fffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) [ 1834.489316][T18759] fuse: Bad value for 'fd' 12:18:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000001080)={{}, {0x0, 0x1c9c380}}, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}, [0x7, 0x2, 0x9, 0xb41b, 0x5, 0x2, 0x66, 0xffffffffffffff39, 0x5, 0xfff, 0x3, 0x10000, 0x0, 0xffffffff, 0x5]}, &(0x7f0000000040)=0x100) r5 = gettid() write$cgroup_pid(r3, &(0x7f0000000200)=r5, 0x12) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r4, 0x8}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000001000)={"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"}) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000000)={0x100000, 0x10000, 0x100000000, 0x80000000, 0x2827}) [ 1834.581223][T18792] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:26 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) 12:18:26 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1834.725632][T18843] fuse: Missing mount parameter(s) 12:18:26 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x500) 12:18:26 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) [ 1834.842898][T18873] device syz_tun entered promiscuous mode [ 1834.886424][T18812] device syz_tun left promiscuous mode [ 1834.907898][T18878] fuse: Missing mount parameter(s) [ 1834.938163][T18881] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:26 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) 12:18:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:26 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:18:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001000)={"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"}) [ 1835.047641][T18906] fuse: Missing mount parameter(s) 12:18:26 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) [ 1835.155295][T18987] fuse: Missing mount parameter(s) 12:18:26 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x526) [ 1835.218047][T18995] device syz_tun entered promiscuous mode [ 1835.276444][T18994] device syz_tun left promiscuous mode [ 1835.303863][T19002] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1835.360313][T19005] fuse: Bad value for 'fd' 12:18:26 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) 12:18:26 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000f0ffff", 0x24) 12:18:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x106, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:26 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) [ 1835.431207][T19006] fuse: Bad value for 'fd' 12:18:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000ecffffffffff81e3000000000000000000000000000000000000000001000000000000000004000400000011df7b6af8512b629b5a0d5018e3fac6eed3721005a6092c781ae026435e4403a1b8e0f18f0ea4f6bf25ea88113102d7f6155067d7d277064cd9d003ce7ec324d1d8e3e27d866444c9d01b49"]) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0xa, 0x4) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001000)={"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"}) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0), 0x2) [ 1835.643138][T19079] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1835.661653][T19073] fuse: Bad value for 'fd' [ 1835.667641][T19074] fuse: Missing mount parameter(s) 12:18:27 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x600) 12:18:27 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) 12:18:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000020000", 0x24) 12:18:27 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) 12:18:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000ecffffffffff81e3000000000000000000000000000000000000000001000000000000000000000000000011"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001000)={"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"}) [ 1835.864740][T19130] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1835.896214][T19132] fuse: Bad value for 'fd' 12:18:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000030000", 0x24) [ 1836.001115][T19138] fuse: Bad value for 'fd' [ 1836.145434][T19213] fuse: Bad value for 'fd' 12:18:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x5, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:27 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) 12:18:27 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x700) 12:18:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000040000", 0x24) 12:18:27 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) 12:18:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000ecffffffffff81e3000000000000000000000000000000000000000001000004000000000000000000000011"]) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001000)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fadc825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e89f6dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bbf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 1836.470148][T19356] fuse: Bad value for 'fd' 12:18:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x7, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) [ 1836.498681][T19360] fuse: Bad value for 'fd' 12:18:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000050000", 0x24) 12:18:28 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) 12:18:28 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xc00) 12:18:28 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000ec0a27b4ffff170081e3000000000000000000008d40eb3602aac3a56c3ad3ba865157e800"/50]) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001000)={"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"}) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) 12:18:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x8, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:28 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) 12:18:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000060000", 0x24) [ 1836.909840][T19583] fuse: Bad value for 'fd' [ 1836.933673][T19574] fuse: Bad value for 'fd' 12:18:28 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) 12:18:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x9, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000070000", 0x24) [ 1837.126879][T19661] fuse: Invalid rootmode 12:18:28 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) 12:18:28 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xd00) [ 1837.281801][T19705] fuse: Invalid rootmode 12:18:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000ecffffffffff81e3000000000000000000000000000000000000000001000000000080000000000000000011"]) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000023c0)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f00000024c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002500)={'team0\x00', r4}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001000)={"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"}) 12:18:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00000a0000", 0x24) 12:18:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0xa, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:28 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) [ 1837.498348][T19713] fuse: Bad value for 'fd' [ 1837.527065][T19716] fuse: Invalid rootmode 12:18:29 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00000c0000", 0x24) [ 1837.611117][T19745] fuse: Invalid rootmode 12:18:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0xc, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:29 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) 12:18:29 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x1200) 12:18:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000ecffffffffff81e3000000000000000000000000000000000000000001000000000000000000000000000011"]) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001000)={"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"}) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000200)={"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"}) [ 1837.770174][T19908] validate_nla: 6 callbacks suppressed [ 1837.770184][T19908] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:29 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) 12:18:29 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00000e0000", 0x24) [ 1837.900282][T19942] fuse: Bad value for 'fd' [ 1837.933780][T19943] fuse: Invalid rootmode 12:18:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0xd, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:29 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) [ 1838.076665][T20048] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:29 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x1400) 12:18:29 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00000f0000", 0x24) 12:18:29 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x22180, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x5, 0x5600000, 0x2, 0x0, 0x30cedaf5, 0x4, 0xfff, 0x5, 0x8, 0x1ff, 0xfffffffffffffeff, 0x5, 0x0, 0xccb, 0x2, 0x80000000, 0x9, 0x9, 0x4}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0xffffffff00000000, 0x2, 0x1}, 0x1, 0x180, 'id1\x00', 'timer1\x00', 0x0, 0xffffffffffffffce, 0x7ff}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'lo\x00', 0x1}) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000001c0)=ANY=[]) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001000)={"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"}) 12:18:29 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) [ 1838.298491][T20063] fuse: Bad value for 'fd' 12:18:29 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) 12:18:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0xe, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) [ 1838.371427][T20069] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:30 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000100000", 0x24) 12:18:30 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) 12:18:30 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x2000) 12:18:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000ecffffffffff81e3000000000000000000000000000000000000000001000000000000000000000000000011"]) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001000)={"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"}) 12:18:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0xf, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:30 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x1}}, 0x21) [ 1838.702986][T20183] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:30 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000110000", 0x24) [ 1838.856225][T20228] fuse: Bad value for 'fd' 12:18:30 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 12:18:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x11, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) [ 1839.001388][T20395] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:30 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x2605) 12:18:30 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 12:18:30 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00003a0000", 0x24) 12:18:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000ecffffffffff81e3000000000000000000000000000000000000000001000000000000000000000000000011"]) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0x2, 0x2, 0x3, 0x7fffffff, 0x80000000}, 0x14) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=0x0) ioprio_set$pid(0x3, r4, 0x100) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001000)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fadc825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e89f6dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bbf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 1839.193668][T20415] fuse: Bad value for 'fd' [ 1839.226119][T20419] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1839.252119][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1839.258008][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:18:30 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000480000", 0x24) 12:18:30 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 12:18:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x12, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:30 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 12:18:31 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x2660) [ 1839.511856][T20539] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:31 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00004c0000", 0x24) 12:18:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x13, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x0, 0xd6f3}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000ecffffffffff81e3000000000000000000000000000000000000000001000000000000000000000000000011"]) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001000)={"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"}) 12:18:31 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 12:18:31 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) [ 1839.751369][T20567] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:31 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000600000", 0x24) 12:18:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x14, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) [ 1839.892093][ C1] protocol 88fb is buggy, dev hsr_slave_0 12:18:31 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x3f00) 12:18:31 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1840.039577][T20671] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000ecffffffffff81e3000000000000000000000000000000000000000001000000000000000000000000000011"]) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0xe08, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001000)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fadc825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e89f6dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bbf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 12:18:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x16, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) [ 1840.197359][T20680] fuse: Bad value for 'fd' 12:18:31 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000680000", 0x24) 12:18:31 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:18:31 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x4000) 12:18:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x17, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:31 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1840.472530][T20828] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x600280) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000040)=0x1) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000ec3effffffff81e300000000000000000000000000000000000000000100000000df00000000000000000011"]) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001000)={"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"}) 12:18:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00006c0000", 0x24) [ 1840.652761][T20891] fuse: Bad value for 'fd' 12:18:32 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:18:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x25, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:32 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:18:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000740000", 0x24) 12:18:32 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x6026) 12:18:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) socket$caif_stream(0x25, 0x1, 0x2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000ecffffffffff81e3000000000000000000000000000000000000000001000000000000000000000000000011"]) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000200)={"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"}) 12:18:32 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:18:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00007a0000", 0x24) [ 1841.171052][T21044] fuse: Bad value for 'fd' 12:18:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x63, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000200)) 12:18:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000f00000", 0x24) 12:18:32 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="6f000000ecffffff359dd2d9b22230ffff81e3000000000000000000000000dd8cfd8300000000010000000000000000"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001000)={"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"}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000000)) 12:18:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") unshare(0x8000400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r1, 0x402, 0x0) 12:18:32 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xc001) 12:18:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x3c0, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000300", 0x24) 12:18:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xc, 0x20000) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) r2 = fcntl$dupfd(r0, 0x40a, r1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000ecffffffffff81e3000000000000000000000000000000000000000001000000000000000000000000000011"]) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000a00)={"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"}) [ 1841.709149][T21174] fuse: Bad value for 'fd' 12:18:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4008ae6a, &(0x7f0000000000)={0x0, 0x5}) 12:18:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x7ffffff2, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000500", 0x24) 12:18:33 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xe0ff) 12:18:33 executing program 3: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000380)=0x0) getpid() r2 = getpgrp(0x0) r3 = getpgrp(r0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) getgroups(0x6, &(0x7f0000000700)=[0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00]) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000007c0)={{0x3, 0x0, 0x0, 0x0, r4, 0x10, 0xb4}, 0x4, 0x81, 0x4, 0x80000001, r2, r1, 0x80000001}) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x48) ustat(0x6, &(0x7f00000000c0)) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x401, 0x828, 0x40, 0x3b, 0x0, 0x4, 0x1000, 0xc, 0x4, 0xcd8, 0x0, 0x0, 0x2, 0x7, 0x8, 0x0, 0x80, 0xc8, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000001, 0x5, 0xfffffffffffff801, 0x4, 0x0, 0xa615, 0x0, 0x0, 0x6, 0x3, 0x8, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x4, 0x6b, 0x5, 0x1, 0x0, 0xffff, 0x7}, r2, 0x9, r5, 0x2) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r6, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) r7 = creat(&(0x7f0000000340)='./bus\x00', 0x0) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f0000000240), 0x4) syz_emit_ethernet(0x0, &(0x7f00000004c0)=ANY=[], 0x0) ftruncate(r7, 0x208200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) 12:18:33 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x129a00, 0x0) write$P9_RCREATE(r0, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x50, 0x0, 0x8}, 0x1}}, 0x18) ioctl$TCSBRK(r0, 0x5409, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x40002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000ecffffffffff81000000004c0000000000000000000000000000002000401d944ad40100000000000004000000000000004f5e4349bbbc4278efd09da0cb7a7ec29ed814df17e5ea9ea6b681ff"]) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001000)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fadc825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e89f6dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bbf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) write$binfmt_elf32(r4, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x5, 0x850000000000, 0x40, 0x1, 0x0, 0x3, 0x9, 0x321, 0x38, 0x13e, 0x101, 0x18b1a000000, 0x20, 0x2, 0x101, 0x6, 0x2}, [{0x7474e557, 0x80000001, 0x8, 0x8, 0x8, 0x0, 0x4, 0x6f0}, {0x3, 0x5, 0xcda8, 0xe15, 0x8, 0x0, 0xfffffffffffffffc, 0x8}], "02a9ce73d220c6f1dcfaabc47db85dc28ca08d4c05528462ba6550a5bba54a295ac83589364616755b6042a58c61a69f3d2d4e67e6d4cdc6c0e45d856e85a8ce5e565966780ec9b7a5de38654ded240f8c64f827130ea06e5806a5f8", [[], [], [], [], []]}, 0x5d4) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/2) 12:18:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000600", 0x24) 12:18:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x7ffffff8, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) [ 1842.153782][T21399] fuse: Bad value for 'fd' 12:18:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000006300)=[{&(0x7f00000005c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000600)="a2", 0x1}], 0x1, &(0x7f0000001c40)=[@sndinfo={0x20}, @sndrcv={0x30}, @prinfo={0x18, 0x84, 0x5, {0x30}}], 0x68}], 0x1, 0x0) 12:18:33 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xed01) 12:18:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000700", 0x24) 12:18:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x7ffffff9, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:18:34 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) 12:18:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000a00", 0x24) 12:18:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000ecffffffffcb4d259a02017a0e338379ff81e3fbffffff00006981372f434b3ded5e07757f0952a9f06f00000000000100000000000040000000000000001166361dfd9a2b666be717aa0369b3fd59e9185629ffa21b64f5c4d6079674b780cb4377fcb5281cfc91fa0acc1b681e0917637b59a2b11b53cd759888cf253a290ede5877d56028f3d4ab31c27b1a43edd2fb8f270bc82879ea48a86a91eb11514e417a12be25c782f8793db24cde6b1da90c7357bbf1948d790a6f55f3999ad56355d689c09d8012d8031b88a988e226cf8ff5c9eadc61ac94ddf0776dc8692616a58352da0f2b92a5d7a603d39d08dbfd5cab8cc0ef6e3d448f45cdb68fce0c6abae5d6257a84738f6af5892d1f643fa81b7ff5c78843f844c2c2eee660045f6d6ec9c49f2bfad1c99a3c82acb1f3f8ad89dff0fe52a6c5449f4d36d7a8f9b051cb1a9793b3eb344226afb3f6"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x400002, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001000)={"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"}) [ 1842.649578][T21627] fuse: Bad value for 'fd' 12:18:34 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) 12:18:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x2, 0x6, @local}, 0x10) [ 1842.860209][T21711] validate_nla: 8 callbacks suppressed [ 1842.860220][T21711] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:34 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xf000) 12:18:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000c00", 0x24) 12:18:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000ecffffffffff81e3000000000000000000000000000000000014a609d628b2514a67ba8c8000f44600000000"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001000)={"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"}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x0, 0x1b578bb, 0x5, 0x20}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="260f2214f6bb760766b86d5d00000f23d00f21f866353000000c0f23f8d8e4dcc236362ed3b3004064d9f70f0125bad00466ed0f00952f7f", 0x38}], 0x1, 0x2, &(0x7f0000000100)=[@efer={0x2, 0x8100}, @cstype3={0x5, 0xe}], 0x2) 12:18:34 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xffffffffffffffe0) 12:18:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x4, 0x6, @local}, 0x10) [ 1843.154039][T21816] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1843.198913][T21816] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1843.218214][T21836] fuse: Bad value for 'fd' 12:18:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000e00", 0x24) 12:18:34 executing program 3: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) io_setup(0x401, &(0x7f00000019c0)=0x0) io_submit(r1, 0x2, &(0x7f0000001900)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) [ 1843.413571][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1843.419377][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:18:34 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xff00) 12:18:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x5, 0x6, @local}, 0x10) [ 1843.480711][T21972] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:35 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000ecffffffffff81e3000000000000000000000000000000000000000001000000000000000000000000000011"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001000)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fadc825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e89f6dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bbf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd0397000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 1843.571114][ T26] audit: type=1804 audit(1563625115.044:77): pid=21974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir634201871/syzkaller.WP9oMh/2068/bus" dev="sda1" ino=16889 res=1 12:18:35 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000f00", 0x24) [ 1843.659968][T21979] fuse: Bad value for 'fd' 12:18:35 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xff01) 12:18:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x6, 0x6, @local}, 0x10) [ 1843.804963][T22124] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000ffd000/0x3000)=nil}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x4, 0x6, 0xfffffffffffffff8, 0x2, 0x1, 0x81, 0x7}, 0xc) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000ecffffffffff81e3050000000000000000000000000000000000000001000000000000000000000000000011"]) prctl$PR_SVE_SET_VL(0x32, 0x3817) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001000)={"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"}) write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x10, 0x3, 0x3}}, 0x14) 12:18:35 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000001100", 0x24) [ 1843.961293][T22188] fuse: Bad value for 'fd' 12:18:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x7, 0x6, @local}, 0x10) 12:18:35 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYPTR, @ANYPTR, @ANYRESHEX, @ANYBLOB="e6c55c5d9eba2ee451cf84e06729a741efca44f937d0492482ba837296d961244e2e0c098fbdcdec851b005eb01c84c36fc06edd36df"], 0x0, 0x7a}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1844.111137][T22311] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:35 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xff0f) 12:18:35 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00003c1d00", 0x24) 12:18:35 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL,ppp1self', 0xc, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000040)={0x5, "5453c569fdae57e7eafe7d4c855fdb31f200818d95865c091e76626d969e4f4c", 0x3, 0xffffffffffff99d8, 0x5, 0x1400, 0x2}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f4]}) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x400000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x1) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000200)) io_setup(0x83, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1, 0x0) [ 1844.327963][T22325] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1844.337912][T22324] fuse: Bad value for 'fd' 12:18:38 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2a) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) 12:18:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000002000", 0x24) 12:18:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x5, @local}, 0x10) 12:18:38 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xffe0) 12:18:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty}, &(0x7f0000000240)=0x20) [ 1846.702191][T22444] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1846.727327][T22445] fuse: Bad value for 'fd' 12:18:38 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/246, 0xf6, 0x0, &(0x7f0000000000)=@isdn={0x22, 0x0, 0x8}, 0x80) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f00000001c0)) fremovexattr(r1, 0x0) gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0), 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000480)={r3, 0x4, 0x1}, &(0x7f00000004c0)=0x8) read$rfkill(r2, &(0x7f0000000080), 0x8) ioctl$VT_ACTIVATE(r2, 0x5606, 0x3f) 12:18:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000003a00", 0x24) 12:18:38 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x7, @local}, 0x10) 12:18:38 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x7ff00) [ 1846.926774][T22611] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00001d3c00", 0x24) [ 1847.099962][T22663] fuse: Bad value for 'fd' [ 1847.136126][T22671] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x9, @local}, 0x10) 12:18:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000003f00", 0x24) 12:18:38 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYPTR, @ANYPTR, @ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c5d9eba2ee451cf84e06729a741efca44f937d0492482ba837296d961244e2e0c098fbdcdec851b005eb01c84c36fc06edd36df73a1bdb68ae0ce40abe4279c"], 0x0, 0x8a}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:38 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x100000) 12:18:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x2]}, 0x10) [ 1847.452335][T22782] fuse: Bad value for 'fd' 12:18:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000004000", 0x24) 12:18:39 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 12:18:39 executing program 3: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x4e24, 0x0, @local}, {0xa, 0x4e20, 0x0, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x5c) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x20, 0x101002) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x100000000, 0x1) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x1}], 0xfe72) socket$inet6(0xa, 0x8800a, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) [ 1847.552874][T22826] device syz_tun entered promiscuous mode [ 1847.572095][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1847.578012][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1847.594995][T22792] device syz_tun left promiscuous mode 12:18:41 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:41 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x200000) 12:18:41 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000004800", 0x24) 12:18:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x3]}, 0x10) 12:18:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x11a) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f00000000c0)={'nr0\x00', 0x7, 0xc42}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6}}, 0xe8) dup2(r0, r2) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000080)) 12:18:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000007997f6699000000000000d6dbb905d1f86beb0000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fff0f00000000000055b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e73a871a86cc8c8dda870000000002000100000000000000030080ffffff05000500000000000a000000def7bd3e10c05ce000000000fe800000200000003692daa992ee1466"], 0xd8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1850.062908][T23012] fuse: Bad value for 'fd' [ 1850.084640][T23015] validate_nla: 2 callbacks suppressed [ 1850.084651][T23015] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1850.125230][T23016] device syz_tun entered promiscuous mode [ 1850.151575][T23014] device syz_tun left promiscuous mode 12:18:41 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000004c00", 0x24) 12:18:41 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xf0ffff) 12:18:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x4]}, 0x10) 12:18:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4040ae9e, &(0x7f0000001000)={"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"}) 12:18:41 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e5, &(0x7f0000000100)={'eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xbb?