]}, 0xa8}}, 0x0) 03:46:24 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002dc0)={0x6, 0x1, &(0x7f0000002b80)=@raw=[@generic={0x20}], &(0x7f0000002bc0)='GPL\x00', 0x2, 0xe0, &(0x7f0000002c00)=""/224, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:46:24 executing program 2: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000001300)=[{&(0x7f0000000000)="1c2dc4812770a4044dfbb2e54507f326975fbdd9196eab487364830ab1375d8e5d1022b4e9861abcf32d3506a5c6b916dc83b795e6e0342016dd402f40f6112f201c1b428822c13b564176bd0b7613c09078b53c6177e79cac49535279e4b2fac4ab5ed554af0be5f269cc71a45380dbfb28d7779971bed20fe0d7255dce614106525058533ff2ea55344ed9ff03f62bd5cd25b21034139c8852aaaef70f8de092f655d9f3461e76bc987906c6335d9a77ff2b739daf3129b33673d8710efac147a41fa974c4276bf09a6270cbacbba71376b706502d7fe28e732f0206c2a69418979edc5a96f66da324e7e4da1e222ddbe7869609e29d61b1808ac305f72a9aa691e35cb66553f042ad224d9067e92c0153fbcd414ff8999f871315d8ee4391930801a89036a537e8e10f3abde30f781e4221d5b4612de0c2402cc90bb7eefd1dcb716275c06ca8d0aafc5dfd32f31366844ddfbd624eb075faca69d192190321a50dc0c6d2b71ea7376a893d924cd4d706ef76c406e0297ac8bf8bc8db4859029f3744fb31ca34af13e1afa6b3310bf94c446f83dc628d9b874080cb37d404f2422b8cdbbe65436a8bed857495d76fee510d11b498381808876e948ba56f973ecbe50c5b2a39e66e055a2e5ac7f460b1aa92c944ccc312b828cc3c6f3f87ecb40a5a168efa219376ab74541d0ac8dfcec7d6ff317706a361cf7a", 0x1fb, 0x5}], 0x0, 0x0) 03:46:24 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@migrate={0xa8, 0x21, 0xb8e77dbc981349b1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in6=@dev}]}, @XFRMA_IF_ID={0x8}]}, 0xa8}}, 0x0) 03:46:24 executing program 3: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[{&(0x7f0000000a00)='\\', 0x1}], 0x0, 0x0) [ 2249.135712][T27213] fuse: Bad value for 'fd' 03:46:24 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c0, 0x0, 0x2e0, 0x4f0, 0x2e0, 0x3d0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6fe7957fb573028d5ee5281dcd18d48b88ef6d799e456dadc82e46b5a0ca"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@local, @private0, [], [], 'dummy0\x00', 'pimreg0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@loopback}}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0x0, 0x0, 0xffffffff], [], 'veth1_vlan\x00', 'syz_tun\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) 03:46:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x894c, 0x0) 03:46:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:24 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1260, 0xffffffffffffffff) 03:46:24 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@migrate={0xa8, 0x21, 0xb8e77dbc981349b1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in6=@dev}]}, @XFRMA_IF_ID={0x8}]}, 0xa8}}, 0x0) 03:46:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000004c0)={0x0, 0x7, &(0x7f0000000480)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0x4, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x2c}}, 0x0) 03:46:24 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@migrate={0xa8, 0x21, 0xb8e77dbc981349b1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in6=@dev}]}, @XFRMA_IF_ID={0x8}]}, 0xa8}}, 0x0) 03:46:24 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) [ 2249.384241][T27232] x_tables: duplicate underflow at hook 1 [ 2249.420068][T27238] fuse: Bad value for 'fd' 03:46:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="edff00000000000000000200000018000180140002006d6163766c616e31"], 0x2c}}, 0x0) 03:46:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:24 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@migrate={0xa8, 0x21, 0xb8e77dbc981349b1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in6=@dev}]}, @XFRMA_IF_ID={0x8}]}, 0xa8}}, 0x0) [ 2249.506359][T27246] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 2249.567813][T27251] fuse: Bad value for 'fd' 03:46:24 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:24 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) symlinkat(&(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000140)='./file1\x00') 03:46:24 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) 03:46:24 executing program 3: syz_mount_image$iso9660(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)={[{@check_relaxed}, {@sbsector={'sbsector', 0x3d, 0xffffffffffffffff}}, {@nojoliet}]}) 03:46:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, 0x0, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 03:46:24 executing program 2: capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) prctl$PR_SET_SECUREBITS(0x1c, 0x0) 03:46:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) [ 2249.737480][T27259] fuse: Bad value for 'fd' 03:46:24 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:24 executing program 3: execveat(0xffffffffffffffff, &(0x7f0000000e80)='./file0\x00', &(0x7f0000001100)=[&(0x7f0000000ec0)='kuchannel\x00'], 0x0, 0x0) 03:46:24 executing program 2: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000e00), &(0x7f0000000e40)='./file0/file0\x00', 0x0, 