\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00S0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_/0\xc4\x00\x00\x00\x00\x00\x00\x00\x80\x00'}) [ 1850.367993][T23234] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1850.415537][T23237] fuse: Bad value for 'fd' 12:18:42 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000655800", 0x24) [ 1850.440729][T23238] device syz_tun entered promiscuous mode [ 1850.463227][T23236] device syz_tun left promiscuous mode [ 1850.631575][T23350] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:44 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") unshare(0x8000400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r1, 0x3, 0x0) 12:18:44 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:18:44 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xff0700) 12:18:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x5]}, 0x10) 12:18:44 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000006000", 0x24) [ 1853.199021][T23359] device syz_tun entered promiscuous mode [ 1853.220924][T23358] device syz_tun left promiscuous mode [ 1853.226049][T23382] fuse: Bad value for 'fd' [ 1853.236519][T23385] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:44 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000586500", 0x24) 12:18:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x6]}, 0x10) 12:18:44 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x1000000) [ 1853.420237][T23577] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:44 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) r0 = getpgrp(0x0) r1 = getpgrp(0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000290000/0x2000)=nil) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x48) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') ftruncate(r3, 0x208200) linkat(r2, &(0x7f0000000140)='./bus\x00', r3, &(0x7f0000000180)='./bus\x00', 0x1000) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14102a, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) [ 1853.463380][T23579] device syz_tun entered promiscuous mode [ 1853.502927][T23581] fuse: Bad value for 'fd' [ 1853.508341][T23578] device syz_tun left promiscuous mode 12:18:45 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000006800", 0x24) 12:18:45 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x2000000) [ 1853.630028][T23688] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1853.749930][T23791] fuse: Bad value for 'fd' 12:18:47 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x7]}, 0x10) 12:18:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000006c00", 0x24) 12:18:47 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c"], 0x4}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:18:47 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x3000000) 12:18:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000007997f6699000000000000d6dbb905d1f86beb0000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fff0f00000000000055b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e73a871a86cc8c8dda870000000002000100000000000000030080ffffff05000500000000000a000000def7bd3e10c05ce000000000fe800000200000003692daa992ee1466"], 0xd8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) [ 1856.286549][T23902] device syz_tun entered promiscuous mode [ 1856.294931][T23900] fuse: Bad value for 'fd' [ 1856.321152][T23905] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x10) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) 12:18:47 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1856.362417][T23901] device syz_tun left promiscuous mode 12:18:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000007400", 0x24) 12:18:47 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x4000000) 12:18:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000007997f6699000000000000d6dbb905d1f86beb0000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fff0f00000000000055b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e73a871a86cc8c8dda870000000002000100000000000000030080ffffff05000500000000000a000000def7bd3e10c05ce000000000fe800000200000003692daa992ee1466"], 0xd8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) 12:18:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x48]}, 0x10) [ 1856.603432][T24025] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1856.667692][T24053] fuse: Bad value for 'fd' 12:18:48 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000007a00", 0x24) [ 1856.722739][T24083] device syz_tun entered promiscuous mode [ 1856.755200][T24072] device syz_tun left promiscuous mode 12:18:48 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x5000000) 12:18:48 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="953a4df392bfd6702f4d787c6242b414a6c8e95716e567a2c705e6fb3024") syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x950, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, &(0x7f00000001c0), 0x20002000005) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) [ 1856.813735][T24216] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:48 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000008100", 0x24) 12:18:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x4c]}, 0x10) [ 1857.035839][T24244] fuse: Bad value for 'fd' [ 1857.055771][T24247] device syz_tun entered promiscuous mode [ 1857.062254][T24246] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1857.085905][T24245] device syz_tun left promiscuous mode 12:18:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x60]}, 0x10) 12:18:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x101000, 0x0) r3 = dup2(r0, r1) renameat(r2, 0x0, r3, &(0x7f0000000880)='./file0\x00') write$uinput_user_dev(r1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x894, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x109) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) [ 1857.361431][T24358] device syz_tun entered promiscuous mode [ 1857.380285][T24356] device syz_tun left promiscuous mode [ 1859.404176][ T132] device bridge_slave_1 left promiscuous mode [ 1859.410366][ T132] bridge0: port 2(bridge_slave_1) entered disabled state 12:18:50 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:50 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 12:18:50 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000f000", 0x24) 12:18:50 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x5260000) 12:18:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x68]}, 0x10) 12:18:50 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f0000001000)) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000005c0)={0x0, {{0xa, 0x4e23, 0x0, @mcast1}}}, 0x88) [ 1859.463351][ T132] device bridge_slave_0 left promiscuous mode [ 1859.469612][ T132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1859.585143][T24472] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1859.594140][T24475] fuse: Bad value for 'fd' 12:18:51 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000004003", 0x24) 12:18:51 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:51 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x6000000) [ 1859.846688][T24586] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:51 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 12:18:51 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000340", 0x24) [ 1859.972036][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1859.977901][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1859.994029][T24590] fuse: Bad value for 'fd' [ 1860.052048][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1860.057912][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:18:51 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RRENAME(r0, 0x0, 0x0) [ 1860.133950][T24668] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:51 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x7000000) 12:18:51 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000fffff0", 0x24) [ 1860.371885][T24706] fuse: Bad value for 'fd' [ 1860.393152][T24710] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:51 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:18:52 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x8000000) [ 1860.631176][T24816] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1860.692082][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1860.697934][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1860.741246][T24818] fuse: Bad value for 'fd' [ 1861.412086][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1861.418098][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1861.492058][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1861.497926][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1862.713234][ T132] device hsr_slave_0 left promiscuous mode [ 1862.792229][ T132] device hsr_slave_1 left promiscuous mode [ 1862.859724][ T132] team0 (unregistering): Port device team_slave_1 removed [ 1862.877835][ T132] team0 (unregistering): Port device team_slave_0 removed [ 1862.890403][ T132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1862.937584][ T132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1863.032528][ T132] bond0 (unregistering): Released all slaves 12:18:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x6c]}, 0x10) [ 1863.117708][T24474] device syz_tun entered promiscuous mode [ 1863.123805][T24474] device syz_tun left promiscuous mode [ 1863.147399][T24925] IPVS: ftp: loaded support on port[0] = 21 [ 1863.196380][T24929] device syz_tun entered promiscuous mode [ 1863.252655][T24927] device syz_tun left promiscuous mode [ 1863.277992][T24929] device syz_tun entered promiscuous mode [ 1863.295361][T24929] device syz_tun left promiscuous mode [ 1863.417000][T24925] chnl_net:caif_netlink_parms(): no params data found [ 1863.466469][T24925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.473775][T24925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.481879][T24925] device bridge_slave_0 entered promiscuous mode [ 1863.490413][T24925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.497906][T24925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.506214][T24925] device bridge_slave_1 entered promiscuous mode [ 1863.536863][T24925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1863.554883][T24925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1863.590701][T24925] team0: Port device team_slave_0 added [ 1863.599543][T24925] team0: Port device team_slave_1 added [ 1863.685219][T24925] device hsr_slave_0 entered promiscuous mode [ 1863.732535][T24925] device hsr_slave_1 entered promiscuous mode [ 1863.782146][T24925] debugfs: Directory 'hsr0' with parent '/' already present! [ 1863.811027][T24925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.818192][T24925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1863.825725][T24925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.832999][T24925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1863.891125][T24925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1863.916113][T24858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1863.931041][T24858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.940282][T24858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.963251][T24925] 8021q: adding VLAN 0 to HW filter on device team0 [ 1863.983191][T29793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1863.998848][T29793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1864.005979][T29793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1864.033537][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1864.042877][ T4947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1864.049949][ T4947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1864.075840][T24858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1864.085733][T24858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1864.101517][T24858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1864.113736][T24858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1864.125925][T24925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1864.135562][T24858] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1864.174412][T24925] 8021q: adding VLAN 0 to HW filter on device batadv0 12:18:55 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:18:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, 0x0) 12:18:55 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:18:55 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xc000000) 12:18:55 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x74]}, 0x10) [ 1864.504187][T24945] device syz_tun entered promiscuous mode [ 1864.525579][T24950] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1864.533364][T24947] fuse: Bad value for 'fd' [ 1864.547536][T24944] device syz_tun left promiscuous mode 12:18:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:18:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe07bf070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) writev(r1, &(0x7f0000000000)=[{0x0, 0x2}, {&(0x7f00000001c0)='\n', 0x1}], 0x2) 12:18:56 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xd000000) 12:18:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x7a]}, 0x10) [ 1864.763039][T25064] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1864.854141][T25067] fuse: Bad value for 'fd' 12:18:56 executing program 2: [ 1864.937377][T25075] device syz_tun entered promiscuous mode [ 1864.971125][T25070] device syz_tun left promiscuous mode [ 1865.022247][T25147] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:18:56 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:18:56 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x10000000) 12:18:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:18:56 executing program 2: [ 1865.432497][T25189] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1865.456363][T25188] fuse: Bad value for 'fd' 12:18:58 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x300]}, 0x10) 12:18:58 executing program 2: 12:18:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:18:58 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x12000000) 12:18:58 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:18:59 executing program 2: [ 1867.517632][T25298] device syz_tun entered promiscuous mode [ 1867.545120][T25297] device syz_tun left promiscuous mode [ 1867.546836][T25309] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1867.560675][T25304] fuse: Bad value for 'fd' 12:18:59 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:18:59 executing program 2: [ 1867.652056][ C1] net_ratelimit: 6 callbacks suppressed [ 1867.652065][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1867.663600][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:18:59 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x14000000) 12:18:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x500]}, 0x10) 12:18:59 executing program 2: [ 1867.824975][T25424] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1867.841897][T25425] device syz_tun entered promiscuous mode [ 1867.866345][T25423] device syz_tun left promiscuous mode [ 1867.887029][T25427] fuse: Bad value for 'fd' 12:19:02 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:02 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:02 executing program 2: 12:19:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x600]}, 0x10) 12:19:02 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x20000000) 12:19:02 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:19:02 executing program 2: 12:19:02 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1870.588873][T25542] device syz_tun entered promiscuous mode [ 1870.593614][T25543] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1870.614382][T25545] fuse: Bad value for 'fd' [ 1870.618409][T25540] device syz_tun left promiscuous mode 12:19:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x700]}, 0x10) 12:19:02 executing program 2: [ 1870.773588][T25613] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:02 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x3f000000) 12:19:02 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1870.842461][T25661] device syz_tun entered promiscuous mode [ 1870.867699][T25658] device syz_tun left promiscuous mode [ 1870.960299][T25665] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1871.031792][T25669] fuse: Bad value for 'fd' 12:19:05 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:05 executing program 2: 12:19:05 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x2000]}, 0x10) 12:19:05 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x40000000) 12:19:05 executing program 3: gettid() r0 = fanotify_init(0x0, 0x0) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) [ 1873.650519][T25783] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:05 executing program 2: 12:19:05 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1873.694658][T25785] device syz_tun entered promiscuous mode [ 1873.704926][T25787] fuse: Bad value for 'fd' [ 1873.717498][T25780] device syz_tun left promiscuous mode [ 1873.808959][T25829] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:05 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x3f00]}, 0x10) 12:19:05 executing program 2: 12:19:05 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x60260000) [ 1873.988842][T25905] device syz_tun entered promiscuous mode [ 1874.044147][T25903] device syz_tun left promiscuous mode [ 1874.083114][T25909] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1874.097191][T25910] fuse: Bad value for 'fd' 12:19:08 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140), 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz'}, 0x0, 0xfffffffffffffffe) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 12:19:08 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000003c", 0x24) 12:19:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x4000]}, 0x10) 12:19:08 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x8cffffff) 12:19:08 executing program 3: gettid() r0 = fanotify_init(0x0, 0x0) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) [ 1876.756477][T26020] device syz_tun entered promiscuous mode [ 1876.760977][T26028] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1876.781803][T26018] device syz_tun left promiscuous mode [ 1876.794673][T26023] fuse: Bad value for 'fd' 12:19:08 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:08 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:08 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1876.939540][T26071] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x4800]}, 0x10) 12:19:08 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xc0010000) 12:19:08 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:08 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1877.173531][T26148] device syz_tun entered promiscuous mode [ 1877.194541][T26146] device syz_tun left promiscuous mode [ 1877.211200][T26152] fuse: Bad value for 'fd' [ 1877.215982][T26151] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:12 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') unshare(0x4020000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x1) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x14) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000002c0), 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) fcntl$setflags(r1, 0x2, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x600, 0x0) ptrace$cont(0xffffffffffffffff, r3, 0x1ff, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, 0x0) open$dir(0x0, 0x0, 0x0) ustat(0x5, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:19:12 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x4c00]}, 0x10) 12:19:12 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:12 executing program 3: gettid() r0 = fanotify_init(0x0, 0x0) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 12:19:12 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xe0ffffff) 12:19:12 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1880.609898][T26270] device syz_tun entered promiscuous mode [ 1880.624606][T26274] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1880.634260][T26266] device syz_tun left promiscuous mode [ 1880.650233][T26273] fuse: Bad value for 'fd' 12:19:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x6000]}, 0x10) 12:19:12 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xe4ffffff) [ 1880.781567][T26382] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:12 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1880.913909][T26386] fuse: Bad value for 'fd' [ 1880.955759][T26390] device syz_tun entered promiscuous mode [ 1880.970385][T26393] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1880.986110][T26389] device syz_tun left promiscuous mode 12:19:12 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000340)={0x1, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 12:19:12 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:12 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xed010000) 12:19:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x6800]}, 0x10) [ 1881.177596][T26500] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:12 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1881.236539][T26505] fuse: Bad value for 'fd' [ 1881.246689][T26506] device syz_tun entered promiscuous mode [ 1881.258591][T26503] device syz_tun left promiscuous mode [ 1881.316244][T26506] device syz_tun entered promiscuous mode [ 1881.325238][T26506] device syz_tun left promiscuous mode [ 1881.347413][T26540] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:15 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) 12:19:15 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xf4ffffff) 12:19:15 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000058", 0x24) 12:19:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x6c00]}, 0x10) 12:19:15 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) tkill(r0, 0x14) [ 1883.635267][T26619] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1883.662942][T26623] device syz_tun entered promiscuous mode [ 1883.672886][T26622] fuse: Bad value for 'fd' 12:19:15 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1883.697989][T26616] device syz_tun left promiscuous mode 12:19:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x7400]}, 0x10) 12:19:15 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xf6ffffff) [ 1883.810623][T26735] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:15 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1883.951773][T26742] fuse: Bad value for 'fd' 12:19:15 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1883.977413][T26743] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:15 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xfeffffff) [ 1884.126548][T26846] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1884.138890][T26740] device syz_tun entered promiscuous mode [ 1884.149398][T26737] device syz_tun left promiscuous mode [ 1884.206492][T26848] fuse: Bad value for 'fd' 12:19:18 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:18 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x7a00]}, 0x10) 12:19:18 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xff000000) 12:19:18 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) read(r0, 0x0, 0x3) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 12:19:18 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) tkill(r0, 0x14) [ 1886.719830][T26961] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1886.741805][T26962] device syz_tun entered promiscuous mode [ 1886.750385][T26963] fuse: Bad value for 'fd' [ 1886.754795][T26958] device syz_tun left promiscuous mode 12:19:18 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:18 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x1000000]}, 0x10) [ 1886.872526][T27041] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:18 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000ffffa8", 0x24) 12:19:18 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:18 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xff010000) 12:19:18 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(0x0, 0x3b) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 1887.018371][T27081] device syz_tun entered promiscuous mode [ 1887.033069][T27080] device syz_tun left promiscuous mode [ 1887.046536][T27083] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:18 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000ffffff", 0x24) [ 1887.138630][T27091] fuse: Bad value for 'fd' 12:19:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x2000000]}, 0x10) 12:19:18 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(0x0, 0x3b) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 1887.259044][T27109] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1887.328536][T27200] device syz_tun entered promiscuous mode [ 1887.369078][T27162] device syz_tun left promiscuous mode 12:19:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x700]}, 0x10) [ 1887.584449][T27209] device syz_tun entered promiscuous mode [ 1887.593223][T27208] device syz_tun left promiscuous mode 12:19:21 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) tkill(r0, 0x14) 12:19:21 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xff0f0000) 12:19:21 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(0x0, 0x3b) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 12:19:21 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000ffffff", 0x24) 12:19:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x3000000]}, 0x10) 12:19:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x6c]}, 0x10) 12:19:21 executing program 0: r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1889.764490][T27221] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1889.785385][T27218] fuse: Bad value for 'fd' [ 1889.799919][T27219] device syz_tun entered promiscuous mode 12:19:21 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000088a8ff", 0x24) [ 1889.812070][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1889.817874][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1889.840240][T27215] device syz_tun entered promiscuous mode [ 1889.856234][T27217] device syz_tun left promiscuous mode [ 1889.882056][T27214] device syz_tun left promiscuous mode 12:19:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x4000000]}, 0x10) 12:19:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x17, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:19:21 executing program 0: r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1889.963411][T27273] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:21 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000f0ff", 0x24) [ 1890.137550][T27341] device syz_tun entered promiscuous mode [ 1890.161831][T27336] device syz_tun left promiscuous mode [ 1890.225052][T27346] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:24 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:19:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xfffff000) 12:19:24 executing program 0: r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:24 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00009effff", 0x24) 12:19:24 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x5000000]}, 0x10) 12:19:24 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1892.888623][T27357] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1892.913745][T27362] device syz_tun entered promiscuous mode [ 1892.920581][T27358] device syz_tun left promiscuous mode [ 1892.930196][T27361] fuse: Bad value for 'fd' 12:19:24 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000f0ffff", 0x24) [ 1892.966752][T27362] device syz_tun entered promiscuous mode [ 1892.977199][T27362] device syz_tun left promiscuous mode 12:19:24 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x6000000]}, 0x10) 12:19:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xffffff7f) [ 1893.135828][T27473] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:24 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1893.235224][T27479] device syz_tun entered promiscuous mode [ 1893.252024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1893.257895][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1893.261757][T27475] device syz_tun left promiscuous mode [ 1893.330673][T27481] fuse: Bad value for 'fd' 12:19:27 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:27 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xffffff8c) 12:19:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x7000000]}, 0x10) 12:19:27 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:19:27 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1895.985094][T27600] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1896.016719][T27601] device syz_tun entered promiscuous mode 12:19:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000ffffff", 0x24) [ 1896.048623][T27604] fuse: Bad value for 'fd' [ 1896.052069][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1896.058882][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1896.072829][T27594] device syz_tun left promiscuous mode 12:19:27 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:27 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x20000000]}, 0x10) 12:19:27 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xffffffe0) [ 1896.186260][T27711] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:27 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1896.363280][T27721] device syz_tun entered promiscuous mode [ 1896.376474][T27720] fuse: Bad value for 'fd' [ 1896.386409][T27717] device syz_tun left promiscuous mode [ 1896.434341][T27731] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:30 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:19:30 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x3f000000]}, 0x10) 12:19:30 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:30 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:30 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xffffffe4) 12:19:30 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1899.051693][T27839] device syz_tun entered promiscuous mode [ 1899.073658][T27843] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1899.093080][T27838] device syz_tun left promiscuous mode [ 1899.113275][T27848] fuse: Bad value for 'fd' 12:19:30 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:30 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x40000000]}, 0x10) 12:19:30 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xfffffff4) 12:19:30 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) [ 1899.364902][T27971] device syz_tun entered promiscuous mode [ 1899.373054][T27972] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1899.395892][T27955] device syz_tun left promiscuous mode [ 1899.469289][T27974] fuse: Bad value for 'fd' [ 1899.562768][T28002] fuse: Bad value for 'fd' 12:19:33 executing program 3: r0 = gettid() read(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:19:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x48000000]}, 0x10) 12:19:33 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) 12:19:33 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xfffffff6) [ 1902.164572][T28087] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1902.170548][T28084] device syz_tun entered promiscuous mode 12:19:33 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1902.217702][T28082] device syz_tun left promiscuous mode [ 1902.222427][T28090] fuse: Bad value for 'fd' [ 1902.232780][T28091] fuse: Bad value for 'fd' 12:19:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1902.292042][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1902.297902][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:19:33 executing program 3: r0 = gettid() read(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:19:33 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) 12:19:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x4c000000]}, 0x10) 12:19:34 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xfffffffe) [ 1902.491187][T28202] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:34 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:34 executing program 3: r0 = gettid() read(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1902.623028][T28210] fuse: Bad value for 'fd' 12:19:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1902.653377][T28212] device syz_tun entered promiscuous mode [ 1902.685485][T28214] fuse: Bad value for 'fd' 12:19:34 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1902.702824][T28208] device syz_tun left promiscuous mode [ 1902.759012][T28259] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:34 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x10000000000000) 12:19:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x60000000]}, 0x10) 12:19:34 executing program 3: r0 = fanotify_init(0x0, 0x0) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x14) 12:19:34 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1902.965822][T28330] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:34 executing program 3: r0 = fanotify_init(0x0, 0x0) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x14) [ 1903.077770][T28372] device syz_tun entered promiscuous mode [ 1903.092075][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1903.098008][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1903.107387][T28339] device syz_tun left promiscuous mode 12:19:34 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x20000000000000) [ 1903.252907][T28447] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1903.343049][T28451] fuse: Bad value for 'fd' 12:19:37 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:37 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x68000000]}, 0x10) 12:19:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:37 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xf0ffffffffffff) 12:19:37 executing program 3: r0 = fanotify_init(0x0, 0x0) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x14) [ 1905.712683][T28560] device syz_tun entered promiscuous mode [ 1905.732053][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1905.737925][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1905.749204][T28565] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1905.755416][T28566] fuse: Bad value for 'fd' 12:19:37 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1905.770933][T28556] device syz_tun left promiscuous mode 12:19:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x6c000000]}, 0x10) 12:19:37 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xff070000000000) 12:19:37 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1905.945960][T28677] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1905.978841][T28679] device syz_tun entered promiscuous mode 12:19:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1906.007633][T28682] fuse: Bad value for 'fd' [ 1906.026784][T28678] device syz_tun left promiscuous mode [ 1906.129151][T28789] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:40 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:40 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:40 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x100000000000000) 12:19:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x74000000]}, 0x10) 12:19:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:40 executing program 3: r0 = gettid() fanotify_init(0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1908.771618][T28797] fuse: Bad value for 'fd' [ 1908.788020][T28800] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:40 executing program 3: r0 = gettid() fanotify_init(0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:19:40 executing program 2: syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1908.814379][T28804] device syz_tun entered promiscuous mode [ 1908.838071][T28799] device syz_tun left promiscuous mode 12:19:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1908.915411][T28854] device syz_tun entered promiscuous mode [ 1908.921261][T28854] device syz_tun left promiscuous mode 12:19:40 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:40 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x200000000000000) 12:19:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x7a000000]}, 0x10) 12:19:40 executing program 3: r0 = gettid() fanotify_init(0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1909.058919][T28918] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:40 executing program 2: syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:40 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1909.252082][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1909.257911][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1909.274251][T28928] device syz_tun entered promiscuous mode [ 1909.303783][T28925] device syz_tun left promiscuous mode 12:19:40 executing program 2: syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1909.388999][T29008] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:40 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x300000000000000) 12:19:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x100000000000000]}, 0x10) 12:19:40 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:19:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1909.600093][T29054] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1909.603817][T29052] device syz_tun entered promiscuous mode [ 1909.631625][T29053] fuse: Bad value for 'fd' [ 1909.640902][T29047] device syz_tun left promiscuous mode 12:19:43 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:43 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:43 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:19:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x200000000000000]}, 0x10) 12:19:43 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x400000000000000) [ 1912.156656][T29167] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1912.170900][T29169] device syz_tun entered promiscuous mode [ 1912.183386][T29166] fuse: Bad value for 'fd' [ 1912.194168][T29163] device syz_tun left promiscuous mode 12:19:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:43 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:43 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:43 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:19:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x300000000000000]}, 0x10) [ 1912.330227][T29214] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:43 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x500000000000000) 12:19:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:44 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1912.474963][T29287] device syz_tun entered promiscuous mode [ 1912.513469][T29286] device syz_tun left promiscuous mode 12:19:44 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1912.610519][T29301] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1912.643725][T29302] fuse: Bad value for 'fd' 12:19:44 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x400000000000000]}, 0x10) [ 1912.784662][T29375] fuse: Bad value for 'fd' 12:19:44 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x526000000000000) [ 1912.807060][T29377] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:44 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1912.880262][T29413] device syz_tun entered promiscuous mode [ 1912.911316][T29412] device syz_tun left promiscuous mode [ 1912.957381][T29416] fuse: Bad value for 'fd' [ 1912.977480][T29418] fuse: Bad value for 'fd' 12:19:46 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:46 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:46 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x500000000000000]}, 0x10) 12:19:46 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x600000000000000) 12:19:46 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1915.513646][T29529] device syz_tun entered promiscuous mode [ 1915.548521][T29532] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:47 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1915.563365][T29531] fuse: Bad value for 'fd' [ 1915.572045][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1915.577881][T29524] device syz_tun left promiscuous mode [ 1915.586430][T29533] fuse: Bad value for 'fd' 12:19:47 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x700000000000000) 12:19:47 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[]}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x600000000000000]}, 0x10) [ 1915.720203][T29642] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1915.870077][T29651] fuse: Bad value for 'fd' 12:19:47 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1915.900988][T29655] device syz_tun entered promiscuous mode [ 1915.922101][T29650] device syz_tun left promiscuous mode [ 1915.946149][T29663] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:47 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x800000000000000) 12:19:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x700000000000000]}, 0x10) 12:19:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1916.098630][T29764] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1916.168622][T29768] device syz_tun entered promiscuous mode [ 1916.203316][T29769] fuse: Bad value for 'fd' [ 1916.212155][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1916.218014][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1916.224644][T29767] device syz_tun left promiscuous mode [ 1916.268347][T29778] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:49 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:19:49 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:49 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:49 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xc00000000000000) [ 1918.542663][T29881] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1918.569206][T29882] fuse: Bad value for 'fd' 12:19:50 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[]}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x2000000000000000]}, 0x10) 12:19:50 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:50 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:50 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xd00000000000000) [ 1918.864443][T29995] device syz_tun entered promiscuous mode [ 1918.873708][T29996] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1918.888026][T29991] device syz_tun left promiscuous mode 12:19:50 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1918.917623][T29999] fuse: Bad value for 'fd' 12:19:50 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x3f00000000000000]}, 0x10) [ 1919.045497][T30050] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1919.189195][T30114] device syz_tun entered promiscuous mode [ 1919.205171][T30112] device syz_tun left promiscuous mode [ 1919.255140][T30114] device syz_tun entered promiscuous mode [ 1919.261387][T30114] device syz_tun left promiscuous mode 12:19:53 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:19:53 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x1000000000000000) 12:19:53 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:53 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1921.593656][T30121] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1921.603718][T30122] fuse: Bad value for 'fd' 12:19:53 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[]}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x4000000000000000]}, 0x10) 12:19:53 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:53 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:53 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x1200000000000000) [ 1921.956627][T30234] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1921.967712][T30237] fuse: Bad value for 'fd' [ 1921.968616][T30238] device syz_tun entered promiscuous mode [ 1921.995831][T30241] fuse: Missing mount parameter(s) [ 1921.997311][T30236] device syz_tun left promiscuous mode 12:19:53 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:53 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1922.065398][T30238] device syz_tun entered promiscuous mode [ 1922.085547][T30238] device syz_tun left promiscuous mode [ 1922.091871][T30300] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:19:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x4800000000000000]}, 0x10) [ 1922.172198][T30350] fuse: Missing mount parameter(s) [ 1922.287381][T30354] device syz_tun entered promiscuous mode [ 1922.301398][T30352] device syz_tun left promiscuous mode 12:19:56 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:19:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:19:56 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x1400000000000000) 12:19:56 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1924.660509][T30360] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1924.668699][T30361] fuse: Bad value for 'fd' [ 1924.688391][T30364] fuse: Missing mount parameter(s) 12:19:56 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB]}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x4c00000000000000]}, 0x10) 12:19:56 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000f0ff", 0x24) 12:19:56 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x2000000000000000) [ 1925.033394][T30471] device syz_tun entered promiscuous mode [ 1925.047320][T30477] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1925.060808][T30478] fuse: Bad value for 'fd' [ 1925.067944][T30470] device syz_tun left promiscuous mode [ 1925.075030][T30475] fuse: Bad value for 'fd' 12:19:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000200", 0x24) 12:19:56 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x6000000000000000]}, 0x10) [ 1925.202173][T30585] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1925.259869][T30588] fuse: Bad value for 'fd' [ 1925.375389][T30593] device syz_tun entered promiscuous mode [ 1925.392797][T30591] device syz_tun left promiscuous mode 12:19:59 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:19:59 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x3f00000000000000) 12:19:59 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000300", 0x24) 12:19:59 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1927.764048][T30601] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1927.782308][T30599] fuse: Bad value for 'fd' [ 1927.798438][T30602] fuse: Bad value for 'fd' 12:19:59 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB]}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x6800000000000000]}, 0x10) 12:19:59 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000400", 0x24) 12:19:59 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:19:59 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x4000000000000000) [ 1928.157628][T30714] fuse: Bad value for 'fd' [ 1928.158169][T30718] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1928.182210][T30713] device syz_tun entered promiscuous mode [ 1928.191007][T30716] fuse: Invalid rootmode 12:19:59 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000500", 0x24) 12:19:59 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB]}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1928.213536][T30711] device syz_tun left promiscuous mode 12:19:59 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1928.355973][T30814] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1928.397207][T30831] fuse: Invalid rootmode 12:20:02 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x14) 12:20:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x6c00000000000000]}, 0x10) 12:20:02 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x6026000000000000) 12:20:02 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000600", 0x24) 12:20:02 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:20:02 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000700", 0x24) [ 1930.866360][T30840] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1930.876386][T30842] device syz_tun entered promiscuous mode [ 1930.893882][T30841] fuse: Bad value for 'fd' [ 1930.894417][T30835] device syz_tun left promiscuous mode [ 1930.911547][T30844] fuse: Invalid rootmode 12:20:02 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) [ 1931.027186][T30902] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x7400000000000000]}, 0x10) 12:20:02 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000a00", 0x24) 12:20:02 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) [ 1931.251383][T30962] device syz_tun entered promiscuous mode [ 1931.263815][T30959] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1931.267391][T30956] device syz_tun left promiscuous mode 12:20:02 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f1"], 0x6}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:02 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x8cffffff00000000) [ 1931.399103][T30966] fuse: Bad value for 'fd' 12:20:05 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x14) 12:20:05 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000c00", 0x24) 12:20:05 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) 12:20:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x7a00000000000000]}, 0x10) 12:20:05 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xc001000000000000) [ 1933.946166][T31081] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1933.948585][T31079] device syz_tun entered promiscuous mode [ 1933.960177][T31080] fuse: Bad value for 'fd' 12:20:05 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000e00", 0x24) [ 1933.991718][T31074] device syz_tun left promiscuous mode 12:20:05 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 12:20:05 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xe0ffffffffffffff) [ 1934.133496][T31188] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x2]}, 0x10) 12:20:05 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000f00", 0x24) [ 1934.197029][T31193] fuse: Bad value for 'fd' [ 1934.269884][T31197] device syz_tun entered promiscuous mode [ 1934.291727][T31194] device syz_tun left promiscuous mode [ 1934.316014][T31222] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:05 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f1"], 0x6}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:05 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 12:20:08 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x14) 12:20:08 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000001000", 0x24) 12:20:08 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xe4ffffff00000000) 12:20:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x3]}, 0x10) 12:20:08 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 12:20:08 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f1"], 0x6}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1937.000659][T31319] fuse: Bad value for 'fd' [ 1937.012119][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1937.018119][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1937.021786][T31318] device syz_tun entered promiscuous mode [ 1937.040025][T31323] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:08 executing program 2: 12:20:08 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000001100", 0x24) [ 1937.092363][T31314] device syz_tun left promiscuous mode 12:20:08 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xed01000000000000) 12:20:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x4]}, 0x10) 12:20:08 executing program 2: [ 1937.253397][T31432] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:08 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000003a00", 0x24) [ 1937.326435][T31436] device syz_tun entered promiscuous mode [ 1937.333252][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1937.340073][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1937.342016][T31437] fuse: Bad value for 'fd' [ 1937.373216][T31434] device syz_tun left promiscuous mode [ 1937.457273][T31463] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:11 executing program 3: gettid() r0 = fanotify_init(0x0, 0x0) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x14) 12:20:11 executing program 2: 12:20:11 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xf4ffffff00000000) 12:20:11 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000004800", 0x24) 12:20:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x5]}, 0x10) 12:20:11 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400"], 0x9}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:11 executing program 2: [ 1940.127598][T31553] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1940.146190][T31556] device syz_tun entered promiscuous mode [ 1940.159825][T31557] fuse: Bad value for 'fd' 12:20:11 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000004c00", 0x24) 12:20:11 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400"], 0x9}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1940.183065][T31548] device syz_tun left promiscuous mode 12:20:11 executing program 2: 12:20:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x6]}, 0x10) [ 1940.333635][T31603] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:11 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000006000", 0x24) [ 1940.532040][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1940.537900][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1940.550214][T31676] device syz_tun entered promiscuous mode [ 1940.576580][T31675] device syz_tun left promiscuous mode [ 1940.588180][T31680] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:12 executing program 3: gettid() r0 = fanotify_init(0x0, 0x0) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x14) 12:20:12 executing program 2: 12:20:12 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400"], 0x9}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:12 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xf6ffffff00000000) 12:20:12 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000006800", 0x24) 12:20:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x7]}, 0x10) 12:20:12 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd80"], 0xb}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1941.064930][T31691] fuse: Bad value for 'fd' [ 1941.069468][T31693] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1941.076600][T31692] device syz_tun entered promiscuous mode [ 1941.092058][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1941.097880][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1941.101327][T31688] device syz_tun left promiscuous mode 12:20:12 executing program 2: 12:20:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x48]}, 0x10) 12:20:12 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xfeffffff00000000) 12:20:12 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000006c00", 0x24) 12:20:12 executing program 2: [ 1941.368762][T31811] device syz_tun entered promiscuous mode [ 1941.371448][T31812] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1941.401273][T31813] fuse: Bad value for 'fd' [ 1941.423948][T31807] device syz_tun left promiscuous mode 12:20:13 executing program 3: gettid() r0 = fanotify_init(0x0, 0x0) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x14) 12:20:13 executing program 2: 12:20:13 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000007400", 0x24) 12:20:13 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xff00000000000000) 12:20:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x4c]}, 0x10) 12:20:13 executing program 2: [ 1942.009729][T31923] fuse: Bad value for 'fd' [ 1942.026447][T31927] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1942.027271][T31926] device syz_tun entered promiscuous mode [ 1942.124024][T31921] device syz_tun left promiscuous mode 12:20:15 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd80"], 0xb}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:15 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000007a00", 0x24) 12:20:15 executing program 2: 12:20:15 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xff01000000000000) 12:20:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x60]}, 0x10) 12:20:15 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x0) 12:20:15 executing program 2: [ 1944.277718][T32044] device syz_tun entered promiscuous mode [ 1944.328963][T32046] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1944.330789][T32039] device syz_tun left promiscuous mode [ 1944.344166][T32045] fuse: Bad value for 'fd' 12:20:15 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd80"], 0xb}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:15 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000f000", 0x24) [ 1944.434333][T32044] device syz_tun entered promiscuous mode [ 1944.451516][T32039] device syz_tun left promiscuous mode 12:20:16 executing program 2: 12:20:16 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xff0f000000000000) 12:20:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x68]}, 0x10) 12:20:16 executing program 2: 12:20:16 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000003", 0x24) [ 1944.576605][T32160] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:16 executing program 2: [ 1944.725558][T32168] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1944.763282][T32170] fuse: Bad value for 'fd' 12:20:16 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000005", 0x24) [ 1944.772059][T32171] device syz_tun entered promiscuous mode [ 1944.792952][T32169] device syz_tun left promiscuous mode 12:20:16 executing program 2: [ 1944.924360][T32280] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:16 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x0) 12:20:16 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xffffff7f00000000) [ 1945.124678][T32285] fuse: Bad value for 'fd' 12:20:19 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x6c]}, 0x10) 12:20:19 executing program 2: 12:20:19 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000006", 0x24) 12:20:19 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xffffffff00000000) 12:20:19 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x0) [ 1947.563979][T32395] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1947.592468][T32399] device syz_tun entered promiscuous mode 12:20:19 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000007", 0x24) [ 1947.613033][T32398] fuse: Bad value for 'fd' [ 1947.623849][T32392] device syz_tun left promiscuous mode 12:20:19 executing program 2: 12:20:19 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xfffffffffffff000) 12:20:19 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1947.742031][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1947.747850][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1947.756612][T32513] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x74]}, 0x10) 12:20:19 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000000a", 0x24) 12:20:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x68]}, 0x10) [ 1947.931337][T32519] fuse: Bad value for 'fd' 12:20:19 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1948.001939][T32525] device syz_tun entered promiscuous mode [ 1948.012538][T32531] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1948.043071][T32520] device syz_tun left promiscuous mode 12:20:19 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000000c", 0x24) 12:20:19 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffe0) 12:20:19 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1948.191891][T32632] device syz_tun entered promiscuous mode [ 1948.232932][T32638] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1948.247768][T32591] device syz_tun left promiscuous mode [ 1948.271149][T32640] fuse: Bad value for 'fd' 12:20:19 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x7a]}, 0x10) 12:20:19 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000000e", 0x24) 12:20:19 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000700", 0x24) 12:20:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x4800000000000000]}, 0x10) 12:20:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x4) r2 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$fuse(0x0, &(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000180)='fuse\x00', 0x28000, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x7}}], [{@obj_role={'obj_role', 0x3d, 'fuse.'}}, {@dont_measure='dont_measure'}, {@appraise_type='appraise_type=imasig'}, {@subj_type={'subj_type', 0x3d, 'wlan0selfGPL'}}, {@pcr={'pcr', 0x3d, 0x1d}}]}}) [ 1948.526501][T32751] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1948.552188][T32755] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1948.560199][T32757] device syz_tun entered promiscuous mode [ 1948.594320][T32750] device syz_tun left promiscuous mode 12:20:20 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:20 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:20 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000000f", 0x24) [ 1948.663270][T32759] device syz_tun entered promiscuous mode [ 1948.665720][T32761] fuse: Bad value for 'fd' [ 1948.675348][T32758] device syz_tun left promiscuous mode 12:20:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x300]}, 0x10) 12:20:20 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x4800000000000000]}, 0x10) [ 1948.852476][ T367] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:20 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 1948.919409][ T409] device syz_tun entered promiscuous mode 12:20:20 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000011", 0x24) [ 1948.981761][ T362] device syz_tun left promiscuous mode [ 1949.044026][ T413] device syz_tun entered promiscuous mode [ 1949.060350][ T417] fuse: Bad value for 'fd' [ 1949.062578][ T411] device syz_tun left promiscuous mode 12:20:20 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:20 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000003c1d", 0x24) [ 1949.086561][ T420] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x500]}, 0x10) 12:20:20 executing program 3 (fault-call:2 fault-nth:0): r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1949.247771][ T509] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1949.330063][ T531] device syz_tun entered promiscuous mode [ 1949.348516][ T528] device syz_tun left promiscuous mode [ 1950.162108][ T534] FAULT_INJECTION: forcing a failure. [ 1950.162108][ T534] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1950.175122][ T534] CPU: 0 PID: 534 Comm: syz-executor.3 Not tainted 5.2.0-next-20190718 #41 [ 1950.183714][ T534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1950.193892][ T534] Call Trace: [ 1950.197276][ T534] dump_stack+0x172/0x1f0 [ 1950.201622][ T534] should_fail.cold+0xa/0x15 [ 1950.206287][ T534] ? is_bpf_text_address+0xac/0x170 [ 1950.211474][ T534] ? fault_create_debugfs_attr+0x180/0x180 [ 1950.217303][ T534] ? is_bpf_text_address+0xac/0x170 [ 1950.222524][ T534] get_futex_key+0xc2b/0x1760 [ 1950.227206][ T534] ? unqueue_me_pi+0xc0/0xc0 [ 1950.231782][ T534] ? mark_lock+0xc0/0x11e0 [ 1950.236206][ T534] ? __kasan_check_read+0x11/0x20 [ 1950.241332][ T534] futex_wake+0xf9/0x4d0 [ 1950.245601][ T534] ? mark_lock+0xc0/0x11e0 [ 1950.250007][ T534] ? get_futex_key+0x1760/0x1760 [ 1950.255033][ T534] ? mark_lock+0xc0/0x11e0 [ 1950.259494][ T534] do_futex+0x358/0x1dc0 [ 1950.263741][ T534] ? __kasan_check_read+0x11/0x20 [ 1950.268751][ T534] ? __lock_acquire+0x1702/0x4c30 [ 1950.273785][ T534] ? exit_robust_list+0x2c0/0x2c0 [ 1950.278808][ T534] ? find_held_lock+0x35/0x130 [ 1950.283560][ T534] ? lock_downgrade+0x920/0x920 [ 1950.288443][ T534] mm_release+0x33d/0x490 [ 1950.292770][ T534] do_exit+0x44f/0x2ea0 [ 1950.296938][ T534] ? find_held_lock+0x35/0x130 [ 1950.301706][ T534] ? get_signal+0x392/0x2500 [ 1950.306291][ T534] ? mm_update_next_owner+0x640/0x640 [ 1950.311680][ T534] ? lock_downgrade+0x920/0x920 [ 1950.316544][ T534] ? _raw_spin_unlock_irq+0x28/0x90 [ 1950.321736][ T534] ? get_signal+0x392/0x2500 [ 1950.326309][ T534] ? _raw_spin_unlock_irq+0x28/0x90 [ 1950.331510][ T534] do_group_exit+0x135/0x360 [ 1950.336215][ T534] get_signal+0x47c/0x2500 [ 1950.340634][ T534] ? fsnotify_first_mark+0x210/0x210 [ 1950.345907][ T534] ? __fget+0x384/0x560 [ 1950.350259][ T534] do_signal+0x87/0x1700 [ 1950.354500][ T534] ? kick_process+0xef/0x180 [ 1950.359093][ T534] ? task_work_add+0x9c/0x120 [ 1950.363762][ T534] ? setup_sigcontext+0x7d0/0x7d0 [ 1950.368779][ T534] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1950.375031][ T534] ? fput_many+0x12c/0x1a0 [ 1950.379449][ T534] ? ksys_read+0x1cf/0x290 [ 1950.383857][ T534] ? exit_to_usermode_loop+0x43/0x380 [ 1950.389212][ T534] ? do_syscall_64+0x5a9/0x6a0 [ 1950.393973][ T534] ? exit_to_usermode_loop+0x43/0x380 [ 1950.399358][ T534] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1950.404654][ T534] ? trace_hardirqs_on+0x67/0x240 [ 1950.409685][ T534] exit_to_usermode_loop+0x286/0x380 [ 1950.414983][ T534] do_syscall_64+0x5a9/0x6a0 [ 1950.419594][ T534] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1950.425471][ T534] RIP: 0033:0x459819 [ 1950.429357][ T534] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1950.448995][ T534] RSP: 002b:00007fecc7485c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1950.457477][ T534] RAX: fffffffffffffe00 RBX: 00007fecc7485c90 RCX: 0000000000459819 [ 1950.465463][ T534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1950.473428][ T534] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1950.481403][ T534] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fecc74866d4 [ 1950.489375][ T534] R13: 00000000004c5994 R14: 00000000004dbb48 R15: 0000000000000004 12:20:23 executing program 2 (fault-call:4 fault-nth:0): syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:20:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x3, {0x7, 0x1f, 0x7, 0x0, 0xdc, 0x1, 0x6, 0x5b02}}, 0x50) 12:20:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x600]}, 0x10) 12:20:23 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:20:23 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000020", 0x24) [ 1951.742987][ T543] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1951.770913][ T545] device syz_tun entered promiscuous mode [ 1951.774728][ T547] fuse: Bad value for 'fd' [ 1951.811031][ T541] device syz_tun left promiscuous mode [ 1951.850319][ T573] FAULT_INJECTION: forcing a failure. 12:20:23 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000003a", 0x24) 12:20:23 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="620400bf26c69e6a793d7abadcc4fa55d52ffc3d73b9d7b20ca11d90eaf02ec22d75957c9a4c84ae2667411850f2f66aab", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) socket$isdn(0x22, 0x3, 0x23) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7f, 0x8000) [ 1951.850319][ T573] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.871363][ T573] CPU: 0 PID: 573 Comm: syz-executor.2 Not tainted 5.2.0-next-20190718 #41 [ 1951.879973][ T573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1951.890133][ T573] Call Trace: [ 1951.893466][ T573] dump_stack+0x172/0x1f0 [ 1951.897820][ T573] should_fail.cold+0xa/0x15 [ 1951.902444][ T573] ? fault_create_debugfs_attr+0x180/0x180 [ 1951.908275][ T573] ? ___might_sleep+0x163/0x280 [ 1951.913282][ T573] __should_failslab+0x121/0x190 [ 1951.918239][ T573] should_failslab+0x9/0x14 [ 1951.922757][ T573] kmem_cache_alloc_trace+0x2d3/0x790 [ 1951.928145][ T573] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1951.934484][ T573] fuse_dev_do_write+0x178d/0x2540 [ 1951.938980][ T655] fuse: Unknown parameter 'b' [ 1951.939606][ T573] ? __kasan_check_read+0x11/0x20 [ 1951.939626][ T573] ? mark_lock+0xc0/0x11e0 [ 1951.939650][ T573] ? fuse_dev_read+0x200/0x200 [ 1951.939667][ T573] ? __kasan_check_read+0x11/0x20 [ 1951.939683][ T573] ? __lock_acquire+0x1702/0x4c30 [ 1951.939712][ T573] ? aa_file_perm+0x40b/0xdd0 [ 1951.939734][ T573] ? find_held_lock+0x35/0x130 [ 1951.949514][ T573] ? aa_file_perm+0x40b/0xdd0 [ 1951.958671][ T573] ? lock_downgrade+0x920/0x920 [ 1951.958692][ T573] ? memset+0x32/0x40 [ 1951.958715][ T573] fuse_dev_write+0x15c/0x1f0 [ 1951.958732][ T573] ? fuse_dev_splice_write+0xae0/0xae0 [ 1951.958749][ T573] ? aa_file_perm+0x432/0xdd0 [ 1951.958763][ T573] ? kstrtouint+0x142/0x1a0 [ 1951.958784][ T573] ? aa_path_link+0x340/0x340 [ 1952.015677][ T573] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1952.021930][ T573] ? iov_iter_init+0xee/0x210 [ 1952.026625][ T573] new_sync_write+0x4d3/0x770 [ 1952.031316][ T573] ? new_sync_read+0x800/0x800 [ 1952.036171][ T573] ? common_file_perm+0x238/0x720 [ 1952.041214][ T573] ? __fget+0x384/0x560 [ 1952.045388][ T573] ? apparmor_file_permission+0x25/0x30 [ 1952.050947][ T573] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 12:20:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x79, 0x0, [0xc0010140], [0xc1]}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 1952.057204][ T573] ? security_file_permission+0x8f/0x380 [ 1952.062864][ T573] __vfs_write+0xe1/0x110 [ 1952.067208][ T573] vfs_write+0x268/0x5d0 [ 1952.071473][ T573] ksys_write+0x14f/0x290 [ 1952.075818][ T573] ? __ia32_sys_read+0xb0/0xb0 [ 1952.080605][ T573] ? do_syscall_64+0x26/0x6a0 [ 1952.085296][ T573] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1952.091377][ T573] ? do_syscall_64+0x26/0x6a0 [ 1952.096070][ T573] __x64_sys_write+0x73/0xb0 [ 1952.100676][ T573] do_syscall_64+0xfd/0x6a0 [ 1952.105197][ T573] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1952.112626][ T573] RIP: 0033:0x459819 [ 1952.116544][ T573] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1952.140008][ T573] RSP: 002b:00007f7a36012c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1952.150780][ T573] RAX: ffffffffffffffda RBX: 00007f7a36012c90 RCX: 0000000000459819 [ 1952.150790][ T573] RDX: 0000000000000021 RSI: 0000000020000000 RDI: 0000000000000004 [ 1952.150798][ T573] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1952.150806][ T573] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7a360136d4 [ 1952.150813][ T573] R13: 00000000004c90ad R14: 00000000004e0150 R15: 0000000000000005 [ 1952.170666][ T759] fuse: Bad value for 'fd' 12:20:23 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:23 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000001d3c", 0x24) 12:20:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x700]}, 0x10) 12:20:23 executing program 2 (fault-call:4 fault-nth:1): syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:20:23 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x680400) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000040)) lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() lstat(&(0x7f0000001700)='./file0/file1\x00', &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001b00)={0x0, 0x0}, &(0x7f0000001b40)=0xc) syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000180)='./file0/file0/file0\x00', 0xf21e, 0xa, &(0x7f0000001900)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="5ff2a4f5dd338a2c53353e87", 0xc, 0x9}, {&(0x7f00000012c0)="1ba3b85abfe03991ae0fd0e1ba4861ea24ab86139c1f2aa342043dd6b4ac8ec1ec17368ad7d779a78e873b2c1b2cb8763e2cd80ca739165f3ba1dfe174923be8bc2b50868c52dabb0eb5119e425320cec3e268d9b7e3cd638a00ab08ace555375e0d64ee79d5e1f1e43020e97f789673c4281a5de446e93ae83600875e8c7f6e0056e654ea1bc69d0fe7ac62fd", 0x8d, 0x5}, {&(0x7f0000001380)="f581174fbe80b23262ddac76027824de7b5805096a1c2f04de80e14d2e4ae02e7ad364283375a5c747", 0x29, 0x4}, {&(0x7f00000013c0)="8762a275cc911ebae0e1b0be73b2e45c8bbbcabb7907a25de643fe7d9bb9eff3da5135cd1e038cc08417ab7992d3467a41068c7db9f22fae858d4e88bfb20acf9bc3aaec725d74af2cb7309689c55320a76c4fc08bd53d040e33f6159893631ca1d8220f4620a443df650b75e19b82b55462e09dbd5296159f66d40f827a781557758953a6e9de8c7b3ef9b038601ef7309b5776", 0x94, 0x20}, {&(0x7f0000001480)="7ca9656e9f437f587091ae9e815a17ad4809fdff7cf0324885e98126555ca4a72625d50697c9dea7ca85203f5a13810ab1c08a5c27c443b9f32025ed7209a3ab287e7f9ade845b58e0b79cb627957dde31e5aa755daf4f9ea309459ef9e3b508744f7f96daf5a001a3e1cd58b0f1cc6516bb01e4bd3abe6d8bcb15245a6156f1fb8bf44168b035c3b1b25bbc3c3c65a1bbea152522d2230b0cf9aece6f958aa3100278ba80acb23df20f29a12e54f6be5a512be74a4715212245f361ce083ab0ba306aeb3c45da8f0abca1c1465d", 0xce, 0x20000000000}, {&(0x7f0000001580)="6dadfa8249af3381820f3c7691112d54f5a375920ac9edb605a4688db310219691bc291ccc1453f0bbded8692d0686624e0870c8c15ab755904584984285849646465b2c42472ee3d3e1d578237eb984b205aedfcc9bd07f33", 0x59, 0x9}, {&(0x7f0000001600)="acf9b27b42cfac5b384ddc37e2d2f8ca9163790e41cd861301366367420e5b04e964820b5ef48b42205f7f564f947fbf8c89bd346ca8de22d234c58014ddd7012b3f59d71ef1224b6ba61caa5b49a51aedc898e882a7694d25807659b76eb675e4153869b23fddc699666e2a2b3d3f3a11d82eafbcc3d5833e7c4c1ea9df28e3ba5755cc85d0", 0x86}, {&(0x7f0000001780)="3fdc25d5118d7ced9416bc25b5f7bfe23168a2e5c0c4f8f9f999c18a9dcb28d4011af1c4a6fcdb827afbc316c9f44b045d027a31c41ac97bf885a0681379256e9646be735ab355daa711634a2829b9dcc4675d3c66dd5aed1b71321ea7a889a628d925ac66a223e2b1992743b516e1d1509a516b82ef4e1548958b41986f9eed5e122838ac2b7b2fcb5268e934ae733f46f2f73aaf1a1049307870d5a6e79a7fedb287e5dd23", 0xa6, 0x3ff}, {&(0x7f0000001840)="1a6840b3de19d814ce03f8d8cc8e5fbca85c226b996c5828a3e3d6c8cde0ee143cc640da3ba18b2dcfe8ccbf5efab5104f6e129b3dcee79171c3700fc31e79c9e0487fafd11265c5382402d55741bfaa8309b012074698eae77a15d296c7472d9f7255007f37687e7778895825d5ebba71958d24de222566b4e40fbee45cc0d734ceb0e86159319feb84f2b543c27b313d1386a3a885bbd9", 0x98, 0x2480}], 0x800000, &(0x7f0000001b80)={[{@errors_remount='errors=remount-ro'}, {@nointegrity='nointegrity'}, {@nodiscard='nodiscard'}, {@resize='resize'}, {@nodiscard='nodiscard'}], [{@uid_lt={'uid<', r2}}, {@uid_gt={'uid>', r3}}, {@appraise='appraise'}, {@uid_eq={'uid', 0x3d, r4}}, {@dont_hash='dont_hash'}, {@dont_appraise='dont_appraise'}, {@euid_lt={'euid<', r5}}, {@dont_measure='dont_measure'}, {@appraise='appraise'}]}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x40400) [ 1952.378760][ T865] device syz_tun entered promiscuous mode 12:20:23 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000003f", 0x24) 12:20:23 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 1952.444097][ T863] device syz_tun left promiscuous mode 12:20:24 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000040", 0x24) [ 1952.526449][ T874] fuse: Bad value for 'fd' 12:20:24 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0xe) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:20:24 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1952.573631][ T896] validate_nla: 3 callbacks suppressed [ 1952.573642][ T896] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x2000]}, 0x10) 12:20:24 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000048", 0x24) 12:20:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='fuse.') mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="9c726f6f746d6f64653d30303030303030303030303030303030303034303020322c757365725f69643dd976fd08182c6b31c5330eb4282451f011761698feee421ccd6def93aab5a99402d007f4c393df425556d5e6dc3c0583dc30b3ffafb3e6dfce29b9e97c6e1241d11e2f27a109111538d294a79cc272d49122ef6613b3f9896dd23ce43e", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 1952.750654][ T988] device syz_tun entered promiscuous mode [ 1952.795049][ T987] device syz_tun left promiscuous mode 12:20:24 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x3f00]}, 0x10) [ 1952.852649][ T1000] fuse: Bad value for 'fd' [ 1952.857385][ T999] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:24 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0xf}, 0x21) 12:20:24 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000004c", 0x24) 12:20:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x90000, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 1953.012048][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1953.017930][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1953.027812][ T1114] device syz_tun entered promiscuous mode [ 1953.064479][ T1103] device syz_tun left promiscuous mode [ 1953.118792][ T1120] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x4000]}, 