0x2, &(0x7f0000003340)=[{&(0x7f0000000e80)="924a6b7a1b57cfa18b7550d0ab7fcad785cc4efbe050ddf9d64d4010b1a5268efbb5644a1a89ec3dfdf325fc0f1f12c4059a77269e91cccfa66f05a8328f9aedaa6771d68a64c233ee9a9f916f283b3e749e361c391018e7897b2a686a499f7314240d0c600ec64d3b363bf8cbe3647bcbea667debaae4381f470a305d3d8af0e840307f991a12fa43b2b9dbccde731621d2e3794ea0ae727f854ee11ad8dede54b0d3faa4b9045454bdb224eaf439d868369c123609470e49822f662ea61f1b18d9158ee5b38d21462318c4efbe6420b1d93eec601e90dbd777f8640a2515fa46aa24e14832f5f0e382d49059965cdfd447c605f57a03c894f6a3fe2c4ac04bee1a608ab1171b96183c9bcfcb3f3f94717010164f079034ab6f291ba08b0cef143def67a23c6b43a1f44a4f7f4ffe0ae5af753b57ef6cd5b7011836fb2ee45e1c63dec74b41c128819e9e86ac2090b916db18f9d3e619000bffb2487a76d5a9c57acd6112294aa2da9411e171aa925e397400d2d2f6375f6578c778026357c50e1f5ad126f76d71dc15bea04ee52942e568a8c61caed126d143cf89c83b3dbec25bb3249d1e65f4d00dbbdcf49e4d97ffb028aecb9aeeb8fcbade819540ee31405e658d271bd20a0cca8c7e9e3a453f161e710e45548aceb8881f65fb07f877b2d1faf72e652ba1372e3fc6ee7c49fb5e4befcf9b9c897e7174cdfd5d47a76094f49119b64f5b67e1558f3a08f0ab5212070035df61ee3ae659e2db5ab76add93046d227f15243a19ac08196a8d5c88ee9668f1abcba5c4ab301ccce5c417c0dd51fc91a2d789bacc47bc08fb75b7c48b7b87e05391436da23076d6fe03f4230381553351a387a4765cd05dc8444e5a761476adb2ef2321ef1ba5c38697388d139ebf1b5bbe3334528b74d69814285d608646f962f2c713e0e1bef130e8d2d3aa563f322bdfe2c0c070d53eb2047ab25cf978ec34b505ee70fa752525941262bb0dbd88bc92e829ef38b2a964f9bbb91ba7dc50370b54f15116fae9bc282b2e80479d0b28574ecd807263eb446e1e1a49964a4998dcd7ab26850f599ecc5b9eac32459389a0f0dd3c2499b7f2961f0f963106c822fe5da4ea11bcbee1270bc42c2895e5e96c82355dff1ed199bed81cb7d2f1cd410ff0fcb11110123e8087a3321278b123a1bc88477fc1766242a3eb07a357f20ba59f1db16f46e952bbc0a6dfeb0539f86f275baa3dff42153d9765931498a53be1d733149f7771e9d4336298657b18ea1e33c516396a241285a21e3c88d9160bc794eb356ac170057c7345c13f4e913a241b48b17f686a11c1a2e8aec250121944e0edc072b950b587ad3f2c295b8a167f57e08381dce6d0b8f34bd6bcdf8f7ff3f14ea2b6b1b40dbcbfcad876780248a57d300710b749cee56b1096280dbabafa7e1f1150fc2c27812de076fdbae767fdd1a7b8e26204f8ec635a4ed4e0112e7758ed971ba52ff7e0c85f6efbbe2ee3f4086a6e768f5af9266722e39e36db3a733b3abd7d6419d992358aeeb2ca1f336db0282bf0d8ff8f887be6ee21e2144dad1f2efd147d1ebd0aa238e099bc0d41660c817340aa4ed9fe0ed2addf21e49ae6a90eb58c185afa801b2b6a013617ba601bf1df1db8e2fe455c22f8015727e48fe2dff6320650e929457f6f391a7cee94826033f272bce5bd40fec0481fa1227d92bd782855676e05e5a66a04f6a1b6a0e9564a90d0829403e22453a3d70e7a3aa047fc2944637e094607ea95d73a4eb32844d9168d49c9351a20511e6fdbf50fb85e12c501e732a1b91666d55b389a9cba3e90e68fae30a1348adaeee9ef9d6dec41a22e0788990a4e1f670b5d9da316a148254ac50a28b39ae3064a4bf63a38e65a81685f4b832454e76981a95e338941bcad2169a888f7ad7f2139fb63fc0a18d7ae3a4a77cbea26271934b56cb43e8a5c5296cb6fb5dd193869e662df0c9f0bf7922fff8b76e5c33afa43c50b511d1c060dd35eb218d29dd3fe5bcf7727ab5dcd03f030f76286e88e3571b27bc8a1182a5eb7a869928c154d23c72b25228eb233d079dbc578a5631feac58117104ad93cfb786a6ba5066b78ba02aa32828ed4fef6c102b956c8667a8acfbcc12caeffb681674e57e920278290c4ace202e39e5eaf9b8693c53d7adb609fb0aaff10586add7b3012a9d48a68d9b7e8747c7a897ab14a364435dee161b33679ff6ef44d70c27f15d8408c5625db479bdc91956543ffd6fed2c6e87e725a7f4d949bb768ed6a38b22e31ee34eb10773c6358b1a8520ca94e902ab5d8237cdb216260cdb1d0b9113f42642f4575fcfa45e4e30d2b2277f7c5c3507d3d8833281546d41409796d2289f8b2dd08a6d9301eff7f8c57da8472ed37444e5c8b85c87b02e4d8d488bddbefbf80de6cd7b01885ff28e8cf163edcd6667334c5f5e7dfd56d8c2f0f26747ac8b5c4877811fe0caa1bfeba588fc814d264ebc131d67af01a64939e7fb31baea400ffb2eb5f7be2f6a0510f8df6e987b737802fa097bcaa409a778543d25021586b50053b3a247f41d22891cdd19232e29e188e7af46dcf589e1566d1d30b82cccb48180335048b44f4390f3b4a9907e293e1869340bab381ea8fbad93e5a8c1fc808e109d091ca5a42a454157ab36b20e4cfea059bc06bafd60013f039399b577f325e3fb21266cabecf4d0f54ffc199d94db34ead815997e9fb8555516c3d01ee77ea6143d27f1f4f7eba6f8ae2cd6e0c1d06c57127828f5188c04805fbed1a752ff1cd7ec4802b780dfdb082c20853bbaaa606850b66843a3db34521ad0a4c8b438d6c2edc49bfe10c9826a25573063e9a88c27255c417fc381ac0666327c6ea36899430324a68420ff06b83a34ca60786e84120d02e5dbf426a39ecae92f04ac4957cc35ee8d062282ab8144b2ce7d011b4252600a597521c02cdc949fd9e88a5830735f71702db2ce964c7950e3b2294ae938d04c04d70a239c6bcb1e75eccb408092404679584cd2e1888dae120e50582bc696f41745953fcbff2f5e37ec9b85953de52a9e02c51898ea28470e08d5d13c0f3e88c6539b21dbed1d31499da66a3d82af41c36297f60c955276b0fc8d7f65dbbc32013ba06e6a8d9c394fc9ffb52f2d5e864e6e803311355ae497d452b07154a59e5e38c45bfce6994024ab7eaf01c0280504a684869d6bd1973ce9d098015a056f19093f6161193c4df6cb81ba22e9ba373c3968890f544d8515f0a3993141af8ad4d4d1be478295f930c27e5f3bff238562d86a7118078c884f8637e898b64a333555d9138502d8f14e1ac5889c52432abc1960c759196dd1c618a49d65a8125117b9579ac9c8076390e3bd57f0e0e6ffb619f7f2f2faf43681fdffb54a0c6ce45010d09110069aa324d70eb41bde0e9b1149ceb21cd5125d8829758334ec0adab48f592225d9a24503b28a56149c47e2d809e48ee6757d9b6a77a60fae393dd7607c6e4589f23e1473318a9e1c6ef851d63b80f1b615c45e478cb8901edb341983ae6fbf36b4cf005c9afa46aba27b024a4b2da5513cd2b2ddc976a399e9d5c183a46ed9eba42fa1b6145876ac4e81f75400e4e65a0f46132ec89bee014561d33c54b57d195f032f3c68efc0611d99b24255a4acb673b31b24eb7ceec79cb58bc906b39ec332d8215103cf1ebb767ae621461f5b8dba6a095527c341afc1be84aa7fab1ccdcf5bda3079713de068ccc8e538b85e43040cc1c419524179fde3ccdbaa309b91cdd4134b2e3757817feae9ea72a37c2254c9592035e241067be868103319fb8ea174ec461271b5f6845d7b08675def6e9f3a86073cfd738ef4d85cc9d23d80eaa183f38825c836a1ee8fa73fbd4f5fce17904012d399a664a3631fa77b6b5ce0e573fc4ae3125dcdf405c21c48c708995efbcd09326c3645ea3b3165d56d09826e7e1c408423a436392ba9341b9a6b7f3e2ae0ae4393be5268708333046f5f63f64885dd2e7dbb1b6fdba041bc97d6a26443aaf39f29611516bbf7eb06b191935fb3d7b6938a7eaeef91ca325d8d40fa94da050b219bc068c0e583ef50a77074ca0850c4d6e1e63b5a08face0308ba611b5461dae402b28f9ff3919dc6e6ffd0e8fd3d9432688e409d7346a5462b58a31e4623a97316c00dcba3203fb396288efb461773e5be8ea359a6947170fa7314ec733b04eaafd75e18e56534500217b775f2db69b494ee5475f49e76b1d5307beee815e177db02330ec2dfc8004e5f6668bac5272187a584734e7459662d88320342fc15b0664749d8deca41656aece23b940f8f938880c29ddd034b5a64438f0009d893f693c1ed64109c15a251246dad529e2228e1a02d4aba56cec40625652854801295ce9c964f795f5eb16bce8b6174a045fdd5c5039028f63318bc02de660281a13d47245874b1156e9", 