0x10) 12:20:24 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x20000021}, 0x21) [ 1953.160635][ T1124] fuse: Bad value for 'fd' [ 1953.282203][ T1230] device syz_tun entered promiscuous mode [ 1953.310905][ T1229] device syz_tun left promiscuous mode 12:20:25 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x223) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:20:25 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000006558", 0x24) 12:20:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="674741702e567aed11a5b0f6abc3cfda24d85fb91bf882f826c736b2964fe5eb2c3a4be96892a0df9a96de6e4390ab0651262b7aa4d19850a027d69f921fcba1374125d4ff3ec7d48abc5611931a17287b3d8f97f8599c267d4ef453fcd018f83deb8bca9d56f7edd70b94a4b127d3940aeb", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) fcntl$setpipe(r1, 0x407, 0x9) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x80) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) getsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000000), &(0x7f0000000240)=0x2d6c4776738d3d6a) 12:20:25 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x2}, 0x21) 12:20:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x4800]}, 0x10) [ 1953.629526][ T1241] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1953.652076][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1953.656575][ T1245] device syz_tun entered promiscuous mode [ 1953.657968][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1953.669745][ T1246] fuse: Unknown parameter 'gGAp.Vzí¥°ö«ÃÏÚ$Ø_¹ø‚ø&Ç6²–Oåë' [ 1953.692899][ T1242] device syz_tun left promiscuous mode 12:20:27 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000060", 0x24) 12:20:27 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x4}, 0x21) 12:20:27 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00aeba985c58fa67ed930f41f1e8937523d3c79c5d0e9c62d97a4991f578f1fde3562b26ff5880949725aec40a732208183df402e43b783ed9624130255896229a70fb827fec0c9d51c07a7850196e0fce4685ef597a3b38d3851ccfe667f4ab44bd1d4356"]) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x4c00]}, 0x10) 12:20:27 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0xe00) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1955.983531][ T1371] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1955.998038][ T1370] device syz_tun entered promiscuous mode [ 1956.018278][ T1369] device syz_tun left promiscuous mode [ 1956.033417][ T1374] fuse: Bad value for 'fd' 12:20:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000005865", 0x24) 12:20:27 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x5}, 0x21) 12:20:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x6000]}, 0x10) [ 1956.156143][ T1479] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000068", 0x24) 12:20:27 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) r1 = getgid() mount$fuse(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:27 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x6}, 0x21) [ 1956.325498][ T1496] device syz_tun entered promiscuous mode [ 1956.362212][ T1498] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1956.371114][ T1492] device syz_tun left promiscuous mode [ 1956.417674][ T1496] device syz_tun entered promiscuous mode [ 1956.437581][ T1496] device syz_tun left promiscuous mode 12:20:30 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:30 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000006c", 0x24) 12:20:30 executing program 4: syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x190) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x6800]}, 0x10) 12:20:30 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x4}, 0x21) 12:20:30 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x2302) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:20:30 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000074", 0x24) [ 1959.130409][ T1628] device syz_tun entered promiscuous mode [ 1959.135086][ T1627] fuse: Bad value for 'fd' [ 1959.139590][ T1630] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1959.158255][ T1624] device syz_tun left promiscuous mode 12:20:30 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0xf0}, 0x21) 12:20:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x6c00]}, 0x10) [ 1959.269569][ T1702] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:30 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000007a", 0x24) 12:20:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000180)=0x0, &(0x7f0000000280)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000640)=0xe8) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() fstat(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000007c0)=0x0, &(0x7f0000000800), &(0x7f0000000840)) r10 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) getresgid(&(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000009c0)={{}, {0x1, 0x6}, [{0x2, 0x2, r2}, {0x2, 0x0, r3}, {0x2, 0x2, r4}, {0x2, 0x4, r5}, {0x2, 0x6, r6}], {0x4, 0x4}, [{0x8, 0x2, r7}, {0x8, 0x2, r8}, {0x8, 0x0, r9}, {0x8, 0x2, r10}, {0x8, 0x2, r11}, {0x8, 0x6c67603e24a0253b, r12}], {0x10, 0x1}, {0x20, 0x4}}, 0x7c, 0x3) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:30 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x4000}, 0x21) [ 1959.446184][ T1747] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1959.471214][ T1749] device syz_tun entered promiscuous mode [ 1959.508688][ T1744] device syz_tun left promiscuous mode [ 1959.517538][ T1750] fuse: Bad value for 'fd' 12:20:33 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000081", 0x24) 12:20:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x7400]}, 0x10) 12:20:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getrandom(&(0x7f0000000000)=""/75, 0x4b, 0x3) prctl$PR_GET_FP_MODE(0x2e) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r2, 0x0, 0x3, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffff001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:33 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0xf000}, 0x21) 12:20:33 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x3f00) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1962.206918][ T1885] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1962.208513][ T1887] fuse: Bad value for 'fd' [ 1962.227571][ T1884] device syz_tun entered promiscuous mode [ 1962.249539][ T1883] device syz_tun left promiscuous mode 12:20:33 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x40000}, 0x21) 12:20:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00000000f0", 0x24) 12:20:33 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pipe2$9p(&(0x7f0000000040), 0x80800) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000001780), &(0x7f00000017c0)=0x8) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001880)={0x11, 0x55, &(0x7f0000001800)="942f0f9362fd967647bb923999ceb335b5e69515a141810766378cb667dce3fb16c2220d89320b3af48387cd2ae428e57c40ab52f199d3d81538bdf5ae50ef59e7451532dd5fee247c80448ab50291b6d30c42a162"}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x101, 0x7, &(0x7f00000015c0)=[{&(0x7f0000000280)="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", 0x1000, 0x7}, {&(0x7f0000001280)="bade120935230f227bdb960882231d", 0xf, 0x7}, {&(0x7f00000012c0)="f912c0cfb5260d5f59e5cf16ad9364498b6764bb70a1b1b8b29c0d5dec6e18980bbc5833cf42cd8a7126e94ae75da0ca0765bc83bbe263e173bc497867fa01d81e9ac319a495958ee906512fdb9a2ea233ec81e40f7f796da792ca94e0875c12b366e1290c1da710f186f6de0a80fb0f17812c08de06f1c2f5d9376b9162e8f83a2218e4dc92a42f3c3aff63e8529ca780fa6040fbf29c578c39230df02e1d5b07e2079a43f9c4fec94b4f9b9a3c224384", 0xb1}, {&(0x7f0000001380)="f416c28928a00a85e3e5eb976d4b45c987820bcc143f07460152a5d31cc1cc7aeabb7505e89d39d68d16b15d91832edbe746bbb06e0c1b6efe68fb4cfa9fdf6ad33d2232024d8b938fbd0feb65c368728c890cd220321c8d3fadc347a07e64f724e6c564bc72b7cd8f964fedabec4c691c5af414dfe604a3df2463b359b336116f0f2fe69934a88819d490cbdfbcf8472132ac0d2d05224e833243bd55b23d3ee35656c273b03e08f7c10f5cd6ca8a4f90511634e154f6c0a3b59ccc3c6bd3f76ea26a2f5f718b64eb1d5e3f3b43d5ca15fad6ebd7d21d39e89a074bbf1934", 0xdf, 0xffffffff}, {&(0x7f0000001480)="d8691ad40fab6ab3609b3bc07586005beed845ea501ad90667a7fae53d120206b55b0cd3816e8326a737e6bbfa92cdb0390f9c51cb2b3828ce15403c7a1c62e1129696b3aebb6079ddfbc6cddd9939100ff7d5d40ec9e9225a712dabd54e351fe56e6526319d8b2ec72cd9f1ab4d295cb5cb3469d6a3158f0339dc69e8d25bf422b81b0ddb3b7edb944be13b92bd62eea0b71dade86d140a855765dc2cc9125b41012fd74c12c2f1f08218", 0xab, 0xcf}, {&(0x7f0000001540)="effc78304679897bbe2717e21d3959501cae", 0x12, 0x7}, {&(0x7f0000001580)="fe17a3c46863c014886697", 0xb, 0x80000001}], 0x2, &(0x7f0000001680)={[{@inode32='inode32'}, {@grpquota='grpquota'}, {@prjquota='prjquota'}, {@lazytime='lazytime'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@dont_hash='dont_hash'}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@audit='audit'}, {@smackfsdef={'smackfsdef', 0x3d, 'eth1vmnet0%'}}, {@dont_appraise='dont_appraise'}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) ioctl$NBD_DISCONNECT(r0, 0xab08) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss={0x2, 0x646}, @sack_perm, @timestamp, @timestamp], 0x5) 12:20:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x7a00]}, 0x10) [ 1962.436281][ T2000] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:34 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYPTR64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000040", 0x24) 12:20:34 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0xf0ffff}, 0x21) [ 1962.648778][ T2048] device syz_tun entered promiscuous mode [ 1962.704849][ T2008] device syz_tun left promiscuous mode [ 1962.719586][ T2112] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x2, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000003", 0x24) 12:20:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x1000000]}, 0x10) [ 1962.844837][ T2125] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1962.864569][ T2123] fuse: Bad value for 'fd' [ 1962.951529][ T2155] device syz_tun entered promiscuous mode [ 1962.976296][ T2126] device syz_tun left promiscuous mode 12:20:34 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x4000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:20:34 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x40000000}, 0x21) 12:20:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000ffff", 0x24) 12:20:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000280)={[], 0xc7d9, 0x9, 0x80000001, 0x0, 0xb61, 0x110000, 0x10000, [], 0x26a}) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000180)={0x2, 0x0, &(0x7f00000005c0)="231e671c7f29627fc6025a44c207046069dbf2f2b116dc71e6ebe7723d97bc357c09d0d80fabee5c354d5c3a08d55588638fb16d5e57c13e7cc16b78db577fbe68272cd1f1a22e7364df7eb084e5d7464396c653a0fb8b61ddf64a3d9bda6a4a4af4c8622a6ce66734e7243b94c68ed5ae439860b170605848c563b44c468d41f2fd18dd038f8a1de1ea8b7a65735a9aef3ec9a1264e2ff44d408b83dbaa40e9670eb2c02ab0393a097a3bd2981455815995f636d714d1234f1bab3696425a62c75609c56610de3782557cc3ee08aecf40f7206f30031e9cd6152ddd5e", {0xffffffffffffff81, 0x1, 0x34363248, 0xd, 0x5, 0x10001, 0xf, 0x3c6}}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00490c9f44bf5ecb06ce865e7404eccae9909620c73358ce85000000a0876785b97f4d6dd30f406c405db5682571a1d16e9d809c60605ab55591d9d9cac643aca6ef2c235e7b3af32f98dd76ee551fc28e9f6a28406b19cded44f03d"]) accept4$rose(r0, &(0x7f0000000040)=@full={0xb, @dev, @netrom, 0x0, [@netrom, @default, @bcast, @rose, @null]}, &(0x7f0000000100)=0x40, 0x80000) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000440)={0x0, 0x3, @start={0xffff}}) 12:20:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x2000000]}, 0x10) [ 1963.111604][ T2237] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1963.170581][ T2243] fuse: Bad value for 'fd' 12:20:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1963.250490][ T2295] device syz_tun entered promiscuous mode [ 1963.265870][ T2245] device syz_tun left promiscuous mode [ 1963.300447][ T2342] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:37 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYPTR64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:37 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0xfffff000}, 0x21) 12:20:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:20:37 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@fwd={0xf}]}, {0x0, [0x2e, 0x6cd917b8719412a8, 0x2e, 0x5f, 0x30, 0x0, 0x5f]}}, &(0x7f0000000280)=""/243, 0x2d, 0xf3}, 0x20) 12:20:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x3000000]}, 0x10) 12:20:37 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x400000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1965.677142][ T2366] fuse: Bad value for 'fd' [ 1965.683615][ T2364] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1965.700478][ T2365] device syz_tun entered promiscuous mode 12:20:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1965.733018][ T2363] device syz_tun left promiscuous mode 12:20:37 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x4000000000000}, 0x21) 12:20:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x4000000]}, 0x10) 12:20:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) r2 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000000)={0x2, 0x2, 0x3, 0xffffffffffffffff, 0x80, 0x10000}) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:37 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYPTR64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1965.912573][ T2479] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1966.030861][ T2487] device syz_tun entered promiscuous mode [ 1966.052047][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1966.054424][ T2488] fuse: Bad value for 'fd' [ 1966.057902][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1966.066594][ T2485] device syz_tun left promiscuous mode [ 1966.132076][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1966.137905][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:20:37 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0xf0ffffffffffff}, 0x21) 12:20:37 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x14000, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000280)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000100)=0x63, 0x2) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1966.178617][ T2605] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x5000000]}, 0x10) 12:20:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1966.362024][ T2614] device syz_tun entered promiscuous mode [ 1966.373234][ T2616] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1966.380379][ T2611] device syz_tun left promiscuous mode [ 1966.394003][ T2613] fuse: Bad value for 'fd' 12:20:38 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x1000000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:20:38 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x4000000000000000}, 0x21) 12:20:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x6000000]}, 0x10) 12:20:38 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 1966.547369][ T2732] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1966.690855][ T2739] device syz_tun entered promiscuous mode [ 1966.696985][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1966.703316][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1966.733270][ T2735] device syz_tun left promiscuous mode [ 1966.743223][ T2740] fuse: Bad value for 'fd' [ 1966.752443][ T2745] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:40 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYRES64, @ANYPTR64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:40 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0xfffffffffffff000}, 0x21) 12:20:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:20:40 executing program 4: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000a80)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000b00)={0x0}, &(0x7f0000000b40)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000ac0)='fd/4\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x80) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000d00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)=@alg={0x128, 0x10, 0x200, 0x70bd26, 0x25dfdbfc, {{'sha1-ssse3\x00'}, [], [], 0x2000}, [{0x8, 0x1, 0x200}, {0x8, 0x1, 0x1000}, {0x8, 0x1, 0xfbf}, {0x8, 0x1, 0x1d}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x100}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x40) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffd, 0x40b2, 0x8, 0x100000000, 0x7fffffff, 0x2, 0x3, 0x100000001, 0x385, 0x40, 0x3a2, 0x9, 0xfffffffffffffc01, 0x38, 0x1, 0x2, 0x9, 0x3}, [{0x6474e551, 0x8, 0x0, 0x60000000000, 0xfffffffffffffbff, 0x3ff, 0x1, 0x80000001}, {0x1, 0x6, 0x1, 0x0, 0x4, 0x7fffffff, 0x2, 0x42}], "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", [[], [], [], [], [], []]}, 0x7af) write$P9_RWALK(r1, &(0x7f0000000200)={0x8b, 0x6f, 0x2, {0xa, [{0x84, 0x1, 0x2}, {0x40, 0x3, 0x5}, {0x4, 0x4, 0x4}, {0x40, 0x4, 0x6}, {0x0, 0x1, 0x4}, {0x5, 0x4, 0x7}, {0x91, 0x0, 0x7}, {0x0, 0x2}, {0x30, 0x7ff, 0x1}, {0x2, 0x1}]}}, 0x8b) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="003606ff010000"]) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x7000000]}, 0x10) 12:20:40 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0xe000000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:20:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1969.057034][ T2862] device syz_tun entered promiscuous mode [ 1969.062576][ T2863] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1969.092271][ T2860] device syz_tun left promiscuous mode 12:20:40 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x4}}, 0x21) 12:20:40 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f7570cb4e74912ff24aa1c7acde", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x20000000]}, 0x10) [ 1969.217994][ T2975] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:20:40 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0xf0}}, 0x21) [ 1969.408634][ T2984] device syz_tun entered promiscuous mode [ 1969.421400][ T2987] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1969.437806][ T2986] fuse: Bad value for 'fd' [ 1969.446729][ T2981] device syz_tun left promiscuous mode 12:20:43 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYRES64, @ANYPTR64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:20:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x3f000000]}, 0x10) 12:20:43 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x4000}}, 0x21) 12:20:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x104) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030303030306a751c04f230303032303030303034303030322c75736591aa59174d86ffb659af8965650d7a7467294cbae506197cb43c2c79ad0236137f7b04e87ffa0a000000000000956ae7c229bf26032c9100000000b6cdf1961f64ddcf40e24940e54f26293db2198c528793029a491fe1d3f8c0521d1345d29dd967ace071eec0ad44b42e75579b92d2", @ANYRESDEC=0x0, @ANYBLOB="2567726f75705f6964d2", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) getresgid(&(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f0000000740)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000880)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0/file0\x00', 0x6, 0x3, &(0x7f0000000540)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f00000003c0)="37a092efa9f6063981c2273b4b27efc83182148cd13d1041699b61a095d812f82659c6483d337df8da1175c8dc786661abfd4880ec26c4a4df422be054e0c8f4bc4aab66863d26de507aa6c505ba8549c0fb0ca7f1039e316612b34744094c918efbf16caafde91d054f7244d9269a4233843107ebbe729665f7f16b4cefd419df5d", 0x82, 0x9}, {&(0x7f0000000480)="a7355561a0ed27cf976d005da496e2b552a03d770b4c9faa743adc328a20c927b002e9b68b0ed5fc3fa54072efb1f64afa5d8419ecdbeb69fc1810de4bedc0f409afcb51665dea4b1ddf62f9160de02cbf26d43a2f7393e3de779e277a0a3c7a6c6d9afde5aa6bfb89a0ef836ad35a39d92babd647fc3cffd6c98f5189e8be38f96b78cd8d314198c00398518f4402f649a98a1a88ae018f642e2726fc99f25630bc09c95d11069f7a6bff", 0xab, 0x6}], 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="af030000", @ANYRESHEX=r2, @ANYBLOB="2c63726561746f723d5dfff8092c6e6f6465636f6d706f73652c6769643d", @ANYRESHEX=r3, @ANYBLOB=',hash,fsuuid=3fb8\x00w5c-ee}3-ecs2-3\x005u-e6700693,uid<', @ANYRESDEC=r4, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:43 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x23020000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1972.101806][ T3108] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1972.135803][ T3107] fuse: Bad value for 'fd' [ 1972.171030][ T3115] device syz_tun entered promiscuous mode 12:20:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1972.214670][ T3109] device syz_tun left promiscuous mode 12:20:43 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:43 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0xf000}}, 0x21) 12:20:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x40000000]}, 0x10) [ 1972.327983][ T3257] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1972.363218][ T3259] fuse: Bad value for 'fd' 12:20:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:20:43 executing program 4: r0 = getpgrp(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 1972.557523][ T3391] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1972.561718][ T3390] device syz_tun entered promiscuous mode [ 1972.615741][ T3388] device syz_tun left promiscuous mode [ 1972.653888][ T3394] fuse: Bad value for 'fd' 12:20:46 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYRES64, @ANYPTR64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:46 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x40000}}, 0x21) 12:20:46 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:20:46 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) lstat(&(0x7f0000001300)='./file0/file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0/file0\x00', 0x6, 0x3, &(0x7f0000001280)=[{&(0x7f0000000100)="6ffcee904f976d451a266fcf86d6bbfa56411de9e3b543dccdbcda47c1d0c23198e131ed477906ec69358888295abd967b62995d1e7e9efa", 0x38}, {&(0x7f0000000180)="d06a9a380fde92f85f43dfef728a35607be0b72650ec28ac4280ddc7e235ba84e62d76f8ac870e92dfa1c41118be26c980b6578a86", 0x35, 0x100000000}, {&(0x7f0000000280)="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", 0x1000, 0x8}], 0xc, &(0x7f00000013c0)={[{@nouser_xattr='nouser_xattr'}, {@errors_ro_remount='errors=ro-remount'}, {@noacl='noacl'}, {@data_journal='data=journal'}, {@errors_ro_remount='errors=ro-remount'}], [{@appraise_type='appraise_type=imasig'}, {@uid_eq={'uid', 0x3d, r0}}, {@subj_user={'subj_user', 0x3d, '#%em0posix_acl_access-self'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, '/dev/fuse\x00'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, '^^'}}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x48000000]}, 0x10) 12:20:46 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x3f000000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1975.266008][ T3508] device syz_tun entered promiscuous mode [ 1975.275542][ T3510] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1975.285616][ T3504] fuse: Bad value for 'fd' [ 1975.298204][ T3506] device syz_tun left promiscuous mode 12:20:46 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0xf6}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:46 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:20:46 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0xf0ffff}}, 0x21) 12:20:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x4c000000]}, 0x10) 12:20:47 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) syz_open_procfs(r0, &(0x7f0000000080)='moY\xea\xcf\x00*\b(\xad') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = getpgrp(0x0) sched_getattr(r2, &(0x7f0000000000), 0x30, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 1975.514217][ T3629] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:47 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0xf6}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1975.670542][ T3635] device syz_tun entered promiscuous mode [ 1975.705882][ T3633] device syz_tun left promiscuous mode 12:20:47 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x40000000}}, 0x21) 12:20:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1975.768068][ T3678] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x60000000]}, 0x10) 12:20:47 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x100000, &(0x7f0000000440)=ANY=[@ANYBLOB="b7d3805023a9f779d7107e19c046718da79e6b06a5dd9d30050bc4205f0ae2accd7c6d8d7287bded2f2ce9f5dc2283206d7e93fd7a027977d50fd36aaf00dc1f9bca4b893194", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',smackfsroot=rootmode,permit_directio,\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=""/172, 0xac) [ 1975.994513][ T3762] device syz_tun entered promiscuous mode [ 1976.001227][ T3761] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1976.010736][ T3760] device syz_tun left promiscuous mode 12:20:47 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x40000000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:20:47 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0xfffff000}}, 0x21) 12:20:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:20:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x68000000]}, 0x10) [ 1976.198933][ T3873] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:20:47 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 1976.412510][ T3886] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1976.448750][ T3887] device syz_tun entered promiscuous mode [ 1976.454828][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1976.460882][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1976.482665][ T3882] device syz_tun left promiscuous mode [ 1976.490295][ T3888] fuse: Bad value for 'fd' [ 1976.527046][ T3887] device syz_tun entered promiscuous mode [ 1976.551181][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1976.557493][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1976.575518][ T3887] device syz_tun left promiscuous mode 12:20:50 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0xf6}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:50 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x4000000000000}}, 0x21) 12:20:50 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:20:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x3, 0x1, &(0x7f0000000000)=""/6, &(0x7f0000000040), &(0x7f0000000280)=""/191, 0x1f004}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x6c000000]}, 0x10) 12:20:50 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0xfeffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1978.752086][ T4002] device syz_tun entered promiscuous mode [ 1978.759245][ T3998] device syz_tun left promiscuous mode [ 1978.799312][ T4005] fuse: Bad value for 'fd' [ 1978.807278][ T4004] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:50 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0xf0ffffffffffff}}, 0x21) 12:20:50 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1978.855790][ T4002] device syz_tun entered promiscuous mode [ 1978.872340][ T4002] device syz_tun left promiscuous mode 12:20:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0/file0', [{0x20, 'fuse.'}, {0x20, '$\xa9#wlan1$wlan1['}, {0x20, '.'}, {0x20, 'fuse.'}], 0xa, "452b5bf6c8113363ee2af7ab56c1cd90b21fd045e86b0c95ea56c1dc3b17d5b2f59a04eb66a7fd4d2ffa5ded730fef9b38ce0bd70bd78c0cba0c9612aaff204f92755a4ee7cf4920ebdb7feb8b473655cbebd07c71e67431f79022c7dc3d3f3e07f1ef84bc5dd058acd937c51e871701dde8e97548492f70b940302ff6e23a54c13a57e44e73f2e8eeb6e78b73a5a3e3f74545f3239e113bd7c6cda75d3adae78b2639a29ea5240e01fb6e79d1c517cd987025be7bb7b53c4380b0d39ff7dbc67f7f73b53e19945feeb33179c79c13876b7184195b0a5f0075ecb27256f5fa697031c831cebb75a3cb"}, 0x118) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303000040000303030303030303030303034303030322c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x74000000]}, 0x10) [ 1978.979415][ T4115] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:50 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1979.078885][ T4120] fuse: Bad value for 'fd' 12:20:50 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x4000000000000000}}, 0x21) [ 1979.160535][ T4177] device syz_tun entered promiscuous mode [ 1979.169966][ T4193] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1979.178391][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1979.178458][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1979.193228][ T4119] device syz_tun left promiscuous mode [ 1979.252117][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1979.258010][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:20:53 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x3f}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:53 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) 12:20:53 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:20:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x7a000000]}, 0x10) 12:20:53 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0xfffffffffffff000}}, 0x21) 12:20:53 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0xfffffffe) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:20:53 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x4}}, 0x21) [ 1981.863476][ T4246] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1981.883915][ T4245] fuse: Bad value for 'fd' [ 1981.889090][ T4248] device syz_tun entered promiscuous mode [ 1981.904558][ T4243] device syz_tun left promiscuous mode 12:20:53 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:20:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@max_read={'max_read', 0x3d, 0x101}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x100000000000000]}, 0x10) [ 1982.039359][ T4358] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:53 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1982.143386][ T4362] fuse: Bad value for 'fd' 12:20:53 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0xf0}}, 0x21) [ 1982.190303][ T4365] device syz_tun entered promiscuous mode [ 1982.206543][ T4364] device syz_tun left promiscuous mode [ 1982.238476][ T4430] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:56 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x3f}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x200000000000000]}, 0x10) 12:20:56 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x4000}}, 0x21) 12:20:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21001004}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=@get={0x108, 0x13, 0x505, 0x7, 0x25dfdbfd, {{'aegis256-generic\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x6}, {0x8}, {0x8, 0x1, 0x10000}]}, 0x108}}, 0x10) 12:20:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:20:56 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x7ffffffff000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1984.961214][ T4485] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1985.002697][ T4490] device syz_tun entered promiscuous mode [ 1985.016694][ T4480] device syz_tun left promiscuous mode [ 1985.021758][ T4489] fuse: Bad value for 'fd' 12:20:56 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0xf000}}, 0x21) 12:20:56 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x3f}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1985.110635][ T4527] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x300000000000000]}, 0x10) 12:20:56 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c04"]) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:20:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000ffff", 0x24) 12:20:56 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB, @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x3f}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:56 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x40000}}, 0x21) [ 1985.357785][ T4613] device syz_tun entered promiscuous mode [ 1985.365928][ T4614] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1985.382363][ T4610] device syz_tun left promiscuous mode [ 1985.409543][ T4616] fuse: Bad value for 'fd' 12:20:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000ffff", 0x24) 12:20:56 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB, @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x3f}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:20:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x400000000000000]}, 0x10) [ 1985.610355][ T4729] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1985.716904][ T4735] device syz_tun entered promiscuous mode [ 1985.737641][ T4734] device syz_tun left promiscuous mode 12:20:57 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x40000000000000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:20:57 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0xf0ffff}}, 0x21) 12:20:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000280)=0x2, &(0x7f00000002c0)=0x4) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0x0, 