0xc43, 0x3be}, {&(0x7f0000002180)="fe", 0x1, 0x52b9000000}], 0x10d0410, &(0x7f0000003440)) 03:46:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, 0x0, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:24 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) 03:46:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 03:46:24 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000e40)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:46:24 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:24 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r1) dup3(r0, r1, 0x0) 03:46:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 03:46:24 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) [ 2250.019116][T27282] fuse: Bad value for 'fd' 03:46:25 executing program 3: syz_genetlink_get_family_id$gtp(&(0x7f0000000380), 0xffffffffffffffff) 03:46:25 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, 0x0, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2250.079348][ T27] audit: type=1326 audit(2000000785.009:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27290 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e52889109 code=0x7ffc0000 03:46:25 executing program 2: request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x9}, &(0x7f0000001fee)='R\tr\x00\b\x00\x00\x00\f\xff\x00\vVid:DF', 0x0) 03:46:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 03:46:25 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) 03:46:25 executing program 3: r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000080)=[0x1000000], 0x0, 0x0) [ 2250.171035][ T27] audit: type=1326 audit(2000000785.009:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27290 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e52889109 code=0x7ffc0000 03:46:25 executing program 3: syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x6, 0x1, 0x7, 0xff}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "24370f125e3ac30b510af99cbaac7057"}]}, 0x1, [{0xd2, &(0x7f0000000100)=ANY=[@ANYRES8]}]}) syz_usb_connect$cdc_ncm(0x3, 0x73, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x0, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x44ea, 0x3, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0xff}, [@call_mgmt={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x80, 0x6}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3009}}]}) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) 03:46:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 03:46:25 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) 03:46:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000000, 0x0, 0x2}]}) [ 2250.264914][ T27] audit: type=1326 audit(2000000785.009:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27290 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e52889109 code=0x7ffc0000 [ 2250.302845][T27304] fuse: Bad value for 'fd' 03:46:25 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x0, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:25 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 03:46:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 2250.397034][ T27] audit: type=1326 audit(2000000785.009:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27290 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e52889109 code=0x7ffc0000 03:46:25 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:25 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) 03:46:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000001}]}) [ 2250.513096][ T27] audit: type=1326 audit(2000000785.009:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27290 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2e52889109 code=0x7ffc0000 [ 2250.524684][T27323] fuse: Bad value for 'fd' 03:46:25 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) [ 2250.639633][ T27] audit: type=1326 audit(2000000785.009:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27290 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e52889109 code=0x7ffc0000 [ 2250.699568][ T27] audit: type=1326 audit(2000000785.009:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27290 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e52889109 code=0x7ffc0000 [ 2250.738535][ T27] audit: type=1326 audit(2000000785.009:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27290 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e52889109 code=0x7ffc0000 [ 2250.779909][ T27] audit: type=1326 audit(2000000785.009:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27290 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f2e52889109 code=0x7ffc0000 03:46:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000105}]}) 03:46:25 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 03:46:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:46:25 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) 03:46:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x0, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:25 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000740)=0xc84, 0x4) listen(r0, 0x0) 03:46:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 03:46:25 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) 03:46:25 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 2250.969030][T27342] fuse: Bad value for 'fd' 03:46:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 03:46:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@migrate={0xa8, 0x21, 0x0, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in6=@dev}]}, @XFRMA_IF_ID={0x8}]}, 0xa8}}, 0x0) 03:46:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x0, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xa, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:46:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) 03:46:26 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:26 executing program 3: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 03:46:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@migrate={0xa8, 0x21, 0x0, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in6=@dev}]}, @XFRMA_IF_ID={0x8}]}, 0xa8}}, 0x0) [ 2251.183523][T27361] fuse: Bad value for 'fd' 03:46:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) 03:46:26 executing program 2: syz_open_procfs(0x0, &(0x7f0000001000)='numa_maps\x00') 03:46:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x3) 03:46:26 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@migrate={0xa8, 0x21, 0x0, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in6=@dev}]}, @XFRMA_IF_ID={0x8}]}, 0xa8}}, 0x0) 03:46:26 executing program 2: socketpair$unix(0x11, 0x3, 0x300, &(0x7f0000000000)) 03:46:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) 03:46:26 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) [ 2251.470617][T27379] fuse: Bad value for 'fd' 03:46:26 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, &(0x7f0000000340)=""/188, 0x2a, 0xbc, 0x1}, 0x20) 03:46:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:26 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) 03:46:26 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2905a3, 0x0) 03:46:26 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) [ 2251.772851][T27397] fuse: Bad value for 'fd' 03:46:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x3) 03:46:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) [ 2251.975809][T27405] fuse: Bad value for 'fd' 03:46:27 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:46:29 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) 03:46:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@migrate={0xa0, 0x21, 0xb8e77dbc981349b1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in6=@dev}]}]}, 0xa0}}, 0x0) 03:46:29 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x3) 03:46:29 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) 03:46:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:29 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 2254.533981][T27416] fuse: Bad value for 'fd' 03:46:29 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) 03:46:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1, 0x0, 0x0, 0xd}]}}, &(0x7f0000000180)=""/162, 0x26, 0xa2, 0x1}, 0x20) 03:46:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000e80)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[{0xb0, 0x0, 0x0, "9f2c38c1ab6c378334c4e70f28b56e913ce7b10d70982c8ef1b542c555d0e8bb1d5aa39e5990ef28a6e43f5acac4c07437fdbee4f1436bd8caaba999648c80a9417c521c018e562ac0701f6d3643fe59af6e98fbdab6d65453be7119410d330ac9515afd0d6cf2703dac421c145515ccf38c7a3983375b71a6ecc76b5b9ac640f7d2dc79184eefb621c074fb1cc6d256da35f20eca50dca11f"}, {0x40, 0x0, 0x0, "bf0b6b7dbc9f6a570f60463b55890e18cbaa85ba32b95b459a153ca3687e22cc7b62d7e8afee58b103"}, {0xe0, 0x0, 0x0, "43954c298da54f8ade6a6a342a7528431fc720175135eb14b18d58044a9e40e1487416fa47157ccabad65ef1104e2583dbf079c7191c3e4b2bffa2dedd919166b93668937e7ba1cd32f064e923b019a8af84ed8fc7f1e6a0ef41c3e55ba7b6d4c7da8b076a490f5e91a8185f0700971352f0742e1d3ff3254500781c5588c64623d1316ee9a87a4032fc8b28142f7ea7f395cbad61359f6a4b2de0a7165cdedd4b39b2a498aa75c27ec0e243f1677d57fc676b356963bdb7e521fd1195b228abab7665f2efb8959e36"}, {0x1010, 0x0, 0x0, "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"}, {0x20, 0x0, 0x0, "8e3fba32237686a173"}, {0xe08, 0x0, 0x0, "c7b152e168c9558208db2e9e43ac5886e3b615e7fbde6b3c69f1d086e762ef54a742df123dd1c64a3854f9db6d8777ffab4195690d98aaac438b6c06808837d23e96e899d5b11b491cbb64aa5309aa9e854eca6f689cf96d04a0979ccf891bb709974c627f68808c1fa9da6bd5a6398f6bcc48d1b05119f65dc3053db70a8982e58dec05c4937835c83af2f2b4461210f85dab48e93aa167b128294f865f4c11541cb084c160512d67029f6050ba5a493e485517a5938ba9b7f4632cdf9da4d457c6cd920aa67b2b7718f7ab9f445f4894a930ef37a9ab22bdd54d863bcfb5eb1e422c9006ad6706e22f919e527582289c36abf195cc1f0b1e1d14c7982e33164fb113b1332817c7253ac4b06651046c147c656406e12be2a2ea2ba81a651cecf1629335485baa7de1acfbcbe7945d8d1a94d5f377589a5218316bd88746091c448f7c7c62f6bed4ccb32d16adb46d4b4d1b19b49c07a52dd239c2b60327ee6e82ed135d78588a5b99f6b473b69893cfecfc62a6a8db0643534f0f9a83a1abc3bd76ce63422791c1622f70073341555390a3a300ee431f9db7a186c893143bfe7cb21fc02bffa0a02e94a6f9