0x3}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000015c0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f00000016c0)=0xe8) sendmmsg$inet6(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000300)="6fb62e979e4ce82dba328e02a52fad5ee5cefcc2d3d99ed6e8ad80409dc9f8bb8753ad992544e950e337359ab555c53cf87a7873af7eeccd09e0319e3fc4f75d20af6bb102ab59a6f4f1e5697b8c34e29dcf0411dc9d3beb8682a1f93a45b554c6695b1e9243eedd2f92d520205ab46c6a407cb2efe16188c0c9d6c5ae5ea5cb05b248e5fed401e9103d458f327e461cd8d73baf1c905bd26f7c5f3f86c81aa3b751126453dac9366082604921eb0332229c62286134c4dbd55fce6cb3dcb863515729e96a421787741027570a0ae77900737f717c249b2cf6abd9a021566853b591142694b26048e9219edd5a19e5d6d7f9c92f2218e8c7b73810dc31d3a990bb923651f26bab2c10cd61141ba8ef50cd8683c707c40b64e46f6ed28356034c55c0957b42468fdcf07c0c6ef3ce43bf579bdb180ba95e455a4237ab8668c81c31f2e4e9a577afba887f84fd57a42ab8199b368d9603c2bcadf12c9d19b78c43bcc7045e359c5f07af95c965fc131aeb8cb384ced05b9a8a6f9f023569a7fe2ee63a7d525ad7d4a95cf9a244dda606db400c0c1b18c7f433b1cc61dbfe6972e0a7e496d893f3c3e010cfb65651f55fd81591b8fb5c68f828a79278c3533893761d216c73440189811bb0b76a3543c996f941bcf800edac5780d44848b0b2d3cf1977c004f543bd8b7e7b250ba81a0e9917876f95a1e443998848670bf501f44ae3346f2d778c08d3632d5bcaceb8e7c17a9d0c8ae3bd81ebfbbcfd343677214bce611abeedeb7187cdcb51940ce029590cba1aeff83bbcbe93df213fc7560098a58f78ae0daec284195fad3eadb9e9806bf7be16f232e2580d9b9fbe73d6ac996e4832d4da7f307cee3bf4d2cdc6157112b88ad737d47248b42fd5662ff5cea23e3a4daa12baab7dc1a539b88a2ee3f6a95fae2cd047a4de898e97e208d404278babbe0ec7716ee8259736dc68334c10afabf57375cfde4a62b2c9f09b064a264170b04b3e4a4528bb7cb2981e08a5feb799d45c55a68a494bf27666c8db0ecf494126bacc01d7bd94c6637bc6f6cfaba65527dc9451162c08debaacd3c3bdc6ea2aecc2706a1aa31ce99189f6f93316e7465cd1623c67dd32329a0ea6871c3919a48777ccfa45f6fb2314073f1ef021be4ed296e389176732a66c73ea7433deeb21e1aea15883a5e032bd7c59ad2dd8916fbf9bc7f6767abd293cdf11574aa413a248b0819e5ef3256eafbb6663277a20f20f3a98e5e315ec5d0e7728d0126a32a834cc1ec6b162c4c19ec93572b5263d1a525854700006c0f951c020534b15e98d4853a480022d5d0d8cef86338d1dc2c13955118a2d1bda51344f93f57708d8b40a2b0fd5d68ddf2b18c504b6f2d7dac63e81a6d9d4b4c7beb21b3f1d368b3834ec2f33294fe742ee36540dcfb64fdb555d3e82c1358989f6a162e539d6778f3d2dbacf583126fcbe340ba1339bd358a325482a6892c23594ace5c28a70513853baa1d3ecbe838eea9ccf51701d167ad59c87647851c5ca446cc4ba12ee0a997e53c8daa01496e358b2158ef90e4a665bb68292e5f20ced473db27d4df7110d019d3727cfc9daa718f30a97f819c441202c2c6e03895aaf23a2e63288aef6db3bb0fc250a6cb0e13df11a57512a1f254c982c08da844442e5016620360b5bb6b5c8600716f519656e37ff790ad4b60da7a43b8587d80fc8fccbffc532cdfb65f59613d442071c57ce230216a96689c0628b41ff821d8bbcb59247bbd35830112770513b5257965901763d4a2314e0eae661bc76d707d975d9d03e2911f741fa9a6425aff0aa5a20c0d20a95314a862385b1a289aea294d9c5afd012ec59dd4308ef64936f904e3fe82dcaee678827eb0caf10475e350975055065aa603f6758a09069883c35e68b2ec033bb89be955fc15be719f0cd1d749d0485d84bc0f975531d26ecad880ff57fd134acb164de5769d300738eadfc0c41269a92b4313268c997f827b3f9857dc32ae10523aa6d45add294863d729f574db0dc8f8b30164006fa3a858c806476ff625a134d0e9dca765190577d91b243a24d4956c3aee859555825d9e47afe7d77b83263edadeded752f2ff8b857f37965464cd228149932f52faa07b0e5e24c5a7ec7ba70f9964b6480c4c13c58188faac197909539fd6d323a063c790565e602c85772b62eb90334ef76afdd0c84ac551066ff0c39223a2db0c078603b82bff18bb38604c333a3828a953d6724580cf1036de725f2c15cd73be33a974577f7ab5a5d3561af1bbdb5df122abec5bfdc2d91a56c91014ed38d7c2a3f4b17cadba8a9a6b8741f189c9a9c488f7f70bea4a26593bf1c029c32120ba7ec31123ce7a911780bb0caab070550fc717978c4c9e988e4f4f32d43ec9875ac359bd355f709633ed59dd69771f6898d1f78986eacb4b2dfa80a5e1b9e68ad7860215838cb37ade5416f88f0088582c629623e2a21205deaba12e388299e725539656939306b809d9dfd4839e5ca2237858cf527c84dc19efec6cbb04c13c588dbb655be86c7a93ba1644c46a5126ec08d1588cd62b2018e893fb194af9947c4b9b6fa6353d05726106696fa85c66eb04295ecf83752394686df35d45b14d3c6e895fe7d59832e4e91fb05dca8be93b2bb4270bb51c8ea836f2ca3aab522db8f02d519e57faf3827d6b71824d3843005d9e2dff0908b78bb93125262218bfe2fb820cdafa6d16c53fa4744eea9e2225205213b8741370ebcd84b17224c976fd938a76004f3891c436eb2888c0447808f9d03b847f2fc8f3c8a96964bea8e1d753ba8878eee7ee85e910ce9b685726821070d1d647af2d23f9a73a1f1b9a07ea97923e7bcee4c01630e647f2835fb33f892ab04c186e1470f29ce138840e005a8c306f16c262aa8d4ec0c6396269da41c066d699961d410fffe504da59cfd3747a4081305441ae4657b372d9f0adec8407d11aa74c9991c2a4f24ffc9efb471766127783953b51af3b780768039dbd9950240ad8e281b1abfe4caf9730fe2c4d02bc0a756bd1a1f5c399de6a6dea5988a6d0e59c53a901637340fda53518444a86614649fe21b3effc05646f5e4ac213c97dc78d9a0aa3f5478ed09a1c5e5c55cea4a9933329b95441d8766d4d82caa9a97fe663d32842f89d56f005c198072c0dab4cd93f09ba348b1a9af33e587d7acf5ab662b305411a77b93a91cc990195553194a050d8b6addef651fa9f70a9cf023f2e7b1a57631f6563ba86cc0aba768936501fccaea201dadff65847fc96d24205b749e20d80a50df4a2802fed415053d5ea534d00eb9526f8741552b1ec361aae3333526a2059f775fbf563d7c3302a5e74adbdf4937ba28975de49412ebf603574e4086145418b98230c294fe64b44c58ff3355d156bc2430119e857da252e5b48d0908bfa8a99ceb329540256a52416772ac9692b6269ecb0a5f1ac035873e520d9cf21b62c5dff62ba10ab87209d1955ad25dcff9d0507ec9b15f5997819f5a05eafb1d1f0471c1311cf7b3bbac6fb0e3e6ec6aac0540ee94d4e049864ba2baa55d1e6857365b030cd0bfe4b690cdc25a0dfd9da70cefc08152ffebe31e778ea08c3c1c47422807876c4166e3d49783f7db3bc2baa0a8dfc8adb4413a446b4cadf3f85a26abb3434a50139c3fa9cda7ea631c09379b5dc901ad7467f61d135bc21f27a24e53c51179fbf5aac83d84929f218127051303f687f5527074c5aeaaa8d0bc265960883b1f9ec499baaefcf4c3756a2fe840241d19575f391b6a21b5f1600766d1550c71d6ad9bbdc4475af9bad224ed2424e0ca8a3c740866e863ebdb3b45b3bc054a9d94f9138b3796aeb68b60520c0f19455577647de34d744a7e2482ed778edd9b49f1d9942429c34146b1c3041b7959a257680fc2903e28bbc8761e7603a2e0151b41e55825f2ed60075a87795d68178ca1f9f17de1204e6c469cfbb83cf120f9f9614738c548cd6910c2d328d26065c98edc6098eb007ad3fec0295f6a4b8f0fa93be22d260115f939e09d8f9ba2d755627730d7eb49345434d31ab72eb0b32e07e5ca3e8ebc49365d60d0ab91803db8e5ba7005929beb2f6c434598b31d5c4fac6348a1fad9082bafa673badd43065feec09e6832beda0a7192e44e7480c78b4d1f172b753e59c9c7eac26fc1b841dc4dc702cb5f1e6f2a8e2ee0752a8c9b83a021c8b9a80b0bcfadc7bb857c6ee49ca882290cfe823aeefdf61275a624c99c76170b63e29899cc4ab279544333b30dace7765636760e77ce50ba82adc41644d5eda8352ce2808f2d750cb02c2a40ac1f7a5ba68dac30406da34ca2db22470eb84303aaefeaf2e4c718f9cbb10d419fc3aac1a0d046e7286ffabdf047d7d126fbabd3145398702ab6e5ad940c708c7da37d1c2cb472a4d09e96fe05e7d1fdda613336148e7b17f7af41d0b75f3aa073b059e4b622ad33d8d7e99decf2d3a8444051fcd7e867326e26477e075253c63c17591789dc3f4555d8a39fcde188f74aaa3ed43ba7dc8b82f4d5afed850fde908cfb947e229351b58be71164bd157d525548bdac939ca201caafb0087b3e90920b9573392e6db9b6777e83e2deddf620bc4647c2c6ad7e2fb17261425ee649e6b6cd77457e4cb94fbeabbadf26983f24e45983331b7ed10732a175a7a6d2a5e0cf1262b19c14456c6b69bbc06d3274de40198de7dd245be6cccef558b2f5689c851dc1e6f7633571084905715a8ea98a909c3ee5c993872ed932ffd96aa079298e0b6d63537b5338a1d55bb036ed85a7bf89d6411ea2d3ab2a25105c6eff5e9fd353b01735dce85d93abfa0da8803499d4f792a9fef017439aab11704c589d3721a1e9e7d8623a312e50a7e953e2627078f9873d8bf2387e3575333b6fb8dd59c1db16bf85dc30bf560e8cdd9d393ee5765739223b6bcaae165b92a2e5fbce630cc64d4f477ecb0e4510486325d78d3cf554366e133699685dea396126e53de5e15baf7a81a1b7f0c295c1d6c225729605cdf9ed83d8158139801a7b9867758dece625e2528ba95f3612169f344155450198cb0abca7e4f23326ee372e52cf1d6169268c69171358dddf449c7c7b92deb49180a37e91308023829e49a40d9c567207f3755bd80b567f93b4ac9d81e54f1737419a45d40b80aeae8688da7799a5221b2f64ee4ee2414f77c8eb7fb50d17e2d6fd9f0228c1af758d76ab1bea1ff844969862f0e618863e589c59471e7e99e3f4b63c7f488df116dce4b359e06006ed94253bb02fc2d715347b1a0d6d923f8cf8efa43b9cd3e00127c6eb183eacef3f5b0d5cd06f43a298b44885768d3f0fb4089d36b67aedf256c3189bb6ec14a5950cde12ad588c710cfdb71ae91d2fe723b59656560c24abc5718247e6a0b6fe919a4c1c80d58da1694be5d79116b9cbd6a993b87ef48c730fe61a91dec4d361da75d2f978755e5b71b709cd1525738b64a92ced39e847c4cb3e21a283c66248ac2cd6ffef38e0ee2bdd62c4e1e43280b0f53a0ff32de03df7f43a5a7e4361b56179e9ddaf8b4076ea696ef3bb4f55d9bfb0020d894935ae1045cf7ae1e7529234a3bdf4033899c9f87bfed139c575b095837b62f67715f1b83e3107f9c1480da450570ab8d3812ec6728c1ba0df881f90c4d644de84dbedfd2590e9196c0c66923d10258123f9678bfb356f6c4dd881e7d1050c4ce7b3de4da92494dd14c461b19df07598f1ac1c43fdad6b7d195c8c9f1d4a6904e6d7c1e73f3827d2c776f0c239751c3387cc7bba524f208024852d56cbbd", 0x1000}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000001300)="2d529a365c03f4f5e8a907512c80bc4423396dc3e859447fc2498e49b4b429f32be4d0bd7281ea4caff07d7bbcbbdac54511f9107fbda38c4ac5bf749464f8f2cb7a2b3115ab58654684e375140f0c1650cfec541fe19578b5b7f146f6787f7a740593811e88079ba709a4dbb9c62f6b0dbce80a3b441ce6218c31f8ed0b24d7efc294f67abb17085c594574b5ba056d103aaceca74f130857c15a7bcaeaa4957fe61956370368368486592c", 0xac}, {&(0x7f00000013c0)="7353f341667c2e31df15c6a73d6ed62fc528877d801b0ad87dc4499c827687a3435d29479d6886af0f71427f544def6d413482525dd2d7bfba7252062bfd2264eadec1f3e358013181832e4c694bb41fa6208c14a05cace50b0a74d2aa11caccf467138a65f3767369d42fd17d51e9018461ded9769e383e92e50c956027e96ea66e4f9ba0cf573497b21fba738224b5fe0e7a3493d9221d32721dda0931971ca841e999d0f4a68fcfe75370cb21345b37028b3fc96db5937cdab5ceea6a1171ef8d984307581a934f4b238ac18557e8c04c1f89774440", 0xd7}, {&(0x7f00000014c0)="d4c3ddc2c94c167ba0b9aadc9441a5dbc6c46786001fef5c2083dea438c09ebe2e37f7eef476d5290669de7a36c7f2012915320b", 0x34}], 0x5, &(0x7f0000002780)=[@hopopts={{0x30, 0x29, 0x36, {0x29, 0x2, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0x6, [0x3]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r2}}}, @hopopts={{0xc8, 0x29, 0x36, {0x7f, 0x15, [], [@generic={0x80, 0x94, "e26333183aa9799efbe93a3f6bb274e25845e813941e7fccc3c5be4aa6547cb1ef12366f1916e4f530fda3f96a75549b52749d43d1d669fa4d03b51c66af3726535993eeffa697b4bbcadc162b4449fbdc1ff6d3e89c7779eea49d4cdd797e706f4e2723b13456c569ff829f94059cd45e55b68843674340c99e467c601c2dd246300834e7cc106cf4495741bbbc1891a7d2ce56"}, @jumbo={0xc2, 0x4, 0x7ff}, @hao={0xc9, 0x10, @loopback}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x138}}, {{&(0x7f0000001700)={0xa, 0x4e22, 0xee61, @empty, 0x6}, 0x1c, &(0x7f0000002ec0)=[{&(0x7f00000028c0)="8ce3c3754b8bd9ffd9349b54dc2ec54fcc3efbe0ab26b2f1a476f061e945bb8d2d41f87d620a6cff36a2379561a0e7f9a3f6b9a257e64ce8b2f90ba1210f1eba8f0991acbc7a2a1838d01a28da0cc85bed12637e3ef1b76ec23a7d5fc2e3af0f9e2af5ad6ec3a38fc14c1713adb7e789ff034de40e2ed48936fb5cfbc55d5453158f36cc9e7452599747b74f693b0cd0c43bf4b63fd40ab00c8765dca6e320", 0x9f}, {&(0x7f0000002980)="41126c475270a74b6bf6864d62da5c49e6ec6061431a625ac9266c0e3a73ec70fe250dbcda1a62fa3c206b315e2ba806d9092a52193e2d47fd7bee5d64fd012b77c675e504e1dc9b8a5d0dd1ca19fbfe12e25753b68b2b239adf3fe15efc821ec4e0a2fbd01c9286678b27e1fba1bf155a08b610320dd49c115e1e294441ef85e9d875edcc", 0x85}, {&(0x7f0000002a40)="dd7761093417aeb01f9cb523a92a2e6d9a2689d77511ff0cd434d81ed94e11c82c178ab3de1973c910019f99c72cbc9fa123163a16736053027229d23ce8ea6e69bdad3fd5441b743ded111738eb4c8cc214652774c4ed6958cbfb715a7468ee1b94a62dfa1c7e45", 0x68}, {&(0x7f0000002ac0)="a1e67a36514b94529ca1a1b2286e0cf0e94da9abf5c2a5", 0x17}, {&(0x7f0000002b00)="0204a36e55a78ac61e336c09b69cdbca14ca6e7f55067645384a60fec390e162d6c6600d42f6e325d56766af58871a69857f0199c709d0eacef9f82314a632a75fda21214baf115d7ecf8039d63b86503b88492535948c", 0x57}, {&(0x7f0000002b80)="2aa63973457d325bd8d44c23093e11e530cce4eb430fcde7ef1d8ff082209f021df4521ada41d6e8c1543f0c7076f74df441540a7879f3602352dfd66699fedaa49c0a94f8c150ce86943cb5aa8dd5f517972552df526afc373f5b8d7898a06058f37e51dc89e2b25c34ae98dcc4e15fdbd0520268cc038513f19ff87e176e8e842124b54d2018bba70cafb1485a0d6d738f3ca3c4e7892510f2d8fb41ba1f4b517926a01bf78eb416a6acfda85710e329558488f768f52dfa51dd184b1a886b4b80b76e8465c91717538e84db007c34a65bc421e5357865fc2cabb6493dbd1c1fb5199494ea2ec073b7d99b1481f6555ed5caf7c7", 0xf5}, {&(0x7f0000002c80)="1b348d92018204c93b77c0249e60ac856f368697d8a60cd6bf511247aeb86aa25afee209fe24a10c225137154a6eb7d4c0f848e109c04ee60099e2b07ed842016087ca2511525292d7514f26d59174f17206aa328df2c5227583dcecf2f5446f9267373786c71f5b5ca2be074d80117f573ff56bc0866c3d72b711a7961e79689b34aa9b646a7c4a3c53315c37807ab3a5b0a7c3a1a946dc28aaabfb2a5e202490dbe5ce8b966cd59a8a1aef82de5b5336129172c26e77beed749060b78f58e2b788d07f3a91417f4de702c35e3b83696ae762f4503666142e5fe5dfe24952336fe34effdf", 0xe5}, {&(0x7f0000002d80)="503b01f11b02b4be827c444d9dc3740f68b308b535369d562e80a8c2e9bd2dec17031d244fc9e2a85371db185920b671d3f2149beeb22b1b05c43cfddd11f16dd582e2f4aa847ecaaf9cf5c52fd38c07bc7ad9527fcfedb96d880219ccd8b9460a15401558deb26422ac", 0x6a}, {&(0x7f0000002e00)="9022d3cbae8cd576101abe17a79a37dd09e8f0c8aff7216a25501c44de8a417697ad5028408d02161b67019de630778b5f888a31c5d1ebe96c073abcdb411a115bb7708c915da9d62ae09e0684860e5d9f84ea78333ea4bd7b2ca7b9cc908f5b608c836dbfdcfa42eddb9293919f0a0b63cfd0b16bc66dea9a41b4176521ac431bf0", 0x82}], 0x9, &(0x7f0000002f80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7fff00}}], 0x18}}, {{&(0x7f0000002fc0)={0xa, 0x4e20, 0x100000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xd195}, 0x1c, &(0x7f0000003400)=[{&(0x7f0000003000)="24adc4eab3fcdb7d5019faa156419b8b148c45f6dcf930892632e18b02f18b609801b8c9436e934918fd594698c899a4c82a23ea7af75b523e03ecf0abbcd50e6d3cad8f60704723169bc22d171bd50d07f45dc3", 0x54}, {&(0x7f0000003080)="3f375e87595e4a8cd22b36239589f49d3f73dde9e0a742dbf7a5d9d4c7ab1a26e7896517a4cfa26056d870cdef28f9e6c83a38d9468923147550c32c6d68c28700526d63ee8fc2dbb7323b4b1c53a4b1b7140022c2f96e551f319901ebbf0ef10316567bbce8252cc62a7a536d32d289fc5f9078a14187c3135c8c6302dde9c1008616c0652d7081fc21ec0b14664702cd818a529cee94e14e3f91201f94d424ed202ec6c25866157c61a534f95ed743", 0xb0}, {&(0x7f0000003140)="7f7bfc3a19ef0bb305a7a13ccd5ab8e25b79ee3e445fe95010af61c45c25da5d99f5b962d76a43e253eb3926bd92286866c396d3ca8ac0cadee26cf73ba8f00277fc585ec58a44a3da03bee019090dd3c8af441b39f95cd1d605163e73c9985714f92d505e28c1dd613e9a4e319a1c84cf56b52a24cfa22a579f774710ec165cf11e604a7bb2d6a75e865cb0fbff9412f120519e632ace2e75909014f96283e28f36ba3e4fb02e43550933fb3fe8941de8138aa865768a56ea1e2f9d993279ae04cce429b32edd45e2550a19020188bf1903d20658aefdc9939ebfb82adc12e1ce31f1becd2bd34bcdaa1bebce102a210e3d1521", 0xf4}, {&(0x7f0000003240)}, {&(0x7f0000003280)="d96065b44980ba492f17430fbe4e80c78def774dd99ec44f2d680087d9a6f4babe075d799ed3d278c98e28b0f04a11a70a6ba43d319a22832b0b770a6b3ee64d2b58bb55ed152642be22b2916366f2a494c76fc1b0ad113c85e6b2e938098e8e00995e692207741ff1e0a74d86a2c8b3ff47c89afb79e317eab9b0f72979a7a4ad2d974a9875cb671f4eceecf9c515d296d39a4eef034c9cda3559e9ef8337bff7a3d4129a573f093c27ab6b1e2bf24329415331c10b3ced8146117ae751d8defed13ab3c67efe", 0xc7}, {&(0x7f0000003380)="a00b505e1e9639558522989052d36e44808b9fab340a4ef1e13c396106a226e77ca9722937fb6047b97d4a76d05ef3cd7600661e67204ecca2e2114de308ab6a41041f0da67dd6ca647c0bc53ca36e5cde6d8a12bbb39a16ebd7de513f06d6f07c5d133da9", 0x65}], 0x6, &(0x7f0000003480)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0xffffffff, 0x0, [@ipv4={[], [], @empty}, @mcast1]}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f00000034c0)="9c8b5e7a225046db83b3d77ea9d39f1436975f507bd795aab630280e769fd5be9c3db030cacdf4174c7e81635d353f909e975129785b6ca3f8956f9c79c224f3d97c65e0ca6bc0bfb2fe39613bead98eb6d8a881cad17c8a5066ffa4fb9fc09d8cca87f5a010ade1e5630683257521083cf53109829d0aeb89d6046a3de06ed2574890722d306c563795d5b4ba79354236a7fd96dd49419c7e8aafb31eeaf75633fe3191bb4af0764f2b8257418a124ad7e8bac8105aa9", 0xb7}, {&(0x7f0000003580)="ad8b9d427da543bb289b1b8eb43600fa606eb111e0cb5b0a2bd51b6ffdde2b0f9121cd228bbbb36d67c6cc9d177396f754120d2f9f7a26a7db698bcd5d1ac55f8f2bbfb6755e9569a67a63be1e6247d7c14b32ec9365725a5337db87048f5b3efc0796ede25d63b75eec3ff3256f487a8055777726af6491f86f37284792eb1ff64af185e62fdbb03f5c941c989e3d1a199ba8f0cc8f32bfca913986c0add4d841f884ee7c3cf4a97c3c493a932c3762a3848bad89f9a71a58878fff7ad0e95a82f764ccc3a7ab04a930504b3706656cedef24eed7974cfeed", 0xd9}, {&(0x7f0000003680)="7a04cc02fdf40388662e074b7a94697797319fcb268ae977d3e7da6abd29358f5c8bcd8e35be7eedf53076ca2ce309648b6b499dc72ed2aebc65f71c9a276d55417ab4ff8ab5d4511d302a79a0642ba091956e7de300664dad2a67e778b6b8aed951d59c9a7bf98ad911a45ea33cb0444ba79096be83f836b7dc7dfd89f54606a02faf2bdf6db573f1b27219d829023f04105498e16b63745b6c6f1f6af8032bca03c088815645f3d43aec0d639bef3f0bd7f1251fde947dcf822b3b282e69cc42612274", 0xc4}, {&(0x7f0000003780)="02a7691b903aece17f614460ac56ebcb2303b3d354f9f814dfe4495d60711a24606b2537574b23558316c64e6abde02da35d613efd2d218bbdee2f9bd40966b248e2b114b2dfb8a960832d03066438dfdc171c07b0cd4466e502e8989f70212aaa1560b1615f5e3ae27142eed4125a349ff63226a7d3af80144f14414e08050e408013ad878fc757d9ac791089b3452f099353d8280f7ead6d3c101f1e3101ea5da4e02998783301", 0xa8}, {&(0x7f0000003840)="7c58f3dc060bd4b0fa5e26b3975a82ab803d215bc576dbfb98a598a583fb3ca12a1099907f963f4c", 0x28}], 0x5, &(0x7f0000003900)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hopopts={{0x158, 0x29, 0x36, {0x32, 0x27, [], [@generic={0x401, 0x9f, "60fb159a8e86e56dfbe2c876ee694c59d1378150de940adc64ecd2b68cec882f8a38e4bf5e1e3b681ac36ec81574e60fbd825db3edd9ae81666a324139eb394e2dc4ddb5e8914a0fcfb72fc6824b9c1602e644b5af6613d339117d59c13e245b2c4ab56fb1567fd81471de43183e690d580545fee8275b180cc583ed177ef9123a4b3b24fbcfb3a3bc7b09e9ef5eb4b25b9c71cc7627f747a136cfd723fab8"}, @ra={0x5, 0x2, 0xec5a}, @calipso={0x7, 0x58, {0xc350, 0x14, 0x410, 0x100000000, [0x10000, 0x800, 0x7fffffff, 0x0, 0x6, 0x4, 0x0, 0x6135, 0xffffffffffff3f2f, 0x0]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x2, 0x9, [0x4, 0x6, 0xfffffffffffffffd, 0x5, 0xe11, 0x2]}}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x87, 0x10, 0x0, 0x5, 0x0, [@rand_addr="75d20feeda339b98ca5578f6645663c9", @empty, @rand_addr="d52b4465b63d0fb54534fbdc6585fcdd", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="743aacc38e80857da076e717b4fee8f3", @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @local]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0xff, 0x12, 0x1, 0xffffffff, 0x0, [@rand_addr="1a8458869e64f062e0e9e8b7898995f0", @ipv4={[], [], @remote}, @ipv4={[], [], @multicast1}, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @remote}, @rand_addr="367b4d68d2c48e1ff6e0aa45fc9034a0", @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x6f, 0x12, 0x0, 0x9, 0x0, [@rand_addr="e0a73f867b53faf57775f0a092d4dcaf", @empty, @rand_addr="04d17ea01b42306e858e470998e8cdf1", @ipv4={[], [], @remote}, @local, @rand_addr="81b66075288950cac0f0477ffefa1b4b", @rand_addr="ef4ea8d10b115bab78238f32ca73a816", @rand_addr="059242f4c76c0cc05f041639254fd4bb", @dev={0xfe, 0x80, [], 0xc}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x33, 0x1, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x87, 0x2, [], [@calipso={0x7, 0x10, {0x4, 0x2, 0x80000000, 0x7, [0x7]}}]}}}, @rthdr={{0x28, 0x29, 0x39, {0xff, 0x2, 0x3, 0x3, 0x0, [@empty]}}}], 0x3f0}}, {{&(0x7f0000003d00)={0xa, 0x4e23, 0x1, @local, 0x3}, 0x1c, &(0x7f0000003f80)=[{&(0x7f0000003d40)="f278c33984161b71337a729f483885674a9a00c999a3b1438f3c94924033425a616431c971cf7c5f1db635587d40610d57a82520d686f7be20bb94fa09c98baf1090f34f4dd2f526ac18fb53f87d90c31f6629f31c48ec7cfb509ae4633c93db388b17b3af51be4682a9bc947c594c9bc35eb2cb0116116ec1cf98b5bc8b6ed37b20097a3d235d5fff551a30310e911f2a3846540af230cc7a14d0b6e3ec1bd75cb9edca7b3de9f70690a0", 0xab}, {&(0x7f0000003e00)="043c62fbf899275927039cc0d5b4d6a61542f74c47fb3817b9020cb39395cfab3e927e174e4ae75e1e7955464c814b824c1868e8abd4910ad050929e6769c536eca4ec32a4b0bcb4b00cb9b6a95311f0ea574190b598e8a332870c6c625847d698c7975338403a7b7a5ee1ce37c7e8a5725e415e602d080c182d445596e58c5ab79ae100c8222c52b96416a640ca48f316f9fad79a79906596f6a1a09cdb589caf3eef5cfd8b71acca245c28666425bd0bafba00106fefac7c8c9fc11aa62f76fcc23e2adaec77f3b9f44d9cfb090fb1e3e3251e05acefe1be50f43c2393ab33005f730ef5e52ac5f39915aa341e02b0afad615ba7cce352fc", 0xf9}, {&(0x7f0000003f00)="05434e83da2cc8cd392766fcf4496c2e1af05981ea4bbb61f614e41f2856e68b0f7d85e1b870ee6f6fd62d038a611956c4a5ecd43e818746835b0b476235b27a96203d2cccac80", 0x47}], 0x3, &(0x7f0000003fc0)}}, {{&(0x7f0000004000)={0xa, 0x4e22, 0x7fff, @dev={0xfe, 0x80, [], 0x19}, 0x20}, 0x1c, &(0x7f00000041c0)=[{&(0x7f0000004040)="f34b90b7d824ac63bf642a40b6f631a876c10b652e1edcae7b117def4b39a9a6e4968f8e8bd09f9d9a477505e5f9ee52b38ecf97829f7cb6b7410202c79ba40c6903fefcc91d66491147a2b7b29581a18d1dfe9ecec8ae9cab25564abacaaa12a1ef0cc934545ada71d15e2670f44bbcf352d6ab83f4794a70be3b8b4a3fdb33e6a0df0c88372d5c37e311ef665d43b81feba0b211fd2c9c9273ce138b4ec314cfcef7194f2c6980e25f12b8df80e878254376f329c39649a61daeaa6d2cf72af68de9257e40cb08f4b53491f7e9adf98a638ab73387f5b4", 0xd8}, {&(0x7f0000004140)="bace9b8e4e3b13dd4982317a0d580328666ef7b7f3f18c2c8a9babd7452756a1821f5783c4710c0e7b9ecfed256da6044f4a9f378f91f657434a6df358a152e2418f00de8fc7ef1652b1b06a5ffa947a659a1fcbb47734282df6f496d6893f34a7a996b5a302bf4785", 0x69}], 0x2, &(0x7f0000004200)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x21, 0x5, [], [@enc_lim={0x4, 0x1, 0x72bb}, @calipso={0x7, 0x10, {0x8, 0x2, 0x1, 0xfffffffffffffffe, [0x7]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xecd}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts={{0x11e0, 0x29, 0x36, {0x2f, 0x238, [], [@hao={0xc9, 0x10, @remote}, @generic={0x7f, 0x1000, "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"}, @generic={0x54, 0xda, "18850de89ec1c393bf288e7d1468df989914c07b4b1e310f53f9e8813b16a4d26335f97dc3b6d90da87300bb1e1b766842f929b7d4525f68fed0b7b6c234e83db8dd2b1bb8fcffccc07f0a987828b017c42bc1a113cf7de0871657723eb540013e2154c9e930f265a357d19b23641743e6ab0b1b3858469c0673947bd2bd4e9d4965a34b92a2069505364a029e242638f5bbe7aaf1f235681210ce99b17465a071efaf5b10a6dbfa3e6cc1c393303be529a4fd5fcf2006eb806f0de34f2eb071c4a36d44e6bfd57249265a421a49b6c4cab04e3426e2bd1de47d"}, @hao={0xc9, 0x10, @mcast2}, @generic={0x7fff, 0xba, "78c8df8386a23e9447d3924547da4ad4d3029e97ca7e3c2197ea626fbdf2d9b4a51bc7002486fe8e2efd47ef0c896f893c13142e670cce14ec9865282658eb6b6e95bea0da1503f254884fca7da29c7b01115a2036e2b1e3f1e2d5a7c65b5e657fca8a45604a7299ad7f04062dd3cabe0b9674ff6ca34c5b048592b095b84cd2e173e3bcee86c68f88d711099c5d5e5a7984dac1bb89f09e704e69568fcd69e4625e71714af44a707e02f2f8bc844ecf93294bf45bef0745d97d"}, @jumbo={0xc2, 0x4, 0x8}]}}}, @hopopts_2292={{0x340, 0x29, 0x36, {0x6, 0x64, [], [@generic={0x7fffffff, 0xf9, "9e4c13461dae1dcd0fb7155b29f95ae96e744670faaab7890b2754c59cc5c5f1e4d6b99ef6f291443a7fd6d0c8b0ac8e9c1357b3defdb5cd7878101cf40e2fe72c343310a606a15636c09f06cdb24b78f95a6ce567b0d64f055e6ca1a717a7072e270846f5b146360c7fd272f32098771b1fd1f5b8c8f29dc16885e83e212085103a5114d6870100d26159e43495994c0b9acb2f65417e4d5ebc9d43ea8ee2131aa68e3e8413f5c2b3d273c50512eecb958d51cabf037c800c2cf39d99532ce0d67de1356ccc3d299d6a62ec0d0b875f13376721f8db7cd9a46606b347930e6420c94d612e28280c2932ad36e01e1374804d9b53a9568dd317"}, @generic={0xa9, 0x7f, "8a15bace4e458d714d6f9e4997b62a90b1b69dee49413227fafb0734159341b4114ce38f26894659c59e2a40105793eb6bbed440f52f6960b8cc8caf5a9d80d17b69c3ac976741de18810ba469408e082e727d67ca348671a5c9abca111b980046ec547593257db6cf3045145c8dc60499526d50f46080c2439c234154be59"}, @generic={0x7, 0xcf, "6d5ede8440fc45d23f890230975d2940951a34ec297b6fe421df9c6ac630bfba6ef5a600b2a881bbc8bfc2563fa89af451e2d0bbb5119b5e54d1a166f826104b95f9c459c6bfac184b45139fd547e1411cf2f2b2b68aad23da1448c2412fbe2ebd9649dc5b0eee6dca9f93d7a78f739aa5d7b2b23c0df1de338be3105316f9da2f1b3df04e3d76134c97f36dd2a85514d416485e793aa6f510a3158c7759773adfa275645296027e77a41383be2d8470fac45bb796e7c45f262715b7b32f2ffd7542ddb4f1f3955c470f75f245ca84"}, @generic={0x0, 0xd7, "9e078ca14e4b219b35daec9bcdcec205b37f90de7041970cfe9e4dd27b6cf60a05416380a28f44fe942ee057930b4dcfd0f0d1b18b1ab4272c66487e7ad29370e47206729aa83739b35f003520019e75f3693f8dc4041a9c7fc518da974e1759afb0e2d106b70885dea7732455c3db4e88b77d26c65a2eeac3d1b41ae1027ae644bc529d5aea27d747b3a275d627474fd7b9bea643ae03c07d1dea5bda346b3d21081358de17eb9d52266c199db7c42bd9866b8555a214cf97050622b9d7437b1e4c912ecd5f390fd2f27f37025669009ab92d78c50e67"}]}}}, @dstopts={{0x208, 0x29, 0x37, {0x76, 0x3d, [], [@generic={0xa6, 0xe6, "3aaea3a7fa3bd5aa5c45acc27abf0d400347b5d2e08672b86e4bdcd1252fc0940f123a00e2fa57e78ec9983e57ec3a6bdc6701e797d403d898f534a22b53d0bd9645f71370a6ac0661992ccf3f77d0392efe8e98231fbaa76c51c24d1b4fc74c8f6e4460ff8577fcb0727b35e51710016d39d1a5fecbccb0918c698579197aadc2fd7be80bdc6274e676b47c237307fce65f6ab7c07805300de28fbadc39b91dba3030929f22ffc0b9844654cdf2475018ddced76200a2b733f8985a1009dfc37aec13915b8cdcecf9eac8d5ae1dbf8591a3083cd452c960892d570dec4ec8241b2cfeca7c7f"}, @hao={0xc9, 0x10, @ipv4={[], [], @loopback}}, @calipso={0x7, 0x10, {0xf9c, 0x2, 0x80000001, 0x5, [0x80000001]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x2}, @pad1, @generic={0x7, 0xc7, "8890d08fd2cdd5071b3262f3c22fc4e8ccbbe3cf3ff7d815a8e429825e5c35fddd9f6daecace45b1a5bb0a764ce96b0557109a4725ea81552e900953cb078e706688c04286f2a6ff37a3416c4d15135004b360373f601a4c1442e1a06e505d16033d13c98106b245db5ad59f74c1d08030226bd9c61025784c10cff75401e668b54af6570c67729c2ac6b6fdc20e48d521de941bd49161e68302aeab653293e433bff7e0fd052bfab01812eed80175962173865c5f2aa65f8993c7aadf73e68c9ddcbbce8db7a2"}]}}}, @hopopts={{0x20, 0x29, 0x36, {0xff, 0x0, [], [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x5}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x10001}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xca}}, @dstopts={{0x28, 0x29, 0x37, {0x5c, 0x1, [], [@jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x40}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3ff}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0xbf, 0x1, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x80000001}]}}}], 0x1828}}, {{&(0x7f0000005a40)={0xa, 0x4e22, 0x2, @remote, 0x7}, 0x1c, &(0x7f0000005b40)=[{&(0x7f0000005a80)="cfb70a1832bc32c378ce47a26133444966279fd5a189d1d1bc03d137048fa1b2ebb5124b3b019433a946ec7521f3c0ce819ce084866700f42a5e4e42c49ac537ecdf9c7c6bb6bb718facdc426c747799697664c4972d97cebbbe442340", 0x5d}, {&(0x7f0000005b00)="4801e21935cedca1", 0x8}], 0x2}}], 0x7, 0x4040000) 12:20:57 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000ffff", 0x24) [ 1985.786034][ T4735] device syz_tun entered promiscuous mode [ 1985.795899][ T4735] device syz_tun left promiscuous mode 12:20:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x500000000000000]}, 0x10) [ 1985.850504][ T4742] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1985.883544][ T4745] fuse: Bad value for 'fd' 12:20:57 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00000088a8", 0x24) 12:20:57 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0xf0ffffff7f0000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1985.977377][ T4779] device syz_tun entered promiscuous mode 12:20:57 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x40000000}}, 0x21) [ 1986.020383][ T4771] device syz_tun left promiscuous mode [ 1986.050182][ T4814] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:20:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d303030d28641e7cd03a719fb1bead730300d303030303030303030303030343030b389fe30322c757365725f69643d31572038f3bc2662e603cdb71f5ff23bd5b068000008000000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000100,max_read=0x0000000000000001,max_read=0x0000000000000007,\x00']) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'yam0\x00', 0x8}) 12:20:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x600000000000000]}, 0x10) [ 1986.328676][ T4973] device syz_tun entered promiscuous mode [ 1986.343197][ T4887] device syz_tun left promiscuous mode 12:21:00 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB, @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x3f}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00000000f0", 0x24) 12:21:00 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x100000000000000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:21:00 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0xfffff000}}, 0x21) 12:21:00 executing program 4: rseq(&(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x6, 0x5, 0x4e5}, 0x3}, 0x20, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000700)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000340)="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", 0xfb, r0}, 0x68) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030322c757365725f69643d45856c6522092d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00b0c47e3f169d0e87d1a020cfc3158b4c4a473afc6d174bb7538e56e07df07911acea81afecfc4bc7970800000000000000a02875dcd843dc26adef2fceb968871b6b1086e8f2323685d1fe8ef332816a7876e3aa54e2f3082232d28b26e1298e64bf119b5224792cfcd0d36db807bcf66bd1c81996b1eadf57d239da0ad0f7abde8ba3c832d309af36c59c55c2638bd56e007c1b0088b8c69286448361523ae18eac2b7e172895f3a4c3691dae860189e0ecb9c8023ca12555b592aed0"]) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) timer_create(0x0, &(0x7f0000000040)={0x0, 0x24, 0x3, @thr={&(0x7f0000000000)="4196ac33af9dfbb53090add305a743a96f31c5a93efc9bdef82630e03d85ea1ec62ab3aa697e9e7a20a47f0779fd753b5eed1887d2a046", &(0x7f0000000200)="b335bb536bf0cd83cc2790fa1627801cfe26355b1f23c5b9fe196dbdb16a9aed0e836b05b0474174fb0297367ad2cffdd52e31553901bf357596aa6bf49c46ed259257df5710699d6c9ad1dcb5ac7f"}}, &(0x7f0000000100)=0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000004c0)={'broute\x00'}, &(0x7f0000000540)=0x78) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000580)={0x1, 0x27, 0x9, 0x100000000, 0x2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000280)={{}, {r2, r3+10000000}}, &(0x7f00000002c0)) 12:21:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x700000000000000]}, 0x10) [ 1988.643955][ T4984] device syz_tun entered promiscuous mode [ 1988.661524][ T4986] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1988.667503][ T4983] device syz_tun left promiscuous mode 12:21:00 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x8) 12:21:00 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0xe00000000000000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:21:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000009eff", 0x24) 12:21:00 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x4000000000000}}, 0x21) 12:21:00 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d569", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0xa6}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x2000000000000000]}, 0x10) [ 1988.897618][ T4999] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1988.964813][ T5003] fuse: Bad value for 'fd' 12:21:00 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x2302000000000000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:21:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000f0ff", 0x24) [ 1989.049758][ T5027] device syz_tun entered promiscuous mode [ 1989.097066][ T5010] device syz_tun left promiscuous mode 12:21:00 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0xf0ffffffffffff}}, 0x21) 12:21:00 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x3f00000000000000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:21:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)=r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x10000, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x6, 0x4}, 0x0, 0x0, &(0x7f0000000180)={0x1, 0x1}, &(0x7f0000000200)=0x6d1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x5}}, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)=r1, 0x4) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28daaeca3c299784918f6461d34f8ef03ad684c2500c6a4a59473f7c6caf9d82cc8232462dc50ca150aa8cbe272fd8bb425927f3f1aa142016b42bc89fd3d8ace994171af9750c460c9f2c7e387bee95f1c9fc5928603f02d62731e2e7413e65795fd10505d039bc808e1bb40da0cdb16c0d78ca7cf55f70d4c621ccd094c313f7eab6c843ff8eff32c638", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75060069643dc4fc22a6242f5bf67e63b740a0b5ac9e46f6a8e0948020ebda244813332330e664a9c289649e576b1bda34554ea96d8933ba932852cd0203d2b0bcce0ded363b3083c4e80c19e6606d80694613f8e6ffb196483129e098ca5681831de38ef1a3bcb213213fa67eab00"/135, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 1989.175832][ T5123] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x3f00000000000000]}, 0x10) 12:21:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:00 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x4000000000000000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1989.384235][ T5133] device syz_tun entered promiscuous mode [ 1989.409492][ T5139] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1989.420346][ T5132] device syz_tun left promiscuous mode 12:21:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000ffff", 0x24) [ 1989.434375][ T5138] fuse: Unknown parameter '(Ú®Ê<)—„‘daÓOŽð:Ö„ÂP jJYG?|l¯‚Ì‚2F-Å ¡PªŒ¾'/Ø»BY'óñª ´+ÈŸÓجé”ùu F Ÿ' 12:21:00 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x4000000000000000}}, 0x21) 12:21:03 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d569", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0xa6}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x4000000000000000]}, 0x10) 12:21:03 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0xfeffffff00000000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:21:03 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:03 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fdm', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='|\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:03 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0xfffffffffffff000}}, 0x21) 12:21:03 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0xffffffff00000000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1992.040730][ T5265] validate_nla: 1 callbacks suppressed [ 1992.040740][ T5265] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1992.058493][ T5264] fuse: Unknown parameter 'fdm0xffffffffffffffff' 12:21:03 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d569", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0xa6}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:03 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x4}}, 0x21) 12:21:03 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x4800000000000000]}, 0x10) 12:21:03 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) r1 = semget$private(0x0, 0x3, 0x12) semctl$GETNCNT(r1, 0x7, 0xe, &(0x7f0000000280)=""/246) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',roo|mode=\x00\x00\x00\x000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) [ 1992.325749][ T5386] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:03 executing program 3: r0 = gettid() r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) r2 = fanotify_init(0x0, 0x0) read(r2, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x280, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000080)=[0x4, 0x2], 0x2) 12:21:03 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1992.410401][ T5390] device syz_tun entered promiscuous mode [ 1992.452044][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1992.457929][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:21:04 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0xf0}}, 0x21) [ 1992.503042][ T5388] device syz_tun left promiscuous mode [ 1992.517686][ T5397] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x4c00000000000000]}, 0x10) 12:21:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) dup3(r1, r0, 0x80000) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 1992.702657][ T5506] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1992.796447][ T5510] device syz_tun entered promiscuous mode [ 1992.826034][ T5509] device syz_tun left promiscuous mode [ 1992.847883][ T5514] fuse: Missing mount parameter(s) [ 1992.861508][ T5515] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:06 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db75", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0xda}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:06 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x4000}}, 0x21) 12:21:06 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x6000000000000000]}, 0x10) 12:21:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x7, 0x10000, 0x1}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x8) 12:21:06 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) ptrace(0x8, r0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x8) write$P9_RGETLOCK(r2, &(0x7f0000000040)={0x2a, 0x37, 0x2, {0x2, 0x8c9, 0x9, r0, 0xc, '-\'`vboxnet0$'}}, 0x2a) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 1995.293307][ T5636] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1995.307609][ T5630] device syz_tun entered promiscuous mode [ 1995.326057][ T5625] device syz_tun left promiscuous mode 12:21:06 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0xf000}}, 0x21) 12:21:06 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x6800000000000000]}, 0x10) 12:21:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='m\x06\\\x80\xe1\xfeY,\xfc\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x30, r0, 0x10000000) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r2, 0xf5, 0x7, 0x0, 0x5, 0xfffffffffffffff7}, 0x14) [ 1995.447521][ T5743] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:07 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1995.598401][ T5750] device syz_tun entered promiscuous mode 12:21:07 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x40000}}, 0x21) [ 1995.641495][ T5748] device syz_tun left promiscuous mode [ 1995.641515][ T5754] fuse: Bad value for 'fd' [ 1995.668076][ T5755] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:09 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db75", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0xda}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:09 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x6c00000000000000]}, 0x10) 12:21:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) r2 = getuid() mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2b, 'pids'}, {0x2b, 'memory'}]}, 0xe) 12:21:09 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0xf0ffff}}, 0x21) 12:21:09 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x402, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000000c0)={0xa, 0x9, 0x3ff, 0x501, 0x1f, 0x6, 0x4}) r1 = gettid() r2 = fanotify_init(0x0, 0x0) read(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000040)=0x9) [ 1998.352879][ T5874] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1998.386105][ T5875] device syz_tun entered promiscuous mode 12:21:09 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 1998.402262][ T5878] fuse: Bad value for 'fd' [ 1998.413483][ T5872] device syz_tun left promiscuous mode 12:21:09 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x40000000}}, 0x21) [ 1998.502159][ T5875] device syz_tun entered promiscuous mode [ 1998.517114][ T5875] device syz_tun left promiscuous mode [ 1998.558629][ T5945] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x7400000000000000]}, 0x10) 12:21:10 executing program 4: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='mountinfo\x00') ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x46, 0x4]) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x3, 0x3, [0xffffffff, 0x0, 