de970b5d935375b469ae614fdb408728ecdd1b505cfb093055abe7f044fa7d92398525ec962f5d4e776aec8c91279174c555f223e37e0a6cddd80d5fa2159830f4469e969964a6e95f34546df332cae54202023d519cba7a5be314b077863fe8660d6e7e42e9790e751c2c89cd63d641d205dc5cd1f0d16be5c7a30028c9c67b2b6b0792ac2b465bcae837397f45e8f694817374c4836d57bf96662991d3648f4e0ee87c7c0d7b34fd43c6ddfe68fd16b36d6b34fda0fc827ef189ad0901d705635badd12497d40e3be394f34c6a7c9bd6a6ec3a11cb0e9f786e263e984d2a7c21faa1570553e0dbfbecd3d54ccf36f18f6a1393e9793d79b2098d3c581c4cdad23db2c14d4622875d256da541c5317583f94f14f5dfb6f41cea3b81f9b5ac5dce256c861da5ccb9816fa244b34938349cc3070b79833522e1ef9fb4c6841a46bbd766eb808ec6f3a67e3fbe87cb651f8f4157f3b349e96849b162bb7092921b9f9c4b4086a6b45f0de68dcca5dbb21e860ae2c5440f7c83b4f147a3a1c50f7685314d700602df081491e961d67650014ae15726d5d8bb4c0932ee196911e33b6c16aa10aa70750223dea28446a69afdbd8224382e8fbeaf5c140bec18c2196367b8da80b063050363a9d32c9834aaf26b7f489f34b8cd1d6ae660769f4835632f333307cfe6be86f712c13e700425b2c32a17e5e681d043d1bac1a08879e5e3a5fcb661af032dd981573760751ad24f01c0ab35ae60a49ae0e781079bf539e80e16c83b1057865ed0222e8fd0084f2ffe7ae92afdeb090fe11330047424506b76f21798ae1d842466018d56564d4dad5af6d6e29da04ff2f3461f6d532ec543b79a9feb4628fe5217aa003dfcf8bb7ff8bbeda83b8fd70a0bf5d6d2c7226deca4abf678f4a25ef4eda07ed8cb333ad4cb785531ef106ebce121f08b766fa64448e977f08a7cc11a805d9fe14c33f6253d6e54fbad64ead0e6388f190b868e010a2b006722a79d34cb899dd850ee04eb694414ab7082ceeaca07a9fcf65eb0d55d7311f4ca7a139805a11fe0bb883fcae5a3a8f78b3c3d7e1d5e3c5311d49374c0aba693f362b5cd869897bf08858f99511130b402ac85acca0a0540614d2035abae92d0cd836fe07e75dbcd7118900f8efa51da071ff7fecdf661c6dcfb85712a9fd1ee7eddc604fcb4e87dd4aa15e0d68a860011ec96362df33ee673a2271feb0db82329c027ac1761ec603385a3493d06ae95cafc1d1a3d522bfaf3a8558aa565420a4d0849597aad39891bff570ab0abb770fc2ac440e48d55445de579f5ac3163d6bfb603143b21df7757dc8e3686a0dc2a3a73e40bcce3191074df4f96c289afdaa261c4f8b6740534f5bea4150cecf044769e2a5126122d3e9e5f658a1db7b41aae508ae37bb36880734660fbb7b599e6cd86c71dcaf3bb89f19fc3abe190b35268003e615dbfe382f9acd150f6e4e3d423b21112e29185af8122e9f7512b91e11707afe9559e379d750c3f8cb4f44ec7899ba0dac6dfeb7b15a77bc043c20220c1c6a5ef118e34d1cb02ad489b4185b8704e2198bfbd5571f7b98ebadc8deb35043fc5188e6554b30145f228e096426684ce5a0894996887556c6db2600642bfec515bed3d6be2fc0242d854058f9040f556182a6cabb2aeae6c6bcdfdc744668e804e2b4171e4ab92aa92d3ec831401760ea8f75b5a8f33a61d1f45d1268b225338c6fbb6cc201508305e4852af31eb6a796ccfed8d46cc5763ab49c10365e5e7d59318f2a4ebf872d834310273e8a42b1c0d6c046b3fdfef198ba9e42fa624628ea0487a6ad507bde8c4011a358b60b752d0259aecd9ef0888aedb7cf64b057cc1e7dd9b806ad69e860d523b65d70263e6f279f0ff9a2dfc25e29dffc6e819429d34a57ce6bfa60355716164ecba8d5dff45c24d4de146a55e766ef342d5781b251ca731567c5df68752dfcb0d41ede189eb8f2294a5b501217a9dd7726710e9f4aed97d6f66da9fe67cfcadb2e049dee34f28e49e32bff888b403f4d67e0e1ebc5b15df55288658c34c425883c8555225b77c1e8057574ebac97de1a4a63ec19ebbc05847bbc2b84a675c4b80bb561f7053044ee1c613be5eba04ad95ba7ff4b3d3e67c271761ccaf6d5bf478746110ac1577a547e948ddebcee0636549a75a2e30498de4e396bb7d501149c05ae097479a6d2b937a4ae60c7f878aca102ec27b4a87999f21ceaead9dbac76c3bc2a4a7130defc8bf083504102b09f0808553eec96e2d597f0e735d21995298adb69f09bafe99376fb145c70152f1173e228d9b60a28231cfdbf376af6d53d717f92b2d37fe39b606fe7fe07ea30a5def59f59172402d5a321bc140ae2f91263af1ab8ace75b968eb7c821ba7c0beafd3a11084d360b6196ffdc1a6d04f44798fee5d3f541ad234c62040e67e29cf43b9cc94173d45e17234589c40e3a914240b2b0d1ca64f59c0cf102f25fcc8628e3fa8a77a5e917031dec95696b3bf943ed6afd60cdd3f922fd5c5ce377c6b2338de03e15fd757e88af37cf270bfba637767c0b602268ba41c1789b4dac32138d5e3ad195e4350394ba9837a4555d237bcb57aa82e4a3815df6b783159f65ebe2d52239737bf05b2dac031e06a35129ef194aba1615bceda6c386e28fe0605c8f8bc1044405235696f3e2c9a0ac81b887d78f5745ec0fa8e5b20d863a1522b649fdc93ba120ad37ea48ca5858d32ba09e15f533fe70a6340c8872e40a4ddadf57a3f7c8ee02f4a5c790feed1f37d0bac783c30a0554720ae985f155c3814c4911af2ab1379e786714f92bda792c5493611319b5680a660da8728357a17ddbb1c7c34f420bcf524bfc09b6ff7ab22a97a42d71e8cf7a2422fa3f0d6520a99a796124cf56c3221bc95bab62e881a7ad4eeeb8e302898dbf6d740e14136bceea05f0ab6285e71c37ed35fdfd0d31b370ea1f32b021e6d629231005f68e1344a0368f13caa2d7b15c75f2c4137279fb5ebd6328e62cfadaf654c9c229e1caf4b9878e899eedad2aae8b2bd03f3ec78104fc623d95457dfad7dc8e4b92539199252e698ab3a71bfe65a9aaf29ce86015c1a98a062813acd20f99b3dacc2a995b93caa8966b341085537bcbfd6fa8b613d2f46a230de8548dec982cb2a55b5d2466f22ea9acacb01f7c9517e73538c0ba5679ba8141ed84b78213c774e119d2636d0a7266b272cc9c1d4ba0ca2ea7528466fe1566de07eee31af8caa3c1d8a9e6be0584de4e8a25f58595b9fa1b17c2259de212600a934c14df4f05bdbf61406434918a7b8234766debd690b987e81196503c46a36c34405c11d3fa26f0ff6d0e3999ce19cd37c7dfed3c310cab5ff94f4de413ea112b70abba7f635f20f6fa40ad824b53670c1a70497ef3f18140fdb69ae10dfa94ff1005e4e05ca47b7ceaf994824a9d0f3b39b2fe7c97267346b8eecc90f9c135469bbf8fb3905285a287d601a47eac3f9b9fad3d2d45c6f8d2cdea8582e3f3508149cd62fa4f52efef89267062803b2751ed87d4839c1f8c4607eeecfec9be00f288cfc86257256d7f4de360a07783ccf30e31ff7c5c91dd39fcfe13fb10779ab0f372c019c413be38e52d63be920d3fcc0ae398d289c990e1108a91759957d843dea8006f1bbb5fdea91e7ebf914d114231c47be4382188388da507a5b4a430ea3eec7b945924013955fd4827ff95f567f3a2981dddb1166ba18795ddc74ff28ca1fbf2e76b3e61cc0983c8af08d330d45d8c75062ac637b2ae979f8c3b3e65e099d9ddbd8d1804fd0fd7cc9