0x3]}, &(0x7f0000000180)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200)={r3, 0x1}, &(0x7f0000000240)=0x8) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB="a9add13ac84a0c7949902dd6aa9471756c361a57db8527e217fc84402bc8429a5aa82ca4f414ac3dbfd02e04557960e97319b6fd6c0b0dd1597c41d6c4c6a56abd6edd1b366f909485e915a2f240144ee768b3814adca98139227585b511375132c4eacb2ca178a37e880a8a8a75", @ANYRESDEC=0x0, @ANYBLOB="27ecc6acde86c9186280a9ec538d8e026b2252bbdf967838b73e1eefb200771aa7873214956c707f72fded30e34b36000d00a039b9f4b26657c91f2e3912071ee8f1e40b3c8cb55215d5ed682b8509b936fdcfaee651b451bfba868b71c3351dddcad845d90a1abb10cb00f406d9572054b84e050001d9a569097fe131fcfe708916917f76338f7e099561dc262f1af4bfd5"]) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000100)={0x3f, 'syz1\x00'}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:10 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:10 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0xfffff000}}, 0x21) [ 1998.777410][ T5998] fuse: Bad value for 'fd' [ 1998.808668][ T5999] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1998.815653][ T6009] device syz_tun entered promiscuous mode [ 1998.859152][ T5997] device syz_tun left promiscuous mode 12:21:12 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db75", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0xda}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:12 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:12 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x4000000000000}}, 0x21) 12:21:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) openat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x228800, 0x18) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local, [0x0, 0x7a00000000000000]}, 0x10) 12:21:12 executing program 3: r0 = gettid() r1 = fanotify_init(0x8000000000000016, 0x4) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x2f, 0x6, @thr={&(0x7f0000000040)="1b77290a87690197e487b7bc39490cf8e68bc9e42c1665082e9fe1a518488ea189a3946acdaf42c45a51c8816410a20e3eca1570213c674bb5cd2da117bc7dced8a50a00a9af9c53d53cf7e6e981420231b22e0986be2be4997776ed990a18ba4ea870279f13b9a6e1649bceaa6d9199c91da5c683a2a28c2df09de9ca5423ef0c3fd1d16f7512a3cabff063ac35a13e106ad8639b908927bf5534b046d1d140169dec1bd9aa45092da70387d29aa3c618f528502c3afb0f08ba8da18ce85057192dc23a81716cf08b959a8ba13bd232658ab30adb39af679cf2674c8fe7dd6f3e6998e4ef", &(0x7f0000000140)="1b1de74ec7cd5911418fefad43b2c86294f4d054edc45eeb1e7c13eae3b4c3576ce7f218"}}, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000200), &(0x7f0000000240)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r3 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000300)=r4, 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) tkill(r0, 0x14) [ 2001.451835][ T6116] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2001.473891][ T6117] device syz_tun entered promiscuous mode [ 2001.479180][ T6119] fuse: Bad value for 'fd' [ 2001.492075][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2001.497893][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:21:13 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0xf0ffffffffffff}}, 0x21) 12:21:13 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2001.536801][ T6113] device syz_tun left promiscuous mode 12:21:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)={0x7fffffff, 0x40}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030300930303014f23030322c757365725f69643d82e811e9527d7d6e1b4c5c0aa3546c16fd706dfe63b9a1a6c3f6c064fb56dd135fc5a49fcd4228a8b5aa44e27cefb8dfa779453baa4bab5196b303e63ee1e6a39752b051dfed092ad19e90cc121c7e3dbe8aa086c86f5f45e9673bfb2b53f69e072d40bfa4bf6111bedbf0b9f1cf8f80fd09593f2f9dba4718b7d999124acd229eb586bd6c79aa762600a4206fbe0ff7162725b6bb858beed9f7f7081870ff12ded6708a4df482a8e87d243435d0e762723faf17d31086bbee4f75917e41b782472d6e5bd9b02566a9c0cdf8e0efbf7ae5eea201da5ce2ffc1158128d67d3a97220ec8ef2f210fc2aad9d86a6835c7c8d7bbdf819fb6c8daa6395b75112fc27b479c", @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d9f1c93dc1a216a64d3fe4384e0be5a3d0dec", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x1) 12:21:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0xe) [ 2001.664502][ T6230] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:13 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f030", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0xf4}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:13 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:13 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x4000000000000000}}, 0x21) [ 2001.819177][ T6237] fuse: Bad value for 'fd' [ 2001.882319][ T6243] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:13 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0xf) 12:21:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x2000, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0xcc6b}}, {@mode={'mode', 0x3d, 0x5}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@measure='measure'}, {@obj_role={'obj_role', 0x3d, 'procem1'}}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="66643da8073925f783f007b0b74316ae07b80cf0605f2306e71efc326fb1082f806a5ba498a557fc886a40790a5cadff0768243e219dac49b01e21470629d723c96ec2e8628d7f21b2af2b9ab078eb42e8d075274710c8aa879dbce5e8df802b8172c08c21506afd1f5d062ecfc9990ea8cbb13ad181e8d760d5fe32ed3426bef3ff5285f11177cb2c59449cd40a271c489f73969d", @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030322c757365725f69643daf74045c3425fc6c5ffce4714e", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$TIOCSCTTY(r0, 0x540e, 0x4) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:13 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0xfffffffffffff000}}, 0x21) [ 2002.089637][ T6353] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2002.149067][ T6358] fuse: Bad value for 'fd' 12:21:15 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000040)) 12:21:15 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x2f) 12:21:15 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x0, '', 0x4}}, 0x21) 12:21:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x44) [ 2004.479423][ T6474] device syz_tun entered promiscuous mode [ 2004.499865][ T6473] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2004.505688][ T6475] fuse: Bad value for 'fd' [ 2004.510018][ T6467] device syz_tun left promiscuous mode 12:21:16 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f030", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0xf4}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:16 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:16 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x0, '', 0xf0}}, 0x21) 12:21:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x20000310) 12:21:16 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00') mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 2004.938952][ T6590] device syz_tun entered promiscuous mode [ 2004.942024][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2004.950583][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2004.956017][ T6584] device syz_tun left promiscuous mode [ 2004.978990][ T6592] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2004.995811][ T6588] fuse: Bad value for 'fd' 12:21:16 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:16 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x0, '', 0x4000}}, 0x21) [ 2005.149132][ T6701] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:16 executing program 3: r0 = gettid() r1 = fanotify_init(0x4, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000140)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$xdp(r2, &(0x7f00000012c0)={&(0x7f00000001c0)={0x2c, 0x4, r3, 0x1b}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000200)="07518f9a00977e2375ec9973a301f5494cbcd5d6387b81599519142854165438027a26099124823d63a12dd13d84c19a5b583f1b7cbff7f6b8194faa22d698b5e1332751f3365606bd74953457ca0752953f", 0x52}, {&(0x7f0000000280)="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", 0x1000}], 0x2, 0x0, 0x0, 0x44}, 0x24008800) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x101000) ppoll(&(0x7f0000001300)=[{r4, 0x8013}, {r1, 0x8}, {r1, 0x9002}, {r1, 0x200}], 0x4, &(0x7f0000001340)={0x0, 0x989680}, &(0x7f0000001380)={0xffffffffffff8000}, 0x8) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 12:21:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x34, 0x12, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f0000000100)={{0x0, 0x6, 0x6, 0x1, 0x5, 0x80000001}, 0x34d}) 12:21:16 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x0, 0x7}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="66013d", @ANYRESHEX=r1, @ANYBLOB=',root0000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:16 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x0, '', 0xf000}}, 0x21) [ 2005.452820][ T6713] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2005.473837][ T6718] device syz_tun entered promiscuous mode [ 2005.489231][ T6717] fuse: Unknown parameter 'f' [ 2005.513169][ T6710] device syz_tun left promiscuous mode [ 2005.588242][ T6756] device syz_tun entered promiscuous mode [ 2005.606807][ T6710] device syz_tun left promiscuous mode 12:21:19 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f030", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0xf4}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:19 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x0, '', 0x40000}}, 0x21) 12:21:19 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:19 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2100, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000180)=""/63) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x1, 0x8, 0x8001, 0x9db, 0xa3, 0x1, 0x100000000, {0x0, @in={{0x2, 0x4e22, @remote}}, 0x200, 0x400, 0x34, 0x2516800000}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x8a7, @rand_addr="08d7cfbef558343165ad4f3569516ae1", 0x100}}}, &(0x7f0000000100)=0x84) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:19 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'rose0\x00', r2}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r3, 0x3, 0x6, @local}, 0x10) fstatfs(r0, &(0x7f0000000000)=""/85) 12:21:19 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x5}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)=""/203, 0xcb}], 0x1, 0x0, 0x0, 0x800}, 0x1) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000040)=""/127, &(0x7f00000000c0)=0x7f) tkill(r0, 0x14) [ 2008.071393][ T6840] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2008.096819][ T6837] fuse: Bad value for 'fd' 12:21:19 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:19 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x0, '', 0xf0ffff}}, 0x21) 12:21:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x2000000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x2, @remote}}, 0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xaaf8, 0x204200) [ 2008.272067][ T6944] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:19 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g\\oup_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:19 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2008.431318][ T6961] device syz_tun entered promiscuous mode [ 2008.458377][ T6959] device syz_tun left promiscuous mode [ 2008.480980][ T6964] fuse: Bad value for 'fd' 12:21:20 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x0, '', 0x40000000}}, 0x21) [ 2008.580716][ T7062] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:22 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f640", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x101}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) openat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x400, 0x25) 12:21:22 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x1, 0x20000) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000280)={{0x0, @name="6a6428db09c8787bf39f3e214df81b2b8d9a82a846c95ea492d3f6f70e1fc212"}, 0x8, 0x7fff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) r3 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x8, 0x2, 0x8000, 0x9, 0x10001, 0x7, 0x400, 0x6, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={r4, 0xa4, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}, 0x10}, @in6={0xa, 0x4e22, 0x7, @loopback, 0x7}, @in={0x2, 0x4e24, @rand_addr=0x9}, @in6={0xa, 0x4e20, 0xda, @local, 0xfffffffffffff000}, @in={0x2, 0x4e20, @rand_addr=0x8001}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}]}, &(0x7f0000000200)=0x10) 12:21:22 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:22 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x0, '', 0xfffff000}}, 0x21) 12:21:22 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0xfffffe82) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x8000, 0x140) sendmmsg$unix(r2, &(0x7f0000001140)=[{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000010c0)=[{&(0x7f00000000c0)="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", 0x1000}], 0x1, &(0x7f0000001100)=[@rights={{0x2c, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1]}}], 0x30}], 0x1, 0x48010) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 2011.191436][ T7084] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2011.209061][ T7089] fuse: Bad value for 'fd' [ 2011.230785][ T7092] device syz_tun entered promiscuous mode [ 2011.252042][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2011.257937][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:21:22 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:22 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x0, '', 0x4000000000000}}, 0x21) [ 2011.297336][ T7087] device syz_tun left promiscuous mode 12:21:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x50) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 2011.398438][ T7199] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2011.427747][ T7092] device syz_tun entered promiscuous mode 12:21:22 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2011.472312][ T7204] fuse: Bad value for 'fd' [ 2011.478908][ T7087] device syz_tun left promiscuous mode 12:21:23 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0/file0\x00', 0xe, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:23 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x0, '', 0xf0ffffffffffff}}, 0x21) [ 2011.588305][ T7310] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:25 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f640", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x101}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'\x00', 0x0}) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7, 0x40) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @dev={[], 0x13}}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x42080, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0xa1b) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x1, 0x284, r4}) 12:21:25 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:25 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x0, '', 0x4000000000000000}}, 0x21) 12:21:25 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) r1 = fcntl$getown(r0, 0x9) waitid(0x2, r1, &(0x7f0000000000), 0x60000001, &(0x7f0000000280)) 12:21:25 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000040)=@default) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000080)={'bridge_slave_0\x00', {0x2, 0x4e23, @multicast1}}) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f00000000c0)={@host}) tkill(r0, 0x14) [ 2014.273918][ T7428] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2014.323844][ T7430] fuse: Bad value for 'fd' 12:21:25 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2014.344588][ T7436] Unknown ioctl 43783 12:21:25 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f640", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x101}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:25 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x0, '', 0xfffffffffffff000}}, 0x21) [ 2014.474712][ T7533] Unknown ioctl 43783 12:21:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x4) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000040)=0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x2) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="2c726f6f745d6f64003d30303030303030303030303038303000000000000002002c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 2014.498005][ T7547] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmmsg(r0, &(0x7f0000004200)=[{{&(0x7f0000000000)=@generic={0x10, "8baa1eedfaca924d4b6f18cec88d84aea074239777d0167d89af35b6b2537b610379c5676a05e1b250025bc7464aed9b1ee197d7bdb741253ab1dca572fff0b470d673c1b6db52c04f924e4a75743a35a1f3c278e95cb3d6335446068ce33ce572547315db5c1b1c6139ee129bd03cda84f6c0d3ceee0607c89e421cf73b"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="47fba2cc44963ecf86e9eea52bf5", 0xe}], 0x1}}, {{&(0x7f0000000100)=@ll={0x11, 0x9, r1, 0x1, 0x80000001, 0x6, @broadcast}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)="17b5655e2378fc9fa446c124c9cb3cc054f51e2d98fff921e6526046dd94922b47920bcc5b9359a2fd607148d465ee21364daa8bb63650be82f0c15a57b8e41e757c6c877294bdc3ff980da8dd5513a67154a64634e6ae3197bee0811ff07d8911b6", 0x62}, {&(0x7f0000000340)="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", 0xfb}, {&(0x7f0000000440)="dee0507aa5b3798ed7b93143561d4b3e2ae56ad5be3224041d95a1f92f191b3b006725f1c54791d14f9c958ae56a51821ff8694624cc5137824f9ffc01f57e01896638cf5c0610ed82edef3c65c81a3b2d41690235a0960faf40fd5ad6d5177c14a014b02a4d14a2b91345e300e4333bf63d0883e178fcdf417ac62be7dc7bce937d2e646f9eae4722b9a1d01236a250782bf9bfcbd5ad575549d74346934d925cfc923060aae9d5c7186730a8e88c8b8b35855b1ef9270093555df104be65713ddfde78574acbde62c02a8d56a7805333177b2f8337", 0xd6}, {&(0x7f0000000240)="1556c10f4c64766fe6e83950c4328a7a29a2ad48c139ffe4475f58df5eb46b2e48b484af1446c90f60dda1b0b98b91d3f307", 0x32}, {&(0x7f0000000540)="8f7b6eded97260f713c06b6b4b5c8ae929179abd3e0dd31ea36dd98284c3307cc4a6f137b7e374b608eb280781b30062d7d9f5b4b62d46bcd9f915d862466e559cc5366f156a661ae6920c726a784d1c087d37bc01f34f2f9d413a38f7aef1caaca982144254646f33848ffa1e6915dee1afec1631dff39eef87a7343c29f808cc8187a22e5d46e02c9d8a8266eb6e7874", 0x91}], 0x5, &(0x7f0000000600)=[{0x48, 0x11, 0xfffffffffffffffb, "233e05980348cc324c7f91fbe495b190636891965296edf759ef75bce2722688644681c0b7a468e82b5e4481f6babca72ff6dd1d"}, {0xb0, 0xff, 0xe1, "2d6d2b67ac84193ac9d774bd568b83aef1118911ebf243a483d6ee67e55d614e4f154a2290f7549f9f1644f3c10792c8354b27a5e152c8dc6a5de480eeac11d812b3e30b8ce122cd4a7ec597b521b842608b52954b81e8de44356acf4b9fe0946b4ebebaf7bf29f7b3c700c495a1ffb6bc2b7aa587e9ba1ddfa9be4b3eb6c195995a3262a292bf257334bad6dc3227c70c05ad10a706089bf5"}, {0xb8, 0x107, 0x7ff, "555d56ab45d672d746313d1f760955e7c0718a6356ceae8a79beccb389b3a1de98d3774df121a2e1089adfb4a9b037de19492e96e1d50692d7dee57ae4cb59a59a1a330fead69b6a3ce7c94ea157f8c4af252642162f4e17e55209f15ff8a821d6dc3a64d4578e380b255334e6c0ca27fadce5c4249f9e8c2587346b3b7d9cbf9747103ccc836944c4d7611fb3c1522a01094f9f6a7e78041d4e5d3948897f3f2011d60040168ff9"}, {0x10, 0x117, 0x3}, {0xb8, 0x117, 0x7, "614792af63b284d04ef5da345e1e98996fe382459bf4ccd5be90453899597ef94ab131a01429979b41aabfb1f4f0a0af65dec8e10d3c5b9f62a38bb3f6e5c88b7abea4e1698aa2d88666ac3f55b55f83a313843fec4a3a8c9f92bc3c40c4fc2ad8a54ae9db21f5f10ce8bc06eb5edf8c22a6ea325bdad9b68ba96152334b206ead9dc9656400b041f3c35c94b76fd7790dd2fe727dd0a666e0d11a23df9af20d6b076fb4"}, {0x38, 0x0, 0x4, "796383374b567661ce40eab7885725c6632b42a91811a3319970ba38c5cea30e33112d350896bc"}, {0xf8, 0x104, 0x80000001, "a57137cac9c3fafbd80b05683f669cadaf38d5392f4a7207774ae9cc68f1ce4e0d00fbbe74924e7abd125b8b06715b8d3848e51d8016490fe51e9e0b2557ef16ed380ffac7385dfb5e9ef4dc6ddd7bac47d5b50f152002d6a973545da2bc81d1c37db05c8d78c25d14e2c22fde484266b069bff40fb0b429826df1b56bfa4d75887b56da850481eb39435cbe36e1c7aeb748b74e08341ad8b687a543ee688df09fb196daa509370d007d98ae0f62da51290aa3dd4c868986b5165a245e3d0dcc2d2553a87049c401e48557db700b9f0c7d71c2d61e3e348f4b84493506d9c04cdb"}, {0xb0, 0x115, 0x7, "60398f03e0ac59d98aed1735097855351d902849a84d453c1fde3226350eef859f427cbef23808e8886719e1a84c04c96bfe10603d79e7130c2cc86755975aab31a99690ecaa34d1249a5d00b8d5af294ed828c508a29d75156887c4db207105d15f5d4f58f8658ca38d73cc56ac5997e77d5cacfe8c824816cb9f0ff8b29107b0dd7f6cb04703aa7d85547cb226c78e5e229e793de6c8f7fc6e58c13585"}], 0x458}}, {{&(0x7f0000000a80)=@xdp={0x2c, 0x1, r1, 0x26}, 0x80, &(0x7f0000000b00)=[{0x0}], 0x1, &(0x7f0000000b40)=[{0x78, 0x0, 0x8, "465737df093c557e7977e8e164d76fa4094ba4f42a65cce8ae8446d628620c1cc2997a149c916f40aa9294bb8451a17741931b3407cae422bbacb24034269b33404f2064b94c6f81bc5cc7d3311ff4c900b26cda244e5af7a2f05217e64a6c1991"}], 0x78}}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x4, 0x3, {0xa, 0x4e21, 0x81, @local, 0x7}}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c40)="71720e74f8f1e75cd636d7a50cd162aeea111e5c8acba27131fe6a9c576d506dc72eb85fff26e4f95aadc457814615111670fd7bd419cf4dbbbd47fe68f118a3f77038221a6494f906752fad157c85a2d11ba315836d7d04a07f1ef566c5d5d3752ef59fa6f772d33ca896ad788f78650875296dbee913b9b1cdba06da07f0ab3f78b932d3e894e65bdbcf8bddbe35fb00abcffed12d93c789250cc61b2f9616a7bd95fd357874e3e3bf139c71c4e0cc18eaad41772fb8ad5558fd065c6166ffe1329d8c771015462c4d58fed4ee76dc9e9b60c63defee56644d47aec0acdc2104b121459c10cdc1242e7167e6767b5679abfe56ba3540", 0xf7}, {&(0x7f0000000d40)="93da9f63daf7ffc8deaf1b92594fa61608de3bfafdd56fc7a72b05203b8fa91b72f7843ef798bcda97be9e078995a939e7f203704ff9bacbf7235d1086227242c1d1844aae6ba9711c2e246aaabbf8ef8f6c99c6f2d079a79a86fb43299d9ca4eb44169d4160c342207575e1bdd5fc050cc183d9912b7fcec5dc1d03a4705fbef0ad79189e71189a7dda4b3e55c300b477378b2f84a3d1060717547262d1cd", 0x9f}, {&(0x7f0000000e00)}], 0x3, &(0x7f0000000e80)=[{0x38, 0x105, 0x4, "ad6f910a6391a9666d52881f928d08d4a4db288cf4d4f6ac82314bf498af0fc2eaaad6777e45"}, {0x18, 0x115, 0x2, "40abf836"}], 0x50}}, {{&(0x7f0000000f00)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xd5f, 0x5, "15df3fa6db9af93346214f3767370b17f492df62876d7d9e010daacf8d12e420dce039dd4eb85bb20433ae89e041c433aa9b3781c01f3a964e483f2e255aaf", 0x36}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f80)="2c5412e156aaf8531f84946467ea4c3d723466bd6443871b9278e29f00d3734af715784b2c72e19eab401852eed366a2632fd447585a372dc50201fcff1e241672f38f2ab5e1151551f41b8c108148b3e029a4d37c140a29227ce96c6847fcd1e9477fd85085248da686a1ea57a6cb64f8d038651e", 0x75}, {&(0x7f0000001000)="2f170461457c3b89a11b6d39fe22ac9f0addac68c090a4b1b17e6ef082448f82a9906c03601c7a8413c5b817c54a0ea88a50f37e8db0f49baa21d76c0f1e09a35ddc4c9b28959ea6c2f1f464cf9a2a56566f5f89ef52314c7eb09d66183db58009ef77ce99cbf6ffe2994569b08080a21d28cca51ca9f9b2f35a6502457555ef37474e81436807b52fb6aa7bd35b721d0c5bca6a70ea77fd158f2f09e01f89a86fb1dde40b7df22b786d323b2d2beab321b3b472481b466bce360d10070609a03db2caadfc27ba58a5d37ecd0124525b8bd589246e41e0f59abca1fad326fd433abc9fd7840011b44da71c744c23ae9124", 0xf1}, {&(0x7f0000001100)="080c3241e78689e09b93a69903884476e75cb28de7d26164e4ec5a3f0e32bb75c1036ce803babade51989f86eb493370687407dc3de00312c1894ba7d71cf23ed084ef467e494523983d6e26cd7007192bfc42fffe3bca3dd961a62836ebe5213f03bd2b9b96e8a1e701e61eef057e21749a28a8cac3f3683c68145c5926f4b87a9201fd82fd", 0x86}], 0x3, &(0x7f0000001200)=[{0x100, 0x115, 0x5, "f349c2c675eb9db8c8ef8c240d4db935c9c76d59f7e93bb1c3e7f5c39eb60bc6347cc73b21d4b1680af71f5b820d8a9dfa057f175b090b24906f6b0f244d4ef4f5af77d144b1a14021fdd105434a70fa87cb2e2e41c87578e50f6fd40891b70c4aad9df8a5cc7a1cc7ce2006c1d13d84e9b36480b7d33f40090705a6597c572a5660d1b5527d3251da1bda324a4dfe15bdbb1ababe1c1a1f41102eba94e519dedb92e470c066aef07b07d544f2b028e805e1b47f26cbb26d24c0885b85cd55d98dfd2195a9bcca14ad6e5a5ebff7613acf37a1e9d23c53d53f3b4c2a9e7a8d5f4708d0e6c393a0f1fc9c6d"}, {0x88, 0x104, 0x0, "acccebbeedc62954d4f41614c33b14242fb604c2f3f652b907828ce10dcab5d1e47e8ffb94148bb4b9acf37c27bd2c3cf4214091202371e415cf038977d1e2df78d655bb5882c5b826790d6c37406f2f97dcac294d5d1488b81eff424e5ab1bd4699a1d988707f156d4b009fb032460289b4e581d4af"}, {0x10, 0x84, 0xffffffffffffff81}, {0x110, 0x100, 0x9, "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"}, {0xe0, 0x10a, 0xfffffffffffffffd, "977ee1ed0035390e52f7bc70334b9cb8c617d05fcd9d9b1093ddd4d935b58a5c9d3e6ed5a90c22cbff2e6f1769cbe354895db564a03d2eb38125613875338411da72b6ce219f2b83884e29f4a30ed3e11466ded870a00dbee3659d31cc313a5ba130e878242f8fba87420327eb5ba2f04dbd7236b544f347e93f23fd72a8882d5395930f74fe87dba2fb6a6ea97240b1669882623a8ac82e9dc8937f9e08692cb28b3f8d5acf75178451c2bec1dacb8660e70033a4d44645d62097e2f522a6decc3ccc05ddf7feca18"}, {0x30, 0x105, 0x0, "750ba00e34623c3acb7fbb55cf8f9374a55033bc2406d217bd40e205a538dfe7"}, {0x98, 0x107, 0x2, "935a805f2b5687ccdaae88e89a53be952b422daea885f001a6a627ae467b89382ba0ca2848e11375e5e886bb9b52e23885967b4f2c3525aeedea1758226aaf60b61af37fc9d65d0c2f445ebdbc801d9e19b68d62f9fba91769faa5542839796a19864fb05a4208245826313ff5e444c90e0a878d57cca5d4b14f7e34365e707d8d42c96c1a9642"}, {0xd0, 0x10c, 0x5, "b0b50965331500b07169ba02ed51321dc06f4c469d893962c9f4a242d76cfcdf713cc758bffa4f7c24cf1541fa5f91825e44970747e867e2b140d1dfa9d6ef227f047585c06a066cd8dc90b1f353d3ca5475e0df60f526ff7a067ad26ff79a422a2b1df2ad60c66fb5cee906a691f0efc5ce15904dfec561b41f80c512e5b6b7e5a6975ba05bee2611bf2dc66169a029cf4a8bbae157663c3be6f24f25d7e5205d442c9ba8f8de8d2a876177c58eddf259ac3f5fa196fe39437b4d3f"}, {0x50, 0x117, 0x7, "277f47db290480c98052f10957fa78dc97189f34b3a620f5ea9d64230777721268f2f5c142d3d3b81dfec495e42a963a7b7ebe714a3464ce88e758261ef578"}], 0x570}}, {{&(0x7f0000001780)=@sco={0x1f, {0x6, 0x2, 0x101, 0x0, 0x2000000000000000, 0x3d71}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001800)="aca27623f9f0e3c7a0545ecfc93c63b96ebae78855045a9d98f63419c8e8faed95278da2d856fe16e1d7646c53", 0x2d}], 0x1, &(0x7f0000001880)=[{0xa0, 0x11f, 0xa7, "19e0329549a538a053c98544018af853aeb1a09a9cf034fff9058865c69c337d99ad084c7528dc27f40309bdf8de0171a00bb636be0601cd72dd4a1b558b5fa264dcb213bb2e1c9d2fc0e6ac6849dd4c1dd55e52783e8814530291b5a4e2827365276d54310f6c401ad60730767cc215f4c380a0b1dcea79833e3f4e7b2f2f58218b688d6ce88be7f75078"}, {0x28, 0x10e, 0x7, "c11a50452865951794b5e3c584a2dbd8f0f453"}, {0xa8, 0x11, 0x5, "7774c0463415e9bc36c97765be7704a694ae0f7f9e706329c03904a9f7456a0719383330ceef9fc595171f88942e3abaf1fc3826021e978e01704aaf02154da5aaa39e8dc0b7d9066f7f9cda51bd860b7db1c00c531c7f5b417ddc46a5156c18fc55a88a5544f5b4c523dec73f611c7bb2f348a8e1845816b13ad6670f9d8b55fc9e228d0de02e4900d094bab14bb1cbc615"}, {0xa0, 0x107, 0x80, "4c25a2cc90f9a5c01cf48c53feaaed52f939cc11eceaef9f7704eac9738257c8899939590bbfc8f48cfe9252d904ce91e01dece53f4f3a81094326b56a308e73521450b665b7033564c719127fb2ef77eb71a864ebf3dab557198988a3b3d5f18086b1b178a894bd64337a03c2c8b1a63eafd9e5687d1740acf281d4d5fd2b0bde6dee44f9d117f71082"}, {0x28, 0xcdaca1fb05c9bc6c, 0x101, "5b64291a43548969bdf9fcc2a24923561b7a6a3fb7e671b0"}, {0xe8, 0x18f, 0x1, "8015da658d39adcc4cf4ee685884922daa7f3d6ce31f9ac49fcccb844527bd551981ae907cc5d6e96cdbd0fde5dff6aea76ef030f79778eb242bc56663de442bd835000da008f3408ccb7edb8f2cb53b4c46008dc3d73f82ff25434af8bc4755d942ac784b4ce87eb28686dfd376fdef51d949f3fc0633e7615835f1d1b4f2965b97fcac9252bdf79c750d4083d7b504ff85851ad3f5792c687873325202f7daf92b1a3954378f7dc33e6c193e6c6c8b1a5957b773f4ecd91ecdd9a32aa54d500bf23f2e6954a49d65082ff42a2675bf1423795a3b378e7a"}], 0x320}}, {{&(0x7f0000001bc0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c40)="32d63d3c80f18e32abaa5180d96b1d1ea0be80657e22144a6efee42b40882e964287ea7f97d512cfb822ba724fe6d3526934cd5bdbcb925ecc8145cb32537783d6ea38d2f8cf9abb230abcd474a216ddca37b6d22192ddef9474e066f95770057e9c421c8ab2ec7c3f6a4ec4c8b386be94ab86a401981f9a5bea6d321793ec15f9dbd4952b8a7b8740ad816b34a0810d95c6ffdcc65a670b38ea2837c6b9e8e67f5203d109ef65161f1bb4c32a1549475e5e18d3e3330cc16d841f2d5b1c10d24075c20a250e398f26de55f585e67e137321497b68b3dde31d2835", 0xdb}, {&(0x7f0000001d40)="22e151ac4ef798e7c166a2bdf82755d9831f4b553ae3ec9f8a383751dbdfefa397cb6f8bedf431b1bca1c89c0bf9ce83df434cdb3b292f5ba6e64c3532f533ae5c9ea5526ff90e12df787ee902a7f4f22f6d451c6c53fcaf15bfc139f78f707af1b1bf5879c62df2c2a3e1989cfbc679d0", 0x71}, {&(0x7f0000001dc0)="f016a0102affe53e4e105dde5f0fd98dd900f577ae5759d42cc7d8a94266798974d1fa43805200e842cfd9a21814f74177d299f001771fee1818b15500cf3594a07361f70ec0affd029bece330fed26bb06bb797574dea2e99cfa5b6eadf", 0x5e}, {&(0x7f0000001e40)="28fdce55c9f564468df82b23e950529ea49e610e9bee22bf6c745ca9d3aa7ff8c1306959314c6e342e38315fc95f5c9ffb02ef92b15a1b1787b957651e", 0x3d}], 0x4}}, {{&(0x7f0000001ec0)=@ipx={0x4, 0x1f40, 0x8, "d659fae00d10", 0xbcf}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f40)="a5e30ea3bf760424e8bd337adc58ff679c74e452b9c04d4e8b66cf93912b8ec6e8b60a1ecc3a0d9a332098c1eab9d25b2ca340e537f80cb3e9d52de84dd2264d6af3459c5bb430631e540218bf9a70072f43d6aa37be287c7bfd00ce5af2572209c21d563e006c50073f85ee", 0x6c}, {&(0x7f0000001fc0)="a60c123975ba5a92b5adf4", 0xb}], 0x2, &(0x7f0000002040)=[{0xd0, 0x0, 0x8, "4a6b28d8d7b96d679843fcb232cb6bd1773d03c0fa35883ed1fe9487ecc1cb95922716bb687cbf14c7dbe94b953343290f407fe9b895d6f7a03dbefc6a865b54d7006071a3af7e15244cabf099deced968cfba3ef4905e3866556afacb9b8253dd41a13de470ec559e9fb5e4f8adcf587e690999e47489dd2f0966bb4d91301ab2f67547fde083f3de64a5340aedf9b4fbeaa2fb3054c358c1b2457f920c8799cfbf716db87ce189c476884e58c716f48fe61d526cedfbcda5"}, {0xc8, 0x117, 0x8000, "45b9d64104d8090cbbe2a75482b34261a1dd54e8caccae15900bdd2cf2d6d819a2523e54016a0282400658e5f45e7f7485a15bb706bbbccbd3726d4acb0da75fb4dbc28cca4660cf3065946080c43c6a5a35a98307a96dfc9871197c2f569d1399870e893349acece0c0ed926d3b697c35f2f0900e0b5b3c4c7e761303b15893e1fa0da890903e351c589e73062c012fa6374ff2761b5b6ba096e169c64bffb8105f40caf0fdadb7e5f93552f9942b81bbdcae1453"}, {0xc0, 0x108, 0x8, "8df2e937132d7c911801a970519c8e0ea049f27dd9442347bdd781782128ed2c4a6c5b8cf3bf5ab045f6daae240f52272490553c1091d9934e1b69ed1a6ab3e06c34c4763ad2279f52f375c8e89b7b5d6cb5762e712caeaabb18b07a59ab786b7075dc7d36534f6640926749cc2a7b7e3da8ad347ecc1be9200ca10d40667f277f18356f5a2d12325ffcb10a6a79fdb4e2d54701aee9d93539a66b8b19c5c49e183e831ad01a8b36ed"}, {0xd0, 0x1ff, 0xef0, "5ae2757bee6a98fcfc361a1d95b207d808c9b0a6dbdca6976046bcdf0b2e8112e9df2e05d8e9149fe83573ce8d360c6858a7c90cfaed999d11c885859a79b08fc77a0f5094fd7af076ef3cb88ab21d86039cd1924587c02eb46b3a8d838805c4289def7f43f87092fd90ce3856b64f528af7a76b3efcbac55915c4ab10925c010250f46409014292ae318e7747c8384699d3bc7951a94d5369dc8d5ba085a5e39a92f1a56996f9214f9054dec605a92f54961b66a1caa0d5f80594e6d39fefe2"}], 0x328}}, {{&(0x7f0000002380)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote}, 0x4, 0x1, 0x4, 0x4}}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002400)="12df9c780600b91cd8029ae6394c7d4f83fb2218d1c5f6f01f487bd1adc04cd09c04b5b862e90090c54f02b7f2e6f1072051a315710f5ab69e3262a7a68b1070c3e292ad1b99600d9398a791a37066ff4f8898af44dca682fc23d15b7571655b6742fd03e38c8587ee0afe814b79050828308ab5f564733f9469bf44a96faadb2679ca559e1f267b", 0x88}, {&(0x7f00000024c0)="19eb3ad8ed97b818d5", 0x9}, {&(0x7f0000002500)="9e3c84b557c27c9009c7affa967b751fe5af56e51b260e51a4bd94984261af6388bc7bcffaf48f0510d74271a9323a97e6703e45964d2b5f3e27d21c81e087c22ebe5f30a94a8bc081c4ff35c20f7d4132352096d691bea166ee21b5b0b9d13e624003649ff1ec0c03780e9db095fee056ff4af25d7dfbf16fe1bd", 0x7b}, {&(0x7f0000002580)="7cdc37532b520127ccb4c61bae77a05579722a6fec6365f1ba615a110283dd387a1f6feaf2623517ef98fc72994f58f846575c64880c97e04df69b8a88a631c65a1d7addae23dd7ee717352e91814302e2be9afc63ce0f673fb4841bc125727ed2f61d83ea41199ee02c0ce130fa3b5cd0411ad7f5af7b24b59e2bee0f58f95b76083b1a30987ce77970e456f060e2e2f14c153c4e4d3adc5df541998f290ae610739ad6254622d4b1c06e2bc13169d4a63624b670e7098878170bd5ffdf6029763308796ece13cea4e1af91b1cac3ec1e847cf41874f4545a1d1d82c64f2927187e83c4e452254dd8", 0xe9}, {&(0x7f0000002680)="87f5722a0a7a8cb6a9dff1fb9271b2e613a18f56fe95da774fda463b43019b9f3653736e8b477c0d4c31e6e8fa6ba3a9b698638b4b9e00e8b22f069d6a8e195be14f2157248050acea925bcc517f0b1dc5c298c220d475a01749efd8d5d5087b2600ad328076f57c78945d2afb369b3150a95208f8d2dee278347cd0b40f5188d17a875b7e62bc6d86a234ff8fe84c5e85466b4ab786e04d399c56063425610e81bd7393bb849cd3c1c13ced4e", 0xad}, {&(0x7f0000002740)="ee9fa4be887349380eaac2ac42b85d8396920d966b9761a5d4a6919cd9b9e99fb57726ce48e6cb8d76b5907932543d849f557d7f4ff17b6c8288ba4ea7927968a987c12368bdc101a9703770e564e5cd7d5cca9e47fe2ddaaa0078339f7c446e45c956218e93370885a4d48000", 0x6d}, {&(0x7f00000027c0)="58bcd4c9ede50518bde528719b82286dbbb734fb30b905dc3df57c72a97b2fa2de79a7e0cd7dd4217e88c0c53ed17d3b109108f39686c053108a8348d955f719bb755796a376d4bf9274c7ebca45b6c6d32dea2a0fb7ca21cf7abc29dec25149a8f1ffcc7a2341ca46de2636310e21530caeb2017aee4dafd0bbba23988c5ae6aedd3fb1a213ea6859d17da4fdd0afe9b4b283cdb035614af79f40230484a751ee31a2877d2270ac071d120261c7d41fa90811e08d891b4ce6ee4572c8e59a1999f0d3f70f63bdc03df1da45185e424ddc99b0f4888a0cab05ff6f34be8be869c88b69b36f7ef9104fe44d946626fd75f68842db", 0xf4}, {&(0x7f00000028c0)="5320cdd42af40da806a0af9efd58b24aa8ef8f2d4c970b7749d3b8e54bfcf65e74e6d1b4cd534a13da387fa4537fadae1d50324ad790c7fef5f208a1c05f5142b873a4d6994c187e043082bc136e233c6a33028616ba8b3b0abb4acb562b7dee239ad8af0aec65e4ed1a469c76718cc41653b662b694826b08e20c7c4a6a7b0bf3fa4d7b91c54b6a02a22e06d682cb9b38412c880ba2a3a91fa846a05f8617b301b148aa5379054bd5ea62e50344a6b2dadf54c93c5a9fb5f8fb413a9a595b05e9e083edc611b24fa59a31638f434af6a1ef1aee", 0xd4}, {&(0x7f00000029c0)="442060043b8b7defb0f75d94f80f6b796cc30b4f2c", 0x15}], 0x9, &(0x7f0000002ac0)=[{0x20, 0x112, 0xff, "6d4af127b9b607ba12"}], 0x20}}, {{&(0x7f0000002b00)=@caif=@rfm={0x25, 0xffff, "a9fab169aee3ddad5e7dc77ee7e3233f"}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002b80)="a0d58f179e5138353c7862e1fca11f5c5fccb3bd61f9a20c1041af588e88a32f3b75947c52bda7e9be8d2bedb8ecd775169187c4ce87a34aa7a62cc20e078286b9037f93c79014b93c3195ab09c24a4b8d15d3a0a44e42cc307768020ccf28", 0x5f}, {&(0x7f0000002c00)="254a8189ed4ac73e9d8a7cbb12ba6242867a94ab219d5d421eabc3c57462619abd6594ffdd43d65ad746757933749830cc1e03d58cf4bb0fc881549b7da7feabe95ee9fa0db4bd9b254bc707ba1fd533065c534c32de7e90f9c75da93d8661b4fbf2fe9fb6dd9f685809c9da38f5df1b6221768e1ddca1da6e556eac65f14254d1e708abf4c7149765be25cc14f35621e3539c18e4ac368dbf6d98402332937ef7464e51be8d4aa1e47db238c621bee2236cb04f45c1c0492367e06cd5dde748357b48cb", 0xc4}], 0x2, &(0x7f0000002d40)=[{0xa8, 0x19d, 0x3, "98b9cb93e04bba8d16cb83be9727746d84fcfdf14e1b523c531a92314c534caddb11b09aa57c7cbe909d96a0ef0b1f49a1c17ade95b93456a6b8d230ba175323494c9b0af7112e53545fd2e147b6fc50bf8fc099ad51ae49db2fee9ca578af605608c1c57e711e258320da7c1de6659f4bfd8080251b37b652122a6ab4cb6b66447830c98f20994398806b3f35a88a5923b5a919"}, {0x98, 0x11f, 0x1821377b, "5b92618354b44da938e9bf90f74ccc2842454e2219814642139326a5a6c67d84ffa827f72d2fae8786157d48d89e574b8adc3c7dfb984211aa48319b2aa62fbcdcbbbde51e1890a9cc2a825de01f3fe893bcd4cb41110b11ce6a6ace00cdf28f23420a2c523cdbfd243bfaa9301c15eff25568203db2ad9c5b9bf3f02248eaa484e218"}, {0x70, 0x102, 0x40, "5105c256b2032a362342d785e12e67ac0cd4fa0c08d9c6f7b0fd06c86af05aa6153ea09b6635ec5cbc5830d095326e2f6c08c41a923a5670883468711036ad1cc234a76c7b75e98232ea60c284d64fb5365558b00cb7cd530bdbabfdfb"}, {0xa0, 0x117, 0xfffffffffffffffc, "016849167be77068a416e2d697cd99e08386e8c5e2c748f4220f504d704bd608e927dfe76b7a5635c636f703e94865484dfd336859ab021acab7de27b8f0f58d58c50c773243cb9df701687ba4d605611c4a9f274cfe4b1cbdd9b95c975474863d0ebd6cd62ec728eadd5ad06b31ff37d826c1c18bb254690b73d07998ecbfd41b2056cf79a0776b66ad80a009"}, {0x1010, 0x29, 0x8, "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"}, {0x90, 0x108, 0x9, "28d30e8bea07a8f4f872ea767a83eb153612e1fc39d23a2623348a5f52f93cbcf2f863cc7bcce6cea5eca8a2158eb8bf50b4a226ccbba625b7a7addc4719cf65bffa029906b9cd2a31f32d0b8c193ab6e726d1d035e2d7c4e80486e19b0f7ef41b3ebdd51643b2107f7146559720bc8b1f15eeaedec88d11b92612"}, {0x18, 0x109, 0x9, "3c4f4787e4"}, {0xb8, 0x10a, 0x1, "0f485c7e6abcdfbfcab47ad82e7da1a699dd4cebdd00848c2b35d984887283ac331b1c446604ccc2aa11bfbe6524fab5118c7d7043b7ad6afedb91a94e99e6c5715a43abea19db3b2e9db787eadb57188ba9e30a597f789a5c74e432c4666970ea92990317dd467dc5a842cc02a27a5bd4fc2594b52d9c31477846a3de3126d6108ae407f43c0624551c8fc83ca5365752cd45535e0877542c1f4833e1f8b2650fd2"}, {0x78, 0x10f, 0x9, "5cb10e8009e6b98d63613cd33c7d42b32126f296918fec66be0906182805ba8f6df4ba121adff6ed20cd672aad5fcd51f37473ed86e39a5f32db9ce41d31dd77e82f17840f4748f4409597d07bfd20df129f51f79cc0a722a5c12387dc19190ee055b9"}, {0x68, 0x110, 0x5, "6535e7b6352f555f6b82300729bd66ea2866faa0f4b7d5a6c0546e376d672876fa5ea49edaa089c134489f2a23f93499a545ce4e8acf6af2ea362e27cfc5345eb0c4ef67d5c3d61a3feac6b3c2ff6af352"}], 0x14a0}}], 0xa, 0x4000) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:21:26 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:26 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0xf) 12:21:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0xffffffffffffffff, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) [ 2014.713238][ T7555] fuse: Missing mount parameter(s) 12:21:26 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2014.742997][ T7563] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg$sock(r0, &(0x7f0000008300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003600)=[@txtime={{0x18, 0x110, 0xd, 0x2000000}}], 0x18}}], 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) r3 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0xf21c, 0x8000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @rand_addr="b0d9d8022e8fddf3cb2917aeb43a9731"}}, 0x3ff, 0x6, 0x1, 0xea2, 0x5}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e24, 0x6, @mcast1, 0x4dd}}}, 0xdc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'tunl0\x00', r1}) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xe0040000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)=@newtfilter={0xa0, 0x2c, 0x500, 0x70bd28, 0x25dfdbfe, {0x0, r1, {0xfff2, 0x5}, {0x7, 0x6}, {0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x8, 0x5, {0x5, 0x5}}, @TCA_RATE={0x8, 0x5, {0x80000001, 0x7}}, @filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x58, 0x2, [@TCA_BASIC_EMATCHES={0x4c, 0x2, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_U32={0x20, 0x61, {0x4800000000000, 0x3, 0x9, 0x0, {0x0, 0xffffffffffffff01, 0x9}}}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, @TCF_EM_CANID={0x18, 0xffffffff, {0xee9, 0x7, 0x7, 0x0, {0x2, 0x1}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xf}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000140)={'veth0\x00', {0x2, 0x4e1d, @rand_addr=0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r5, 0x3, 0x6, @local}, 0x10) getresgid(&(0x7f00000004c0), &(0x7f0000000500)=0x0, &(0x7f0000000540)) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='fuseblk\x00', 0x10000, &(0x7f0000000580)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions'}], [{@subj_user={'subj_user', 0x3d, ':#.\\}/nodev$]bdev}&^$:posix_acl_accessvboxnet1trusted\x9d'}}, {@subj_user={'subj_user', 0x3d, 'proc/user'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_lt={'euid<', r2}}]}}) 12:21:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0600"]) bind(r0, &(0x7f0000000380)=@ipx={0x4, 0x3, 0x7f, "716abfc335d2", 0x7f}, 0x80) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) sendto(r0, &(0x7f0000000280)="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", 0xfb, 0x8000, &(0x7f0000000000)=@generic={0xa, "44ff4732a94f6a71eb327260ac33e0de19c998a72ee3628dc4c8dde4dbb9598eb63cf66652d23b8457d16407377f5efe01ce039cb33219d2e841b5628edeab72d8d729459b37abf84d89273a2c2a7bd6cb4a0f0ae665f6b3b35d959020b0c9018cab248132f8cf6710365238558eb0d23ce755929dce01480c2f25c81675"}, 0x80) [ 2014.944355][ T7673] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:26 executing program 3: r0 = gettid() openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x101000, 0x0) signalfd(0xffffffffffffff9c, &(0x7f0000000100)={0x7fffffff}, 0x8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x40, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x8000, 0x0) r2 = dup(r1) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000080)={0xfbf0000, 0xff, 0x68f, [], &(0x7f0000000040)={0x9b091f, 0xffffffff, [], @p_u8=&(0x7f0000000000)=0x4}}) r3 = fanotify_init(0x0, 0x0) read(r3, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:21:26 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x20000021) [ 2015.063524][ T7679] fuse: Bad value for 'fd' 12:21:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00\x00\x00\x01\x00', 0x0}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x2) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40a641, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) 12:21:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:28 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa4250", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x107}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d9ca9220d94f1a1a7e2339256b32f06e6b1b3c23d89b2dc1cea28d88bf0e2e325903f60454a5b6e6da5a0911ed4fdf7ad62350c4b0d785b18ac8be8927b0fbb3801de0af02c0e023d25870b026748ffa4fa13eddb81aaefcabbe99569ea5d664c48ff0f65a1c0b153a60ee9ee655444527f8f385237c7327bf5a2dafca4976833338976efe661bc8381", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000140)={0x7, 0x4, 0x4, 0x6, 0x1}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x6, &(0x7f0000000040)=[{0x3, 0x8, 0x1ff, 0x40}, {0x1, 0x4, 0x4, 0x3}, {0x100, 0x7, 0x8, 0x6}, {0x6, 0x1, 0x401, 0x9419}, {0x7, 0x7, 0x5, 0x8000000000000}, {0x4, 0x2, 0x8, 0x8}]}) 12:21:28 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x1, 0xe6, 0x3cc9, 0xb06b, 0x8, 0x3, 0x6, 0xdbae, 0x8, 0x3f, 0x4, 0x60}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f00000000c0)={@null, @bcast, @bcast, 0x63, 0xff, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20000, 0x0) tkill(r0, 0x14) 12:21:28 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0\x00', 0x10c) [ 2017.510016][ T7799] fuse: Bad value for 'fd' [ 2017.529492][ T7805] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2017.537343][ T7807] fuse: Bad value for 'group_id' [ 2017.546648][ T7806] device syz_tun entered promiscuous mode 12:21:29 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2017.569673][ T7803] device syz_tun left promiscuous mode [ 2017.622077][ T7892] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2017.638997][ T7900] device syz_tun entered promiscuous mode 12:21:29 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x50) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:21:29 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00000000f0", 0x24) 12:21:29 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2cdf"]) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 2017.666907][ T7803] device syz_tun left promiscuous mode 12:21:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000040)={0x4, 0x1ff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) ioctl$KDADDIO(r1, 0x4b34, 0x7fff) [ 2017.785876][ T7923] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:29 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000002", 0x24) 12:21:29 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x102, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000280)={0xc0000000, 0x10f, "a7168ba6b44c4034efee13fbadc95ef4852203a53ce42feab6bed6f4e8948828", 0x8, 0x3ff, 0x5, 0xffffffff, 0xff, 0x1f, 0x8, 0x0, [0x0, 0x3, 0x1, 0x1000]}) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) [ 2017.915162][ T7930] device syz_tun entered promiscuous mode [ 2017.948520][ T7926] device syz_tun left promiscuous mode 12:21:29 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x200000, 0x194) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r0, &(0x7f0000000280)="8ab040f5334d55a4d7331062b75d3ef2138764c726e94ddede406cb8e32066cb9426cd9dfdabf89e26f0ce372d01036d25466e19f682bc88bd8c65d416e4fc5086c58ce8815975c099a7fba8771c7acda3f415a1a873a757048fc9be3a80bd1d4e0f3b0e3fcb3c9c1161b98b15b2024e96f73dd43e1a8281e963086ba34892e926b1b8c7ef77401c044e9e9fa7acf9f35e3cf7963f69fcd2800041d358", &(0x7f0000000340)=""/124}, 0x18) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 2017.991712][ T8033] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2018.017286][ T8035] device syz_tun entered promiscuous mode [ 2018.042151][ T8035] device syz_tun left promiscuous mode [ 2018.090566][ T8040] fuse: Bad value for 'fd' 12:21:32 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa4250", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x107}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000003", 0x24) 12:21:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x7, 0x36, 0x9, 0x79, 0x8}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000140)={r3, 0x1f, "489ca3af55a1c155f1a1c6a70313a74aa5454f8b57187a0f18c65eaee8efea"}, &(0x7f0000000280)=0x27) 12:21:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="210000000300000000ffff000000000000000000000000f25014a5000000000000"], 0x21) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)="930cc0c84d00b3a52fa868ddbe866511d7026b59cd28ac52521ff6cb22373baa34537655fb6e473841f6458b0bcc06343c3349d4d078764c08ae", 0x3a) 12:21:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x17, "04b753f1e78ef792ffce225bfa309e4409a38e295f25b8"}, &(0x7f0000000040)=0x1f) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r2, 0x39}, &(0x7f0000000180)=0x8) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:32 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x10001, 0x4745504d, 0x3, @stepwise={0x5, 0x700000000000000, 0x0, 0x1, 0x6, 0x10001}}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 2020.596500][ T8156] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2020.622955][ T8157] fuse: Bad value for 'fd' [ 2020.629364][ T8158] device syz_tun entered promiscuous mode 12:21:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000004", 0x24) [ 2020.666114][ T8154] device syz_tun left promiscuous mode 12:21:32 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000009c0)='net/wireless\x00\xf3\\\xfb\x8f\x04m\xed\b\x00\x00\x00\x00\x00\x00\x00\x86\tS\xbd\x8d\x7f\xf2\x17\xf1\r\xe4]\xb0E\xc9k\xfe\x03\xf8\xd4W_\xab\xf30;\xf9\x19~W9L\xf5\\#C\xc1;~i\x01\xceb-_W\xfb^\xfe\x0f\xd6V\xe7=\xf8\a)\xe37\x04\xa5~\x9f\x93\x1b\rZl\xc3eHln\xa6\x87*\xbc\x84-\x06|\x87!\xd5\xb4\xd1W\x8dw\x98Er\xe2\xd7\xc2\x1c\xfa\xd8=M\x88\xb4\x98/c\xb7Ke\xe6/\x06\x059\xe4\xfbS |\xf1\x04\x18D@\x8f\xd1D\xa7\xc0\xb9\x0f:\x02\x7f[M\xf5\xc0\xaf\x9d\xfd\xe2\x1d\x9b\xf0\x8cv\xbd\r\x00C\x97\xbf\x84\x0e;\b\xf0\xe7\x16\xfb\x18\x94\xb0nQ\x9d\x11\xc1\x8e\xdc\xf5/\xffVV\xea\x19\xc1.\xda\xcd}s;\xc7$k9\xfa\x1c\xda~Qt\xc3-\x80uD\xfc#G\t\v5S\x10\xa3\x93\x11\xf7\xe6\x10\xa8e\x13-\xf7\x98\xba\x0e\x97$\xc0\xb4n{\xc3#\xe6\x12&iM\x8c\xfa\x01\xa9$z\xf0\xb6\x86x-V\x1b1+\xb7\xbd\x04\xe5\\\x05\xd4\x13k\x9a_~n9\xc2\xcb0H\r\x8a\x19*\xbc6\xdb\xb7\xc5\x89\aF\x15N-\xa9\x9f\x854\x06qA\f\xe4\xe0\x1a5\xb32\xa5\xc5;(B\xccK\xca\xac\x95\x97\xf8\xa1\xb9\x12\xfc\xb5\xe9W\xc6\xe9\xce\xbb\x8e\x80\xedk#\xe0\xfdM7\xcch\x9fdg\xb9Q\xc1$\xcd\xa4\xd0^\xc4\xd8\xf3\xaf\xc5\x87S\xa5f\xfa\xda\x06\xb7%/\xda\x83\xa0\x91cY|\x8f\xdfi\x9aX\xbe\xe8J\xa4O\r\x95\x05\x81\xdb\t\x8d\xdf\xb2y\xcbc\xfb\'\x94\x1b\x97\xf7|nY:') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r3, 0x84, 0xdd}, &(0x7f0000000280)={'enc=', 'raw', ' hash=', {'sha512-ce\x00'}}, &(0x7f0000000300)="0a4a8cffd5045685a7c5345d2d1d622e4664b61bfd7a6413fcf170120553e19fadd3019a17a56f4d6ef5ae3a77cf80b166048fa49685ba45dfefd54c90f3d6008426e3e7c27147d4736a78ac1928291e40527d6c68c2acce91be2a2f58e4e00168b43d049afd8dadc4b5e148b6f9f1f76cbaae7b8b6745f2375fab41c24a18811d213a0d", &(0x7f00000003c0)="fd3430917c8bc2901b4374a9f8e02fa1bc6d24901e3755320a39d420d1e6fdaa9185823528cddd9d82b557939dea419864ff4a2c9d938cbe0b75e7b20f95160d8e5e7746c1307e9b54c7a35c8c3c8e17d0535c0b72f35a0907c45a54da43bc72b581dece4d1b9cf88eb61de9c9dda44f55545a856fba2169b565dbdb0110569da561fa495e9efd72a8d2000b3c9dd1e773209751ab1a3b1ea5c506e8c556066a4b29f80904c374a57f09ade5856f6be6ad0334adfd7e04a49273f4e084d395db112ff9b103265d714a3b4c4b4e20bc8e2153c4df3cda9a9e6e1b649a87") mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000000)={0x21}, 0x21) 12:21:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:32 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa4250", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x107}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2020.772087][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2020.777925][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:21:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="8d6569af6585c487aaadad0c5cdb0e83b10bcfed2ef200a9018221210c3412509eb0938d63f678238d7aab2eb973e0545ed47bff3ff1", 0x36, 0xfffffffffffffff9) keyctl$read(0xb, r2, &(0x7f00000001c0)=""/225, 0xe1) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) [ 2020.827611][ T8269] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000005", 0x24) 12:21:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) [ 2020.962974][ T8278] fuse: Bad value for 'fd' [ 2020.971917][ T8279] device syz_tun entered promiscuous mode [ 2021.027005][ T8276] device syz_tun left promiscuous mode 12:21:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) flistxattr(r0, &(0x7f0000000180)=""/36, 0x24) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='fuse.', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa001}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1a00}}, {@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}]}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000003c0)={@initdev, 0x0}, &(0x7f0000000400)=0x14) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000600)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x68, r3, 0x301, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x4800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', r2}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in6=@loopback, 0x4e20, 0x0, 0x4e20, 0x7, 0xa, 0x80, 0x20, 0x87, r4, r5}, {0x6, 0x7fff, 0x30, 0xdc6, 0x8, 0x8, 0x4, 0x9}, {0xfff, 0x2, 0x1, 0x4}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3505, 0x36923373ed22b7c5, 0x0, 0x5, 0x5, 0x4, 0x6}}, 0xe8) 12:21:32 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x5, &(0x7f0000001440)=[{&(0x7f0000000140)="d820026b5b85eba6436b6f9371d3a7b23b865a0f28eced9661e8c7642faf0e08774f6964889e6d9ea85080ef41158ce65aee43c0e0b22cd4ad01e40fc3c13b74b820f4ca09c48555e060d888b80a", 0x4e, 0x4}, {&(0x7f0000000280)="47cf0caafe3929d5b50f7f6c39dc4e9dbbfc70daacabca2c91ff253808956665476622f38296d2946e4318a46045e1b9aed6144e23bbc2734e257f511deba2273c04d7", 0x43, 0x5457}, {&(0x7f0000000300)="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", 0x1000, 0x9}, {&(0x7f0000001300)="bacce1187b59b6b12b30005763ba2ebcbcf284c7988a3a6fcdfd1a9104870245f127349b65b6c92b41930a80274a30ab66d81748ce95f9b56ae123ea1e5ccb9f4381638aec196001291caeeb80c10b83283d7edcb9982910445877693236429a72b533e5a553089a9d0670acc6c76135feb2cde39f75f136d7b351b71302079b4e37189957b6d1e19c96839f182c53bbdeb7b346f3a7066c05a9c1c88cdac0a99d5420a8bd8b3f2ab67c4f1e777af3eab152b55ca2772166e8961fa833df5c1b4941de901916cf0b0306a469ea9ad3a547f72288031127ce5b0faa0a4ef572929dc474e4b0ae", 0xe6, 0x4}, {&(0x7f0000001400)="48c559fccda4e3e93d84bdcfdd144909175d20f0", 0x14, 0x3}], 0x2000, &(0x7f00000014c0)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@shortname_winnt='shortname=winnt'}, {@utf8='utf8=1'}], [{@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:21:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0x6, @broadcast}, 0xffffffffffffff53) [ 2021.126036][ T8391] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000006", 0x24) [ 2021.385204][ T8506] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:33 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x40000000, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x30}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r3, 0x808, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x430, 0x230, 0x118, 0x0, 0x348, 0x348, 0x348, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6350, 0xfff, 0x3}}}, {{@arp={@multicast2, @multicast2, 0x0, 0xff000000, @mac=@remote, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @mac=@random="8d5089d5096c", {[0x0, 0xff, 0x0, 0xff]}, 0x0, 0x1, 0x80000001, 0x0, 0x10001, 0x70, 'veth0_to_bridge\x00', 'lo\x00', {0xff}, {0xd07d294ffd870022}, 0x0, 0xa0}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x76f) tkill(r0, 0x14) 12:21:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) 12:21:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x80, 0x3, &(0x7f0000000480)=[{&(0x7f0000000280)="7f733a1a9ed53a1dfb91ec3c3b6d265120ea7212538e5b21973dc30d2153bbc3775125f847c196b77e2c83b2c3945f62776f3154a0d1bd765ee82b75a1821479b541f311", 0x44}, {&(0x7f0000000300)="aa49d5c1a50bf5de88b65c5df9140528c1459d13e7da45fddd954589f5fef521ffc9ffcc44e7f9296c41241396de6efb17250d706f44fa4af6c9468bf51b14bd8db1d67e209cefb2e464dd8bd4f39a4f419e8f0451185c285f384ca7d962f2e6d1261dfde3bea2134232cebc8355e9dce2fb4a7e0cacdf3820b2b6589cc08afa6783f55e6eeae3ff27984c95eb22c797221e3489189e6757d497c578c8bb0435e6637ece6c7f027432af4e36278e1405d253629cd9f595af903942558aeccb443af8d5ef766212bf", 0xc8, 0x4}, {&(0x7f0000000400)="8239d88f3fcb0fee1c9a50ae8de404a4c872f936a593895125fd6d11ea1cbe1f5252a549c9bd38dbe834831f192f46a3009f592d777202cd913354f099ff7a650d4b6d928a08cf8c5f45321e2cab46e109772f6a75bd61da9a6036552c760fb4e7355eeaa4e323d61d3e620b", 0x6c, 0x411d9a73}], 0x10c0, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000140)=""/92, 0x5c}, {&(0x7f0000001280)=""/220, 0xdc}, {&(0x7f0000001380)=""/206, 0xce}, {&(0x7f0000001480)=""/173, 0xad}, {&(0x7f0000000040)=""/52, 0x34}], 0x7, &(0x7f00000015c0)=""/159, 0x9f}, 0x4}, {{&(0x7f0000001680)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001780)=""/144, 0x90}, {&(0x7f0000001700)=""/64, 0x40}], 0x2, &(0x7f0000001880)=""/89, 0x59}, 0x2}, {{&(0x7f0000001900)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001980)=""/176, 0xb0}], 0x1, &(0x7f0000001a80)=""/30, 0x1e}, 0x5a}, {{&(0x7f0000001ac0)=@ax25={{}, [@netrom, @netrom, @null, @default, @remote, @null, @bcast, @rose]}, 0x80, &(0x7f0000001b40), 0x0, &(0x7f0000001b80)=""/85, 0x55}, 0x2}], 0x4, 0x21, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="27004200030000000000000000002000022540dea85b292afac1e8e16a7c6d000000"], 0x27) [ 2021.581806][ T8515] device syz_tun entered promiscuous mode [ 2021.585416][ T8517] fuse: Bad value for 'fd' [ 2021.614363][ T8513] device syz_tun left promiscuous mode [ 2021.665949][ T8564] device syz_tun entered promiscuous mode [ 2021.673759][ T8513] device syz_tun left promiscuous mode 12:21:35 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10a}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:35 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000007", 0x24) 12:21:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0xf6, 0x4, 0x2, 0x0, 0x4, 0x9, 0x400, 0x2, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000280)={r1, @in={{0x2, 0x4e23, @loopback}}, 0x4, 0x3f, 0xf26, 0x8001, 0x4}, &(0x7f0000000340)=0x98) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000100)={0x8, 0x3, {0xffffffffffffffff, 0x3, 0x7, 0x3, 0xf3d9}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000000)={0x21}, 0x21) 12:21:35 executing program 4: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) r2 = geteuid() setresuid(r0, r1, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x40000, 0x0) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000180)=0xffff, 0x4) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000340)={{0x3, 0x3, 0x3, 0xf63d, 'syz1\x00', 0x8}, 0x1, [0x0, 0x7fffffff, 0x9, 0x40, 0x7f, 0x2, 0x6, 0x7, 0xffffffffffffffc1, 0x20, 0x7eb3, 0x6, 0x1, 0x4, 0x9, 0x100000001, 0xae7, 0x2, 0x0, 0x4, 0x343cc4c4, 0x10000, 0x8, 0x450, 0x81, 0xc1b7, 0x0, 0x9, 0xfffffffffffffffb, 0x4, 0x9, 0x0, 0xb2, 0x80000000, 0xb9f, 0x52, 0x1, 0x8, 0x10000, 0x1, 0x4, 0x20, 0x9, 0xcb, 0x592, 0x7, 0x800, 0x6, 0x1ff, 0x8, 0x3, 0x8, 0x2, 0x2, 0xfffffffffffffffb, 0x5, 0xffffffffffffffe1, 0x6, 0x7d, 0x7f, 0x3, 0x9, 0x9, 0x2, 0x0, 0x9, 0x85, 0xd3, 0x10001, 0x4, 0x7, 0x2, 0x20, 0x9, 0x1, 0x0, 0x0, 0x6, 0xfffffffffffff7c7, 0x100000001, 0x7, 0x400, 0x100000001, 0x100000001, 0x1, 0x64d, 0x9, 0x0, 0xd1c, 0x100000000, 0xfffffffffffffff9, 0x628f, 0x7, 0x0, 0x3, 0xffff, 0x81, 0x3, 0x2, 0x7, 0x7, 0xfffffffffffff801, 0x7ff, 0x8, 0x2, 0x9, 0x0, 0x2626, 0x2, 0xbd96, 0xffffffff00000000, 0x4080000000, 0xe5, 0x70, 0x5, 0x4, 0x2, 0x1, 0x9, 0xba8, 0x20, 0x7fffffff, 0x40, 0x1, 0xd6, 0x54, 0x7, 0x7fffffff0000], {r3, r4+10000000}}) 12:21:35 executing program 3: r0 = gettid() r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x181000, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = fanotify_init(0x0, 0x0) read(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) tkill(r0, 0x14) [ 2023.978139][ T8635] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2024.004083][ T8637] device syz_tun entered promiscuous mode 12:21:35 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000000a", 0x24) [ 2024.027772][ T8638] fuse: Bad value for 'fd' 12:21:35 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10080, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000280)=""/199) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="66643dc23470f76b7cf944354a8f05a6179be86e22d2e966817f0549f760f61df7fc19787c31380b52dd2990246a03ce137285d7c41628eb46385576e9196f57e8609ba9b48e6710bb30ac23eff4c6d9f04ae6e32f496f029d21526d84491ab3758a9c9eb8ca506a64166e0bc7d97cd432e0e5ba9c0de9951a9bd8c4fb6af056bb037171f967", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000000)) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2100d3275a7ad6547cbec73206d6c60d000000000000000000000001000000f5ff0000000000000000004486ef790799b4790e2b5c25"], 0x21) [ 2024.088777][ T8632] device syz_tun left promiscuous mode 12:21:35 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10a}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x4) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2f, 'memory'}, {0x2b, 'rdma'}]}, 0xe) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d303030303030303030ff303030303030303034303030322c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=':group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) [ 2024.206533][ T8750] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:35 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000000c", 0x24) [ 2024.288840][ T8752] fuse: Bad value for 'fd' [ 2024.315995][ T8752] fuse: Bad value for 'fd' 12:21:35 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getresgid(&(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:21:35 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10a}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x90000, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000040)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10200, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={r4, 0x9}, 0x8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) [ 2024.369444][ T8764] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2024.383278][ T8762] fuse: Bad value for 'fd' 12:21:36 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000000e", 0x24) [ 2024.549181][ T8801] device syz_tun entered promiscuous mode [ 2024.591364][ T8782] device syz_tun left promiscuous mode 12:21:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x800000000004002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, '-selftrustedtrusted'}}]}}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r0, r0}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:36 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="66803d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 2024.643064][ T8878] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2024.682944][ T8881] device syz_tun entered promiscuous mode [ 2024.699462][ T8782] device syz_tun left promiscuous mode [ 2024.708836][ T8882] fuse: Bad value for 'fd' [ 2024.827086][ T8954] fuse: Unknown parameter 'f€' [ 2024.851046][ T8954] fuse: Unknown parameter 'f€' 12:21:38 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) ptrace$peekuser(0x3, r0, 0x6) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:21:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000000f", 0x24) 12:21:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x5, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:21:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="210000000300000100f979af000000000000000000e9acf6518200000000000000"], 0x21) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000100)=0x3ff, 0x4) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) 12:21:38 executing program 4: r0 = accept$packet(0xffffffffffffffff, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001400)=0x14) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000001440), &(0x7f0000001480)=0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001340)={0x0, @multicast2, @initdev}, &(0x7f0000001380)=0xc) recvfrom(r1, &(0x7f0000000340)=""/4096, 0x1000, 0x140, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x440000) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000000)={0x97, &(0x7f0000000280)="f8a4d60d43e29d7614d1b0a7c0f8f73615ecc6cd730c573773c97cf4ec2365a100227460f9c1ea9c1ecef59c562d20744cb789bf077897245af3085ce140cc26aaac831e117a7587660fb6cd205b872076efffbc03bbfc46682c846394079c7ffb245c63dd37eeac2aa8ad9b22645a7f58118d7c5a5315b4a3e808a70586ab5ffc4ddc4f48b6137b81cf31bd6b5eceaf73d5a742c6580e"}) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) r3 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x7ff, 0x200303) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f00000001c0)={0x101, 0x7ff, 0x7}) setfsuid(r2) [ 2027.017366][ T8997] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2027.043167][ T9000] fuse: Bad value for 'fd' 12:21:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000010", 0x24) [ 2027.190805][ T9078] device syz_tun entered promiscuous mode [ 2027.248596][ T9114] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2027.257541][ T9056] device syz_tun left promiscuous mode [ 2027.316426][ T9078] device syz_tun entered promiscuous mode [ 2027.324126][ T9056] device syz_tun left promiscuous mode 12:21:39 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be8970000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10c}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:39 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2100000003000000000000000000000080c06ce1d6fdc1470100"/41], 0x21) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x81, 0x7, &(0x7f0000000780)=[{&(0x7f0000000280)="701d2cbfa181874e7a3ca2e2838a2f83d16a6e4cc7e1b7e358dcda888731890ad73403e18ecb2e8397920406d1d448ba99c46a47f975de2246406610b7143bc1f371abf79c965503612b0d2d26c70dea36af99e4df6f9f3b932a08f8d6016c8eef0dd1cd6abc324931d9a3bcc0e1336d59ba88bdb2586dbf0ed4977ba0c144ead9824fc9d67052867018ccb500613e5dfa848cace496f4297c380c28066c6f66249d629c7643238863201b72566e39b41e4b029dc2eb7fb4f911e00cd4497c123a99a1c54443f4f109e106669e6e38d69931f765f494", 0xd6, 0x100}, {&(0x7f0000000140)="affa1a38a28beff06db736c6f640c76eaa2275d15597cc64cd473b61c01b6e7ef8ec3c6dff70db83e985d69478da63d6782219547d4590fa8ee82eb36ee7fc985adff74bbca4075edca4650c916e48ffb80c06a6a2830a303f675ac7", 0x5c, 0x9}, {&(0x7f0000000380)="0ffa4d9f8d7a0ab46339f91e95bbc73c690ceeba8e511ddaa83e65321aeb14c6d404e8ad8212c06aef1f20c148a5e465f7eb3dc1a592e4db8e3224d09d641a7da97d848c48b8a6f103e0eba35e663c470698e489e6dc220ed097066bc555cb054c6528b9c9d50e37d419129c860a3ee998cd8dcdff26f9d4198254a7bd1b17212670650502bfd5abf7fc52f5b78c40b717ab37396349660014c702720ea486661516b4bd6b2504578b7ad2d1a63b2c630a9ed6ecea2e7e682c4f8af617e9eaf284b988d8af35823470944272df71", 0xce, 0xcc}, {&(0x7f0000000480)="d3d7dc42c026f3315e2f53479b1ec4fd611625efa7687a31fab9931201c3242be83655372a16ba6e3b8f8f3328f7f1c9d3f9772ac423b7e8f1a08df56dc043313517116f6bf406d9f4fc0a8d7509088dbfbc2bc895b5ec5582139ce5a091dbee9bf27651aacb1fdae74785b66b453c25e8e15f", 0x73, 0x8000}, {&(0x7f0000000500)="63af8ef80d02bbf4276451d8e83ea32e398d47082f3cf75f1456fc0565ea2bd5c8f45cff162faa1b7e2a751710b60289bf1631009d91da63871416d5a0dfd8c8d2c510946c2797be97e0910e8f81ee1c8abfd36233b6152941cf09291312faada8e6e85d108091e64137cbd88f0081e2f9744e4e9adb82bdc4aa3535ed9047a5078da946624145ddbe84190a573c36205d296de87939754b7a97c02529c323e788dadde258bb76824b5763946a9d4582036f7b5bf2de761da6d439304090275b98f63e2d2b9315e6a8bd0ff456f111697956451ac6aef27545e317202d72419b8804f236412ea42761f095e3a13fb7a4437c35", 0xf3, 0x1}, {&(0x7f0000000600)="d8268089ca90e7abac96ec5ddf9c57ae8a05377f124380ddba425c46fcd98ae22c8e41f42c5ebd8baa21b06da12a79ff6ac3da69d3d958dbb5c6ef36506b63240edb0ffbf4c42f51fb0c8ecfb5ab01eb2e937f1d6364118b6c02984d133a1dfd1dd8", 0x62, 0x2}, {&(0x7f0000000680)="e233cabd81ef979a0e75793bb3767df41f312a922d6c4b76b4715c8d4fe2206e23681c2f297adfc2565b5ef54da7c662553d5f933b954bc4d12203746f84a78f6efd413ce75a1f1e273a3f77e053adde346dd38e47298684c79f0973316d31eee48741696d3490bf2cb4f918000bcd78739ebfd587c51a7287e5335a49cd80ca19f2a3f0b29c3915754f81b9ddba4c01534d661d4c90dc21909d3452b96768a81e7751658bd60bd013b510bcf388d97480906387a4bf0e967ba6c5757f03c40fef5a6eb667ce91bc208a4b81a267c5196adedb3637e06655edd7764f736a33ca51b9", 0xe2, 0x3}], 0x288400, 0x0) 12:21:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000000)) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:39 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000011", 0x24) 12:21:39 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x202, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @rand_addr=0x1}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e21, @empty}, 0x0, 0x0, 0x0, 0x0, 0x1ff, &(0x7f00000000c0)='veth0_to_team\x00', 0x4, 0x6, 0x4}) r2 = dup3(r0, r0, 0x80000) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000001c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x64}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r4, 0x3, 0x6, @local}, 0x10) [ 2027.603316][ T9124] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2027.613783][ T9122] fuse: Bad value for 'fd' [ 2027.665423][ T9126] device syz_tun entered promiscuous mode [ 2027.694828][ T9118] device syz_tun left promiscuous mode [ 2027.781013][ T9221] device syz_tun entered promiscuous mode [ 2027.812078][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2027.817895][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2027.834105][ T9118] device syz_tun left promiscuous mode 12:21:39 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xc, 0x2, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:21:39 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000003a", 0x24) 12:21:39 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:21:39 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x4, 0x7d337757, 0x1, @stepwise={0x8, 0x7b, 0x5, 0x2, 0x8a, 0x6}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) [ 2027.994017][ T9251] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2028.027089][ T9256] device syz_tun entered promiscuous mode 12:21:39 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000048", 0x24) [ 2028.054683][ T9248] device syz_tun left promiscuous mode 12:21:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000100)=0x4) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) [ 2028.224135][ T9388] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:42 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be8970000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10c}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:42 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',Wroup_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0xe) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3a}, @FOU_ATTR_AF={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x84}]}, 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:21:42 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000100)={0x0, 'nr0\x00', 0x1}, 0x18) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000040)={0xb, {0x10001, 0xff, 0x63f, 0x6}}) tkill(r0, 0x14) 12:21:42 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000004c", 0x24) 12:21:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x4}}, 0x21) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x9, 0xa25a, 0x0, 0xab5, 0xff, 0x8, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={r2, @in={{0x2, 0x4e22, @empty}}, [0xfffffffffffff2e2, 0x8, 0x4, 0x9, 0x4a, 0x9, 0x8, 0x2, 0x6, 0xc0c, 0x10001, 0x4, 0x200, 0x0, 0x78c]}, &(0x7f0000000140)=0x100) [ 2030.705066][ T9403] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2030.739149][ T9404] fuse: Bad value for 'fd' [ 2030.763430][ T9401] device syz_tun entered promiscuous mode [ 2030.771532][ T9399] device syz_tun left promiscuous mode 12:21:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xa, &(0x7f0000000140)=0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x1000, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000000000004002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) 12:21:42 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be8970000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10c}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:42 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000060", 0x24) [ 2030.827820][ T9451] device syz_tun entered promiscuous mode [ 2030.860335][ T9399] device syz_tun left promiscuous mode 12:21:42 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 12:21:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bf6fcdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x97, @dev={[], 0x29}}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x101040, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2a, &(0x7f0000000340)="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", 0x1000) [ 2031.047433][ T9525] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:42 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000068", 0x24) 12:21:42 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x3, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) [ 2031.168815][ T9532] fuse: Bad value for 'fd' 12:21:42 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000006c", 0x24) [ 2031.194234][ T9536] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2031.396803][ T9647] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:43 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000007c0)='\x00', 0xffffffffffffffff}, 0x30) sched_getattr(r0, &(0x7f0000000840), 0x30, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r1) syz_open_dev$mice(&(0x7f00000008c0)='/dev/input/mice\x00', 0x0, 0x40002) io_submit(r2, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = gettid() r4 = fanotify_init(0x0, 0x0) read(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x668, 0x458, 0x348, 0x138, 0x348, 0x0, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, &(0x7f0000000040), {[{{@ipv6={@mcast2, @mcast2, [0xffffff00, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], 'syzkaller0\x00', 'ipddp0\x00', {0xff}, {0xff}, 0xbb, 0x7, 0x1, 0x20}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x22}, @ipv6=@mcast2, 0x8, 0x12, 0x3}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@connmark={0x30, 'connmark\x00', 0x1, {0x7, 0x8}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x6}}}, {{@uncond, 0x0, 0xc8, 0x110}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x6, 0xa1}}}, {{@ipv6={@ipv4={[], [], @multicast2}, @empty, [0x0, 0xff000000, 0x0, 0x72ad2234079554e1], [0xffffffff, 0xff000000, 0x0, 0xff], 'erspan0\x00', 'team0\x00', {0xff}, {}, 0x32, 0x8, 0x2, 0x20}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}, @common=@mh={0x28, 'mh\x00', 0x0, {0x10000, 0xfffffffffffffffd, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x14) 12:21:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @local}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x501000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x4) write$P9_RCLUNK(r2, &(0x7f0000000040)={0x7, 0x79, 0x2}, 0x7) bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000200)={r3, 0x7, 0xa5}, 0x8) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000000c0)={0x1, "d64cf01b8de51617aef0e239ac330d648898a42a1faa5e5587b77b3a40ed6017", 0x2, 0x1ff, 0x2, 0x4, 0x100, 0xc}) 12:21:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000074", 0x24) 12:21:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/227, 0xe3, 