b9c60808c1b57f31ade59a1bd206be3b3c50abef60162d61e829da4869b59154ba4b4640cf7f8357277b3d50f9dd69374dd64d92a7685f206ff6fb8b3c77772041c72d0fdbbf8589eda7e91a7709e12d2902570a54cc55462cf3e631def2d0d56798d651cf0ee696364e41ddd850f9ceaa69fa769d50dcbb35728bc668590c8cc918babbb3656fe9c1723cc645cc821cdd1aff59449f78bc5952f24fe15777cc02f45f498635b4d184650e410890f883940e32aa609c3d83369294b6a9beaaf8a0c7716fd765c281c5e87cb53cdcceb6d9edd9de45b1e9b62c19f89c0526f9d2abc15ca28723781bcd1765633f19775db1f13768ce92cdb8ac3ea277826e3392a07cd62ec5e85b06e7714f026836004034f08a4d0d82d2bfd41df490ecb69f5b1cd823286c5fe9f071b2ded9dd5d93d2935b5dfd4b8a267a8d1a8aadf504b58dec83460f39ab004e5f870b0a67a6268700ea171f10390d8b54355eb7c9115106d6faf50ba583b31fb9942751bfcbbbe0717bec400dc709209b5fa9695a396b40b96e63b3707023b017a4ffb8a511b13acbfe21cf578a9513deef713459acd2ab1f908f1e31c2e8b17d511752cdd0266467e30388d682bbd944db3c03203f9a00fbd0dd638d"}], 0x2008}, 0x0) [ 2254.637557][T27421] fuse: Bad value for 'fd' 03:46:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000300)={0x8, 0xffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:46:29 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) 03:46:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2}}]}}, &(0x7f0000000280)=""/150, 0x32, 0x96, 0x1}, 0x20) [ 2254.761870][T27428] fuse: Bad value for 'fd' [ 2283.061217][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.067575][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 03:47:19 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) 03:47:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x92, &(0x7f00000000c0)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:47:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:47:19 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000580), 0x2, 0x0) 03:47:19 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 03:47:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@migrate={0xa0, 0x21, 0xb8e77dbc981349b1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in6=@dev}]}]}, 0xa0}}, 0x0) 03:47:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x17, 0x4, 0x0, 0x1ff, 0x0, 0x1}, 0x48) 03:47:19 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x3, 0x1ff, 0x0, 0x1}, 0x48) [ 2304.949954][T27451] fuse: Bad value for 'fd' 03:47:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:47:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x0, 0x0, 0x0, 0x180, 0x1}, 0x48) 03:47:20 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 2305.097338][T27461] fuse: Bad value for 'fd' 03:47:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x82) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x2010080, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000b80)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x3, 0x0, 0xfffc}}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000001900)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800c0001006d0500"/32, @ANYRES64=r2, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f79d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab8ef2a310363236fb5d967e7fbb1a00000000000000"], 0x3c}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="8418f948f44631b6c6d2b9dfe40e625c5c28c8faa8c329201b45", 0x1a}], 0x1) 03:47:20 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000200)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) 03:47:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x9000aea4, &(0x7f0000000000)={0x1, 0x0, [{}]}) 03:47:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 03:47:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000040)) 03:47:20 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x19) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 2305.361512][T27472] fuse: Bad value for 'fd' [ 2308.341306][ T3654] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2308.353233][ T3654] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2308.361974][ T3654] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2308.371451][ T3654] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2308.379284][ T3654] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2308.386855][ T3654] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2344.492444][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.498753][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 2405.931610][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.937967][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 2457.770472][ T28] INFO: task kworker/u5:6:3651 blocked for more than 143 seconds. [ 2457.778357][ T28] Not tainted 5.19.0-rc5-syzkaller-00105-g9f09069cde34 #0 [ 2457.786692][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2457.795555][ T28] task:kworker/u5:6 state:D stack:25784 pid: 3651 ppid: 2 flags:0x00004000 [ 2457.805095][ T28] Workqueue: hci2 hci_power_on [ 2457.811324][ T28] Call Trace: [ 2457.814733][ T28] [ 2457.817686][ T28] __schedule+0x957/0xe20 [ 2457.822273][ T28] ? __sched_text_start+0x8/0x8 [ 2457.827155][ T28] ? wq_worker_sleeping+0x5e/0x290 [ 2457.832536][ T28] schedule+0xeb/0x1b0 [ 2457.836630][ T28] schedule_timeout+0xac/0x300 [ 2457.841487][ T28] ? console_conditional_schedule+0x40/0x40 [ 2457.847403][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 2457.853650][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 2457.858882][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2457.864174][ T28] ? lockdep_hardirqs_on+0x95/0x140 [ 2457.869395][ T28] do_wait_for_common+0x3ea/0x560 [ 2457.874574][ T28] ? console_conditional_schedule+0x40/0x40 [ 2457.880565][ T28] ? bit_wait_io_timeout+0x110/0x110 [ 2457.885870][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 2457.891107][ T28] ? start_flush_work+0x7a2/0x850 [ 2457.896160][ T28] wait_for_completion+0x46/0x60 [ 2457.901212][ T28] __cancel_work_timer+0x585/0x740 [ 2457.906357][ T28] ? cancel_work_sync+0x20/0x20 [ 2457.911924][ T28] ? rcu_read_lock_sched_held+0x89/0x130 [ 2457.917674][ T28] ? start_flush_work+0x850/0x850 [ 2457.923257][ T28] ? __mutex_lock_common+0x45d/0x26c0 [ 2457.928656][ T28] ? hci_dev_open_sync+0x1117/0x1340 [ 2457.934673][ T28] ? __mutex_unlock_slowpath+0x241/0x7b0 [ 2457.940630][ T28] ? hci_power_on+0x2d8/0x650 [ 2457.945331][ T28] ? hci_reset_sync+0x110/0x110 [ 2457.950617][ T28] ? mutex_lock_io_nested+0x60/0x60 [ 2457.955856][ T28] hci_dev_close_sync+0x31/0xcc0 [ 2457.961190][ T28] hci_power_on+0x2e1/0x650 [ 2457.965729][ T28] ? hci_tx_work+0x3d0/0x3d0 [ 2457.971158][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 2457.977095][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2457.982706][ T28] process_one_work+0x81c/0xd10 [ 2457.987600][ T28] ? worker_detach_from_pool+0x260/0x260 [ 2457.993733][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 2457.999305][ T28] ? kthread_data+0x4d/0xc0 [ 2458.004316][ T28] ? wq_worker_running+0x95/0x190 [ 2458.009368][ T28] worker_thread+0xb14/0x1330 [ 2458.015176][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 2458.021416][ T28] kthread+0x266/0x300 [ 2458.025512][ T28] ? rcu_lock_release+0x20/0x20 [ 2458.030874][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2458.035491][ T28] ret_from_fork+0x1f/0x30 [ 2458.039963][ T28] [ 2458.043694][ T28] INFO: task syz-executor.1:27482 blocked for more than 143 seconds. [ 2458.052126][ T28] Not tainted 5.19.0-rc5-syzkaller-00105-g9f09069cde34 #0 [ 2458.059901][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2458.069152][ T28] task:syz-executor.1 state:D stack:27328 pid:27482 ppid: 1 flags:0x00004000 [ 2458.079037][ T28] Call Trace: [ 2458.082641][ T28] [ 2458.085598][ T28] __schedule+0x957/0xe20 [ 2458.089963][ T28] ? __sched_text_start+0x8/0x8 [ 2458.095665][ T28] schedule+0xeb/0x1b0 [ 2458.099769][ T28] schedule_timeout+0xac/0x300 [ 2458.104982][ T28] ? console_conditional_schedule+0x40/0x40 [ 2458.111159][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 2458.117746][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 2458.123373][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2458.128592][ T28] ? lockdep_hardirqs_on+0x95/0x140 [ 2458.134352][ T28] do_wait_for_common+0x3ea/0x560 [ 2458.139429][ T28] ? console_conditional_schedule+0x40/0x40 [ 2458.145806][ T28] ? bit_wait_io_timeout+0x110/0x110 [ 2458.151948][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 2458.157092][ T28] ? lockdep_hardirqs_on+0x95/0x140 [ 2458.162731][ T28] ? flush_workqueue_prep_pwqs+0x458/0x4c0 [ 2458.168578][ T28] wait_for_completion+0x46/0x60 [ 2458.173958][ T28] __flush_workqueue+0x76a/0x16a0 [ 2458.179006][ T28] ? read_lock_is_recursive+0x10/0x10 [ 2458.184769][ T28] ? rcu_work_rcufn+0x140/0x140 [ 2458.189689][ T28] ? bpf_lsm_capable+0x5/0x10 [ 2458.194870][ T28] ? security_capable+0xb1/0xd0 [ 2458.199801][ T28] ? do_raw_read_unlock+0x37/0x70 [ 2458.205215][ T28] ? _raw_read_unlock+0x24/0x40 [ 2458.210345][ T28] hci_dev_open+0x136/0x2a0 [ 2458.214877][ T28] sock_do_ioctl+0x151/0x450 [ 2458.220936][ T28] ? sock_show_fdinfo+0xb0/0xb0 [ 2458.225847][ T28] sock_ioctl+0x481/0x770 [ 2458.230286][ T28] ? smack_file_alloc_security+0xd0/0xd0 [ 2458.236212][ T28] ? sock_poll+0x400/0x400 [ 2458.240739][ T28] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2458.245860][ T28] ? security_file_ioctl+0x9d/0xb0 [ 2458.251306][ T28] ? sock_poll+0x400/0x400 [ 2458.255744][ T28] __se_sys_ioctl+0xfb/0x170 [ 2458.260516][ T28] do_syscall_64+0x2b/0x70 [ 2458.265180][ T28] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2458.271171][ T28] RIP: 0033:0x7fbe65e88ec7 [ 2458.275840][ T28] RSP: 002b:00007ffcd78301a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2458.284336][ T28] RAX: ffffffffffffffda RBX: 00007ffcd7830868 RCX: 00007fbe65e88ec7 [ 2458.292528][ T28] RDX: 0000000000000002 RSI: 00000000400448c9 RDI: 0000000000000003 [ 2458.300607][ T28] RBP: 0000000000000003 R08: 00007fbe655ff700 R09: 00007fbe655ff700 [ 2458.308772][ T28] R10: 00007fbe655ff9d0 R11: 0000000000000246 R12: 0000000000000003 [ 2458.316855][ T28] R13: 00007ffcd7830300 R14: 00007fbe65f9c9b8 R15: 000000000000000c [ 2458.325667][ T28] [ 2458.328741][ T28] [ 2458.328741][ T28] Showing all locks held in the system: [ 2458.337660][ T28] 1 lock held by khungtaskd/28: [ 2458.342929][ T28] #0: ffffffff8cb1e820 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 2458.352537][ T28] 2 locks held by getty/3296: [ 2458.357231][ T28] #0: ffff88814ade9098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 2458.367449][ T28] #1: ffffc90002d162e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6e8/0x1e50 [ 2458.377701][ T28] 3 locks held by kworker/u5:6/3651: [ 2458.383257][ T28] #0: ffff8880758e5138 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x796/0xd10 [ 2458.393477][ T28] #1: ffffc9000328fd00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x7d0/0xd10 [ 2458.405185][ T28] #2: ffff8880170fd048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x2d8/0x650 [ 2458.414699][ T28] 2 locks held by kworker/u4:7/4676: [ 2458.420231][ T28] [ 2458.423073][ T28] ============================================= [ 2458.423073][ T28] [ 2458.431665][ T28] NMI backtrace for cpu 1 [ 2458.436005][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 5.19.0-rc5-syzkaller-00105-g9f09069cde34 #0 [ 2458.445909][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2458.455986][ T28] Call Trace: [ 2458.459267][ T28] [ 2458.462196][ T28] dump_stack_lvl+0x1e3/0x2cb [ 2458.466893][ T28] ? bfq_pos_tree_add_move+0x436/0x436 [ 2458.472366][ T28] ? panic+0x76e/0x76e [ 2458.476443][ T28] ? console_unlock+0x6bd/0x6f0 [ 2458.481341][ T28] ? nmi_cpu_backtrace+0x248/0x4a0 [ 2458.486484][ T28] nmi_cpu_backtrace+0x473/0x4a0 [ 2458.491435][ T28] ? vprintk_emit+0x109/0x1e0 [ 2458.496128][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 2458.502289][ T28] ? _printk+0xcf/0x10f [ 2458.506456][ T28] ? panic+0x76e/0x76e [ 2458.510535][ T28] ? __wake_up_klogd+0xcd/0x100 [ 2458.515405][ T28] ? panic+0x76e/0x76e [ 2458.519475][ T28] ? __rcu_read_unlock+0x8f/0x100 [ 2458.524492][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2458.530557][ T28] nmi_trigger_cpumask_backtrace+0x168/0x280 [ 2458.536537][ T28] watchdog+0xcf9/0xd40 [ 2458.540696][ T28] kthread+0x266/0x300 [ 2458.544758][ T28] ? hungtask_pm_notify+0x50/0x50 [ 2458.549773][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2458.554357][ T28] ret_from_fork+0x1f/0x30 [ 2458.558794][ T28] [ 2458.562581][ T28] Sending NMI from CPU 1 to CPUs 0: [ 2458.568048][ C0] NMI backtrace for cpu 0 [ 2458.568060][ C0] CPU: 0 PID: 21570 Comm: kworker/u4:6 Not tainted 5.19.0-rc5-syzkaller-00105-g9f09069cde34 #0 [ 2458.568076][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2458.568086][ C0] Workqueue: phy11 ieee80211_iface_work [ 2458.568202][ C0] RIP: 0010:debug_check_no_obj_freed+0xf8/0x650 [ 2458.568223][ C0] Code: c1 ed 03 48 ba 00 00 00 00 00 fc ff df 80 7c 15 00 00 74 12 4c 89 ef e8 26 e3 a4 fd 48 ba 00 00 00 00 00 fc ff df 49 8b 45 00 <48> 85 c0 0f 84 af 04 00 00 48 89 6c 24 50 4c 89 6c 24 58 4c 89 64 [ 2458.568236][ C0] RSP: 0018:ffffc9001697f9d8 EFLAGS: 00000046 [ 2458.568247][ C0] RAX: ffff888073874c78 RBX: ffff8880776c2600 RCX: 0000000000000001 [ 2458.568258][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc9001697f8c0 [ 2458.568268][ C0] RBP: 1ffffffff2309c27 R08: dffffc0000000000 R09: fffff52002d2ff18 [ 2458.568279][ C0] R10: fffff52002d2ff19 R11: 1ffff92002d2ff18 R12: ffff8880776c2000 [ 2458.568290][ C0] R13: ffffffff9184e138 R14: 0000000000000000 R15: 0000000000000001 [ 2458.568300][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 2458.568313][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2458.568323][ C0] CR2: 000000c003db1848 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 2458.568337][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2458.568345][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2458.568354][ C0] Call Trace: [ 2458.568359][ C0] [ 2458.568369][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 2458.568388][ C0] slab_free_freelist_hook+0xcf/0x1a0 [ 2458.568414][ C0] ? skb_release_data+0x596/0x730 [ 2458.568431][ C0] kfree+0xc6/0x210 [ 2458.568446][ C0] skb_release_data+0x596/0x730 [ 2458.568466][ C0] __kfree_skb+0x56/0x1d0 [ 2458.568482][ C0] ieee80211_iface_work+0x25a/0xcd0 [ 2458.568501][ C0] process_one_work+0x81c/0xd10 [ 2458.568524][ C0] ? worker_detach_from_pool+0x260/0x260 [ 2458.568541][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 2458.568556][ C0] ? kthread_data+0x4d/0xc0 [ 2458.568572][ C0] ? wq_worker_running+0x95/0x190 [ 2458.568588][ C0] worker_thread+0xb14/0x1330 [ 2458.568608][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 2458.568629][ C0] kthread+0x266/0x300 [ 2458.568642][ C0] ? rcu_lock_release+0x20/0x20 [ 2458.568656][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2458.568671][ C0] ret_from_fork+0x1f/0x30 [ 2458.568694][ C0] [ 2458.569257][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 2458.814880][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 5.19.0-rc5-syzkaller-00105-g9f09069cde34 #0 [ 2458.824786][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2458.834873][ T28] Call Trace: [ 2458.838143][ T28] [ 2458.841062][ T28] dump_stack_lvl+0x1e3/0x2cb [ 2458.845729][ T28] ? bfq_pos_tree_add_move+0x436/0x436 [ 2458.851171][ T28] ? panic+0x76e/0x76e [ 2458.855227][ T28] ? vscnprintf+0x59/0x80 [ 2458.859547][ T28] panic+0x312/0x76e [ 2458.863441][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 2458.869091][ T28] ? nmi_trigger_cpumask_backtrace+0x205/0x280 [ 2458.875257][ T28] ? fb_is_primary_device+0xcc/0xcc [ 2458.880457][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2458.886516][ T28] ? nmi_trigger_cpumask_backtrace+0x205/0x280 [ 2458.892654][ T28] ? nmi_trigger_cpumask_backtrace+0x265/0x280 [ 2458.898816][ T28] watchdog+0xd39/0xd40 [ 2458.902964][ T28] kthread+0x266/0x300 [ 2458.907020][ T28] ? hungtask_pm_notify+0x50/0x50 [ 2458.912041][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2458.916646][ T28] ret_from_fork+0x1f/0x30 [ 2458.921088][ T28] [ 2458.924279][ T28] Kernel Offset: disabled [ 2458.929661][ T28] Rebooting in 86400 seconds..