0x645, &(0x7f0000000040)={0x0, 0x1c9c380}) timerfd_create(0x7, 0x80000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) 12:21:43 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x82401, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) splice(r0, &(0x7f0000000040), r1, &(0x7f0000000180), 0x7, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 2031.633411][ T9659] device syz_tun entered promiscuous mode [ 2031.649184][ T9661] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2031.680079][ T9655] device syz_tun left promiscuous mode [ 2031.690230][ T9662] fuse: Bad value for 'fd' 12:21:43 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) 12:21:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000007a", 0x24) [ 2031.738016][ T9659] device syz_tun entered promiscuous mode [ 2031.760771][ T9659] device syz_tun left promiscuous mode 12:21:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x80000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000006c0)={0x53, 0xffffffffffffffff, 0x39, 0x2, @scatter={0x6, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/98, 0x62}, {&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f0000000340)=""/205, 0xcd}, {&(0x7f0000000440)=""/216, 0xd8}]}, &(0x7f00000002c0)="c6ebbb160c0e1d511c6e90bcd49c51f587a09aff3da9511e1fb4f245aad9919a341d2ac3cc2dff19ea6acf4ac2a0fbeb43c435f520e6165fec", &(0x7f00000005c0)=""/144, 0x0, 0x10, 0x1, &(0x7f0000000680)}) perf_event_open(&(0x7f0000000780)={0x7, 0x70, 0xff1, 0x6, 0x0, 0x800, 0x0, 0xfffffffffffffffb, 0x5000, 0x8, 0xffff, 0xbe1b, 0x2778, 0xa, 0x6, 0x1, 0x0, 0x3, 0x5, 0x10000, 0x6, 0x4, 0x7, 0x7, 0xffffffffffffff7f, 0x2, 0x2200000000, 0xfffffffffffff001, 0x100000000, 0x8, 0x2, 0x1, 0x5, 0x2, 0x100, 0xffff, 0x7, 0x9, 0x0, 0x4a47a833, 0x4, @perf_bp={&(0x7f0000000740), 0x8}, 0x400, 0xfffffffffffffff7, 0x1, 0xe, 0x3, 0x5, 0xf18}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa) r1 = socket$packet(0x11, 0x6, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) 12:21:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000000)={0x7ff, 0x3, [0x1, 0x3, 0x0, 0x7], 0x9}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 2031.885405][ T9777] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2032.055192][ T9783] fuse: Bad value for 'fd' 12:21:45 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:45 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00000000f0", 0x24) 12:21:45 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="66643d2739fe6e7bb8882265113a3c8de1945a155272beab74e8639dbb5a3d1a482c261bf4a9d16f5570ce8d14dfe8a5ee347a0ddac0200ab14946e6f00a503a471e31dfcfaf48ce388bd85e02a866868f4f498a6783997eb154bcef95cc9b2d9d0a12f028bb1095a114258716c64bdc665ba39b1f3bf00abcdd7721623aa45fe82c0f4bd456e820c700fc6fa062d1788efe7f35605b016a4ca9a155a7ad49c1b6cf93744906e62c7f4882fb99beeb17e4a6fce32d225e8f3ce0ae737f3692c7c971493c673ee212a7ea6855b3bd3d4e7668fb5edaed88627be57ed8", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:21:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) 12:21:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0xe000, 0x9) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e0000000800000001044a008d9c0fe47c21dee5a453ae2444f7d8618591c73875aa106222e4fbff7f0000340631c40b338d4ed115f4bb0e6fb79931ace7b637ad2d8a70224db9e0b80b73727e7d6ad6b11df6f30961"], 0x56) 12:21:45 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) tkill(r0, 0x3d) r1 = gettid() r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80001, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000280)={0x4, 0x200}) r3 = fanotify_init(0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x44) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @rand_addr=0x89, r4}, 0xc) read(r3, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x15) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x86001, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000140)={0x1, 0x100000, 0x3, 0x1, 0x6a3b668d}) [ 2034.356631][ T9902] device syz_tun entered promiscuous mode [ 2034.371850][ T9903] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2034.376383][ T9901] fuse: Bad value for 'fd' [ 2034.390852][ T9898] device syz_tun left promiscuous mode 12:21:45 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2034.451416][ T9901] fuse: Bad value for 'fd' 12:21:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f0000000280)=@canfd={{0x4, 0x4, 0x3, 0x5}, 0x34, 0x3, 0x0, 0x0, "0c68b845fdc3e48a27d35643177e69979b553c982403a02695fc6b14c699ffae369e19d20ee0bb706f2847453b6e735b693a6aaa105cfbc989009367608e1891"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:45 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:21:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfcef, 0x10400) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040)=0x4, &(0x7f0000000080)=0x2) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) [ 2034.580581][T10013] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:46 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2034.641196][T10017] fuse: Bad value for 'fd' 12:21:46 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f79653d30303030303030303030303030303030303034300800322c757365725f69643dd3c99a7e2c355ce00835bf428015450e9db08d26b9b7207e579160add8d7f9bf465fcbafa9fd3e1527d1588d6dd4235967b6c534bad986f0066b46b2526b5ffa7890364555a1d6e2ae1f942b26a6720cc33df65531795cfe41bf872558723a5739230259ee36bb3068c5cd79f10e07add399bdce6bd11af7fb85829be66d89064f3b8332810ebbe2079f8655dc93730e61ccf7eda9dd6b2c353def88fc7d38ed709e1a04747e7436d8e4b53968f947dc949f9474d38e61", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 2034.735872][T10028] device syz_tun entered promiscuous mode [ 2034.756520][T10019] device syz_tun left promiscuous mode [ 2034.795318][T10125] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2034.916812][T10129] fuse: Unknown parameter 'rootmoye' [ 2034.935809][T10129] fuse: Unknown parameter 'rootmoye' 12:21:48 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000280)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:48 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0xf00, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4) r3 = socket(0x40000000000001e, 0x1, 0x0) recvmsg$kcm(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:21:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) move_mount(r0, &(0x7f0000000040)='.\x00', r0, &(0x7f0000000100)='./file0\x00', 0x15) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) 12:21:48 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffffffffffff, 0x402200) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000000c0)) tkill(r0, 0x14) [ 2037.446801][T10146] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2037.469342][T10145] fuse: Bad value for 'fd' 12:21:49 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2037.492047][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2037.497887][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2037.515412][T10143] device syz_tun entered promiscuous mode [ 2037.521820][T10142] device syz_tun left promiscuous mode 12:21:49 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@subj_role={'subj_role'}}, {@dont_hash='dont_hash'}, {@appraise_type='appraise_type=imasig'}, {@euid_eq={'euid', 0x3d, r1}}]}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:21:49 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2037.594941][T10185] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x111200) accept$alg(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) 12:21:49 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) getresuid(&(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)=0x0) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000000)='/dev/fuse\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x80, &(0x7f0000000380)={'trans=xen,', {[{@cache_fscache='cache=fscache'}, {@afid={'afid', 0x3d, 0x5}}, {@access_client='access=client'}, {@debug={'debug'}}, {@loose='loose'}, {@version_L='version=9p2000.L'}], [{@uid_gt={'uid>', r1}}, {@seclabel='seclabel'}, {@fsname={'fsname'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@audit='audit'}, {@dont_hash='dont_hash'}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x77, 0x31, 0x0, 0x66, 0x7f, 0x38, 0x67, 0x64], 0x2d, [0x37, 0x62, 0x37, 0x63], 0x2d, [0x77, 0x7d, 0x62, 0x63], 0x2d, [0x36, 0x36, 0x62, 0x77], 0x2d, [0x0, 0x7f, 0x66, 0x32, 0x37, 0x77, 0x65, 0x34]}}}]}}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 2037.783673][T10265] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:49 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2037.827912][T10269] device syz_tun entered promiscuous mode [ 2037.840078][T10267] fuse: Unknown parameter 'subj_role' [ 2037.847360][T10266] device syz_tun left promiscuous mode [ 2037.891113][T10271] fuse: Unknown parameter 'subj_role' [ 2037.899690][T10270] 9pnet: Could not find request transport: xen [ 2037.922327][T10270] fuse: Bad value for 'fd' [ 2037.926968][T10275] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:51 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000040)) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) 12:21:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xffffffffffffffc1}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:21:51 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:51 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socket$bt_rfcomm(0x1f, 0x1, 0x3) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:51 executing program 3: r0 = gettid() r1 = fanotify_init(0x3, 0x8002) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r2 = dup3(r1, r1, 0x80000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r3, 0x420, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80000000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x240}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x400c1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 2040.545202][T10389] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:52 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x40000) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000040)={0x0, "25d89d7e03a59249974064757005013940b67cf3878770b7da61f35a2aed36b2", 0x7, 0x960, 0x4, 0x400, 0x6, 0x4, 0x9000000000000, 0x101}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:21:52 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2040.591473][T10388] fuse: Bad value for 'fd' [ 2040.608871][T10393] device syz_tun entered promiscuous mode [ 2040.628401][T10382] device syz_tun left promiscuous mode 12:21:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x31c, r1, 0x700, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0xe8, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80000001, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x400, @rand_addr="2c0a1120352a8c26471048831a72b22c", 0x10001}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @remote, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xf8, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @rand_addr="8a5819d273579194d7ac42958237a3dd", 0xba}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0xffffffffffffffff}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040080) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000000)={0x21}, 0x21) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000100)=0x6000) [ 2040.685519][T10433] device syz_tun entered promiscuous mode [ 2040.691474][T10382] device syz_tun left promiscuous mode 12:21:52 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x100, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000500)=0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000480)=0x50e0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') write$selinux_attr(r1, &(0x7f00000004c0)='system_u:object_r:crash_device_t:s0\x00', 0x24) sendmsg$FOU_CMD_GET(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x54, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x6d}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x8000}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x73}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x4000) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="00fb3d04009dee0bd052f86258c9e5bed46100ea80f61756d81eaceca43440e82c58df2d5a95bddc0a0700407844af0500000047859c9df6218612240605912645dbac4b678d"], 0x3d, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643de88391f0ad564835373895ed91051295037463adf5b3e4b11395804059f55f1b5c65b58d7866721fcda953759696cd937ef8", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:52 executing program 1: arch_prctl$ARCH_GET_CPUID(0x1011) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) [ 2040.835042][T10508] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:52 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2040.961334][T10514] fuse: Bad value for 'fd' [ 2041.012039][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2041.017928][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2041.022857][T10517] device syz_tun entered promiscuous mode [ 2041.025635][T10519] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2041.039878][T10513] device syz_tun left promiscuous mode [ 2041.105829][T10578] device syz_tun entered promiscuous mode [ 2041.126137][T10513] device syz_tun left promiscuous mode 12:21:55 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000380)={0x0, 0x0, [], @bt={0x8, 0x8000, 0x3, 0x8001, 0xdacbc99, 0x8af, 0x2, 0xb}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000280)=""/237, &(0x7f0000000040)=0xed) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="860024e0d56de2d682", @ANYRESHEX=r1, @ANYBLOB="30253030e6303030303034303030322c757365725f69643d000000000000000000000000000000befc38cdc897ae5b9ea8bc080000000000000049388f4148b6acfb8bb18fc7f9808e440e9598f5ebac15fd1aafc7708f8068994fef1519f0a808708305fae0a54bf9021e41be3e25034749e78510543a96a2af50301c4d6d33e9ae51f860bf635cf290c712219f02cb115e027b55ebeebbc793060516dc38885c05d4f76f772d92", @ANYRESDEC=0x0, @ANYBLOB="2c6708470e3a6e63ea9609abf39abe3e3a4d726f75705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x2008fe, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x21) 12:21:55 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000003c", 0x24) 12:21:55 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) getsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000280)=""/149, &(0x7f0000000100)=0x95) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:55 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x100, 0x0) accept$inet6(r0, 0x0, &(0x7f0000000280)) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x9, 0x1f, 0xdf02, 0x1}, {0x0, 0x100000001, 0x5, 0x8}, {0x0, 0x1000, 0x8, 0x5}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x2, 0x100000001}) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_STAT(r4, 0xd, &(0x7f00000000c0)=""/129) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000002c0)={0x9, 0xffffffffffffff00}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000080)={0x7, r3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 12:21:55 executing program 3: r0 = gettid() r1 = fanotify_init(0xa, 0x2) read(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x1, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000100)=""/58) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x10400) tkill(r0, 0x14) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'tunl0\x00', 0x1f}) [ 2043.637340][T10636] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2043.658130][T10630] fuse: Unknown parameter '†' [ 2043.686881][T10631] fuse: Bad value for 'fd' [ 2043.696825][T10630] fuse: Unknown parameter '†' 12:21:55 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x6, &(0x7f0000000140)=[0xee00, 0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) fchown(r0, r1, r2) mkdir(&(0x7f00000001c0)='./file0\x00', 0x20) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000000)={0x21}, 0x21) 12:21:55 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0xdf5b09a4) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$IMGETDEVINFO(0xffffffffffffff9c, 0x80044944, &(0x7f0000000000)={0x4}) tkill(r0, 0x14) [ 2043.732077][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2043.737958][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2043.841792][T10710] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000100)=0x1) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0xfb, @local}, 0xd) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80, 0x0) write$P9_RMKDIR(r3, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x0, 0x2, 0x6}}, 0x14) 12:21:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) syz_open_pts(r0, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030322c757365725f69643d3cafe78faf464aafae35432f23c3710329f369f1a92e510019bde07b39cfc518e3029a860db99bd7ae228068e6027bd59126ee74b119c80f69852c16f8cc19be72b2b7ba77039355ff9329a07a2e7383d398020af0d43f29", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000003c0)=0x80000000, 0x4) r2 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000280)="cff6b5219ae24e6add6fce34d43da9ae2b594abf0e3267373de5d99a864e735298099ecc7ac1521da46d48748f35807c6ca5f09b45fc84468063412d17804b7c74af8d99a727fc7518061fc87841bd33acee34e2bab547b1c780df2c74798f1a7ca963bef9ead142953a18b3b045003a07cc20a8be1698dd0742e1cc214177aa570b12e526cfc11f2d4e262977551eb4fc02b54a3d5019234e41d6f6d5c3f4076db8e7be46268104cb39479d915d51b72984d8e225bf8ffad9a1d3f4c7285bed2c279f1ce74eb89325edbdaed3b7577dee1e9384cd3742d88fdc9c251f3a", 0xde, 0xfffffffffffffffa) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r2, r3) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000400)={0x1, 0x4, 0x7fffffff}) 12:21:55 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2044.052938][T10763] Unknown ioctl 8817 [ 2044.060929][T10765] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2044.141364][T10767] fuse: Bad value for 'fd' 12:21:58 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:21:58 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2cf17709be91cf21e3d3c4e8f75c4129e978ecfc70e98180f226b2f377d00f68f52fb2bf5f68af03a35d95ebc2b8cbca5862f57a75844aeb38fef598fa1b9b9050f5af80f2d37cda14b4217d9f61417302955512913eaf444656e19d0c87d72f221a7b5766b14835658680b034383cce65178eefca7a538d7cfdc5fab9a86c735c88dda6504d2c72812e11e50c1f8fb3e6211f78b8454aee876f5fc07beffc897a4cecf2e7caad5095befe8c18ea94a8920ee7a16412bd5187767dc53900000000"]) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/61, 0x3d) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:21:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000001d", 0x24) 12:21:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x40) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='syz_tun\x00', &(0x7f0000000080)='mime_typeGPL\x00', 0x0) 12:21:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000000)={0xfb, 0x8}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:21:58 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0xfffffffffffffeec) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 2046.716519][T10883] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2046.742455][T10881] fuse: Bad value for 'fd' [ 2046.749307][T10880] fuse: Unknown parameter 'ñw ¾‘Ï!ãÓÄè÷\A)éxìüpé€ò&²ówÐhõ/²¿_h¯£]•ë¸ËÊXbõzu„Jë8þõ˜ú›Põ¯€òÓ|Ú´!}ŸaAs•U‘>¯DFVá ‡×/"{Wf±H5e†€°48<ÎeŽïÊzS|ýÅú¹¨ls\ˆÝ¦PM' [ 2046.784166][T10885] device syz_tun entered promiscuous mode 12:21:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:21:58 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x34102, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000000c0)={0x0, 0x6b, &(0x7f0000000040)="b5c9baf0b53176fcf166333f683fe8b6b38e2297620860596a5cc3eb072d126a2da153ead51a47726793fa4274eec032a1e9c3eb69103854f4d3c2c9d374996b2b5dda9feab28a98863edde9eef3c7d6e1f0d09900e7891d112ec5d5b9723ec94d4e5eab24c9e5a1beda5e"}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x101880, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:21:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) r2 = getgid() fchown(r0, r1, r2) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) [ 2046.828704][T10882] device syz_tun left promiscuous mode [ 2046.837871][T10880] fuse: Unknown parameter 'ñw ¾‘Ï!ãÓÄè÷\A)éxìüpé€ò&²ówÐhõ/²¿_h¯£]•ë¸ËÊXbõzu„Jë8þõ˜ú›Põ¯€òÓ|Ú´!}ŸaAs•U‘>¯DFVá ‡×/"{Wf±H5e†€°48<ÎeŽïÊzS|ýÅú¹¨ls\ˆÝ¦PM' [ 2046.907690][T10885] device syz_tun entered promiscuous mode 12:21:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000280)=""/216, &(0x7f0000000180)=0xd8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 2046.951111][T10885] device syz_tun left promiscuous mode 12:21:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x200, 0x0) inotify_add_watch(r1, &(0x7f00000002c0)='./file0\x00', 0x40000000) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', r2}) r4 = accept(r0, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r3, 0x3, 0x6, @local}, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000380)={0xffffffffffffffff}, 0x113, 0xf}}, 0x20) r7 = getgid() getresuid(&(0x7f00000009c0), &(0x7f0000000a00)=0x0, &(0x7f0000000a40)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@multicast2}}, &(0x7f0000000b80)=0xe8) mount$9p_fd(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='9p\x00', 0x1000011, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend='noextend'}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@aname={'aname', 0x3d, 'vlan0\x00'}}, {@uname={'uname', 0x3d, 'em0/vmnet0wlan0lo-*md5sumposix_acl_access'}}, {@afid={'afid', 0x3d, 0x9}}], [{@fowner_lt={'fowner<', r8}}, {@uid_eq={'uid', 0x3d, r9}}, {@dont_hash='dont_hash'}, {@subj_role={'subj_role', 0x3d, '-&'}}, {@smackfsdef={'smackfsdef', 0x3d, 'syz0\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0x3e}}]}}) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x3, 0x6, 0x2, 0x4}, 0x54, [0x29, 0x2, 0x0, 0xffffffffffffe169, 0x1f, 0x32f3, 0x20, 0x200, 0x4, 0x5, 0x1, 0x20, 0x9, 0x10000, 0x101, 0x4ac0, 0x0, 0x4, 0x1, 0x7e09f01d, 0x20, 0x200, 0x400, 0x9, 0x8, 0x9, 0x5, 0x7, 0x3, 0x200, 0x221, 0x8, 0x7ff, 0x3, 0x1000, 0x4, 0x0, 0x80, 0x72d, 0x3fe000000, 0x3, 0x81, 0x5113fe73, 0x5, 0x1883, 0x2, 0xfe2, 0x2, 0x2, 0x1, 0xf6, 0xde3, 0x1f, 0x1, 0x8, 0x8e1, 0x4, 0x3, 0xdc, 0x9, 0xda9b, 0x2, 0x7fff, 0x80000001], [0x100000001, 0x0, 0x2, 0xbd6, 0x5, 0x7, 0x5, 0x8, 0x4, 0x7d8, 0x0, 0x0, 0x3, 0x10000, 0xffff, 0x5, 0x7, 0x1, 0x1, 0x2, 0x81, 0x1, 0xffffffffffff8001, 0x2, 0x639, 0xc600000, 0x401, 0x200, 0xffffffff80000001, 0x9, 0x2, 0xef9, 0xbf0d, 0x10f, 0x6, 0x200, 0x200, 0x4, 0x7fffffff, 0x3, 0x32680, 0x238f, 0xeab, 0xdc82, 0x7, 0x200, 0x4, 0x3, 0x2, 0x6692, 0xf4e, 0x4, 0x1, 0x6, 0x101, 0x1, 0x800, 0x1f, 0xffff, 0x7f, 0x500000000000000, 0x1f, 0x80000000, 0x8], [0x32b, 0x20, 0x401, 0x81, 0x4, 0x1f, 0xdd8, 0x80000001, 0x1, 0xed, 0x6, 0x8, 0x9, 0x150721e1, 0xc8a1, 0x8000, 0x9, 0x401, 0x9, 0x3d0c, 0x4, 0x4, 0x800, 0x9, 0x65, 0x7f, 0xfff, 0x3, 0x5, 0xffffffffffff0001, 0x8, 0xfff, 0x100, 0x1809, 0x3, 0xffff, 0x7, 0x7c52, 0x9, 0xdf, 0x401, 0x100000000, 0x2, 0x3, 0x2, 0xf24, 0xd49, 0x3370, 0x8, 0x9, 0x9, 0x3ffc, 0x5, 0x101, 0x1000, 0x1, 0x3, 0x3, 0x5, 0x1, 0x5, 0x7, 0x7, 0x1], [0x1, 0x7, 0x8001, 0x2, 0x69, 0x7ff, 0x40, 0xfffffffffffffff7, 0x3, 0xffff, 0x5, 0x100000001, 0x1, 0x1, 0xffff, 0x5, 0x1ff, 0x0, 0x5, 0x7fffffff, 0x1, 0xfd6d, 0x7, 0x3, 0x3, 0x4, 0x3, 0x36, 0x6d1cb616, 0x5, 0x100000001, 0x20, 0x0, 0x0, 0xfffffffffffffffa, 0x4, 0x1f, 0x4, 0x7, 0x9, 0x10000, 0x2, 0x6, 0xfffffffffffffffe, 0x81, 0x2, 0x44, 0x100, 0x104ad12d, 0x1, 0x40, 0xfffffffffffffff7, 0x9, 0x9ba, 0xffffffffffffffff, 0xfb6, 0x6, 0x292, 0x0, 0x9, 0x3ff, 0x1f, 0x7, 0x4]}, 0x45c) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x1, r6, 0x10, 0x1, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100}}}, 0xa0) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f00000001c0)=""/166) [ 2047.014468][T11000] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:21:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2047.074905][T11003] fuse: Bad value for 'fd' [ 2047.112322][T11003] fuse: Bad value for 'fd' [ 2047.141116][T11007] fuse: Bad value for 'fd' [ 2047.172111][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2047.177974][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2047.298104][T11112] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x800080, &(0x7f0000000400)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@access_any='access=any'}, {@version_L='version=9p2000.L'}, {@posixacl='posixacl'}, {@version_9p2000='version=9p2000'}, {@mmap='mmap'}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@pcr={'pcr', 0x3d, 0x1b}}, {@subj_role={'subj_role', 0x3d, 'group_id'}}, {@uid_gt={'uid>', r3}}, {@fsmagic={'fsmagic', 0x3d, 0x554}}, {@subj_user={'subj_user', 0x3d, 'group_id'}}, {@pcr={'pcr', 0x3d, 0x2}}]}}) 12:22:01 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(0x0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:22:01 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="21000000030300000000000000000000000000000000000000000000000000000019d9ef26d6018520541412c545c80d0b808fd5121a395f8cd5d53cec3cd831be3a43eae46d4533ce7cb253aaedbbcaa6f7ff3f0cc57b31cdc570"], 0x21) 12:22:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:01 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x20000000000038) 12:22:01 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x500, 0x4) getsockopt$inet_dccp_int(r0, 0x21, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000001c0)={0x1, &(0x7f0000000380)=[{}]}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r1, 0xa02, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048040) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000300)={r3, 0x3, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @broadcast}, 0x10) [ 2049.838917][T11131] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2049.880670][T11135] fuse: Bad value for 'fd' [ 2049.884644][T11130] device syz_tun entered promiscuous mode [ 2049.892027][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2049.897933][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2049.907991][T11127] device syz_tun left promiscuous mode 12:22:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:01 executing program 3: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x7}, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)="9d0c21ddb31e10e6026ecea87490cadbc5c97731e2d8a4d89dffea66ce39c186f5bd1d8dcba5aeb614756d8f6ea70c15aafffc51f5ffb5e1b4973c737088f087ed73a13462ec5264c052197de1928e385467252a6ddb2824f03c7cd8c328885f", 0x60, r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x8, 0x1f, 0x5000, 0x0, 0x80000001, 0x3ff, 0x101, {0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x7}}, 0x101, 0x6, 0x5, 0x2, 0x6}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, 0x4) r3 = gettid() r4 = fanotify_init(0x0, 0x5) read(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = dup2(r4, r4) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) tkill(r3, 0x14) 12:22:01 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) setxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.SMACK64\x00', &(0x7f0000000140)='user_id', 0x7, 0x1) [ 2049.974216][T11135] 9pnet: p9_fd_create_tcp (11135): problem connecting socket to 127.0.0.1 [ 2050.022536][T11130] device syz_tun entered promiscuous mode [ 2050.058948][T11130] device syz_tun left promiscuous mode 12:22:01 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) [ 2050.113189][T11220] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000065", 0x24) 12:22:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2102, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000080)={[0x14004, 0x1, 0x3000, 0x100000], 0x1, 0x8, 0x4}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0x6, @broadcast}, 0x278) 12:22:01 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 2050.298351][T11255] fuse: Bad value for 'fd' [ 2050.402732][T11259] device syz_tun entered promiscuous mode [ 2050.410714][T11270] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2050.424675][T11258] device syz_tun left promiscuous mode [ 2050.478751][T11365] device syz_tun entered promiscuous mode [ 2050.498538][T11365] device syz_tun left promiscuous mode 12:22:04 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(0x0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:22:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:04 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:22:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={r1, @multicast1, @local}, 0xc) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:22:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="66643d718676f96064fdd82d60759e5f0b91de5eb7284676b5bfce457b64ef5e8572b542b1cdc0747d6ba61e5227ca7fbb43129ffe594ef787d8b129e8f800ab1b319a2a8a6cda48442a1e2a961996d64298ae609877e2f8317ca5b25a60544cb69f3495636d52cf09be541d84a8250645ad696086b25dd1eab4b94bc6c7cbcd136df5157ff864704d4534b0f9aa7cd6acce59d757486d7fb730129a582585ad68919ebe86ebc87b5970ec05f4a3abbf9eccae0e0a6c6826054c7d7159119edf35387aac73bc470ca6", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0xff, 0x80000000, 0x3, 0x2083, 0x6}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000200)="bf3fb373d3cb2bcd534444ea42e6c632af99eb662bad2c7aa6c9df618033d4a7e40528fb3966401379eccd0ee026c2bcbb844bee6022a4475191ff15b9b806abfd503f3473c8768a58a65648fbbbf0af18ff28ffe0d408e4b4317510797aefbc9b3d2bdd328df3336d41263b4a6f3413d0cc8926eefc907f9e7270831d6df1b192b85930560cf5d062315e5a95d249fc05ef54bb11d03133025b2ad63d6da7bcd8f1f3da844780601106cb5f09b2a52a56ec9a369b785107d045edd00e17af69a934e358ff0042195ba5c297b79a275b144f7eaf0b0ae8751d33455eef26e06b46616b46521ab682e60a15", 0xeb) 12:22:04 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffffffffffffff91, 0x4000) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 2052.933699][T11382] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2052.944844][T11375] device syz_tun entered promiscuous mode [ 2052.957892][T11379] fuse: Bad value for 'fd' [ 2052.961543][T11374] device syz_tun left promiscuous mode [ 2052.972259][T11381] fuse: Bad value for 'fd' 12:22:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x83, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x11, "8ba83347248dc56a3126647fd54fecae69"}, &(0x7f0000000140)=0x19) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r1, 0xffffffffffffffff}, 0x8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x100, 0x9) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000000)={0x21}, 0x21) 12:22:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000058", 0x24) [ 2053.006793][T11388] fuse: Bad value for 'fd' [ 2053.119637][T11492] fuse: Invalid rootmode 12:22:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @local}, &(0x7f0000000080)=0xffffff72) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00\x00\x00\x00\x00\x04\x00', r1}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000100)={0xff, 0xed6, 0xe6, &(0x7f00000001c0)="d6e9107e5f6a6ad938f2a575a5bd4b887c22e06bca2005294b4b4b00fc0837f119800630af1120edd2a5148a0d73a68a1b972abe92cc8c7e473a47b2cffb4b85a8053afc441b78c48643b364c9327e7717d89cf2a155c84be54bdae6505002c101b961b983547fbd87635fdd52564e20ab8880607bb07dff188523152a8173dddc7a6ec221c3d0b6675d374552744c6015c21f6b961f5c48f171b44b34e7d6051d4ceb06a1d55fc4679931ad89a18df5c2ae06b92e1e1d78c2fbd47f04c36557b9b71d9d152a48271d4404f262814544fcd7ea2c6b64e40fb7f6ae9d2cfc90223a0a98a1bc62"}) connect$packet(r0, &(0x7f0000000000)={0x11, 0x8, r2, 0x1, 0x7fff, 0x6, @dev={[], 0x16}}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) 12:22:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000100)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64650b320e2e248a6a5183daa903bc5c8b031f1576b97d6ee76e303030303030303030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 2053.162877][T11500] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2053.180081][T11502] fuse: Invalid rootmode 12:22:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="57643dc0a29ac5180fc6bb1fe05d0dc3322fecd3f314a36a8bd0c9cbd3210357c271c8bac5049ffb60e85e6386bae3b46466f762f6577f483d4aa9168f0666db0af39259dc6e24b15108d3ee20d917852d055f51f7591b11d6e36dc7453fe55e4f79a52e716e200000007ae4d7511383935426000000005ee1c3fa5aa87e91feed9a546053928216c391921e4d98fa0d", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) 12:22:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2053.268922][T11505] device syz_tun entered promiscuous mode [ 2053.281347][T11504] device syz_tun left promiscuous mode [ 2053.337313][T11512] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2053.386700][T11515] fuse: Unknown parameter 'Wd' [ 2053.389334][T11514] fuse: Bad value for 'fd' [ 2053.453518][T11555] fuse: Unknown parameter 'Wd' 12:22:07 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(0x0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:22:07 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:07 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r1}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x4, 0x0, 0x3}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r3, 0x3, 0x6, @local}, 0x10) 12:22:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'mountinfo\x00'}}, {@fsname={'fsname', 0x3d, 'fd'}}]}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0x1, 0x2) 12:22:07 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:22:07 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x340) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7d5, 0x101000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:22:07 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2056.056169][T11635] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2056.087411][T11639] device syz_tun entered promiscuous mode [ 2056.097290][T11641] fuse: Unknown parameter 'smackfstransmute' 12:22:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000000)={0x2, 0x0, [{}, {}]}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 2056.132024][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2056.137848][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2056.149822][T11631] device syz_tun left promiscuous mode [ 2056.166250][T11752] fuse: Unknown parameter 'smackfstransmute' [ 2056.180842][T11753] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2056.200080][T11756] device syz_tun entered promiscuous mode [ 2056.212038][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2056.217937][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2056.223059][T11631] device syz_tun left promiscuous mode 12:22:07 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:07 executing program 2: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="62643d1415b510daf12d3ff7358b16", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) [ 2056.237564][T11757] fuse: Bad value for 'fd' 12:22:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@ng={0x4, 0x2, "e264143e8a827e020e4b7dd2e711068d6600"}, 0x14, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:22:07 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2056.284697][T11784] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2056.377164][T11838] fuse: Unknown parameter 'bd' [ 2056.423912][T11869] fuse: Unknown parameter 'bd' [ 2056.470965][T11872] device syz_tun entered promiscuous mode [ 2056.493593][T11873] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2056.503924][T11864] device syz_tun left promiscuous mode [ 2056.566698][T11875] device syz_tun entered promiscuous mode [ 2056.575176][T11864] device syz_tun left promiscuous mode 12:22:10 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:22:10 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6ed1b63766643d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:22:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountiff\xdb?8\xc7\x18N\x88\xe46/\xd4C?\xf7?\xef\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440)='/dev/fuse\x00', 0x2, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000280)={'lo\x00', 0x0, 0x400}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) 12:22:10 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) accept4(r0, &(0x7f0000000000)=@can={0x1d, 0x0}, &(0x7f0000000080)=0x80, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'b\xe3\x13\xf8{\xc6|\r\xb2\x00', r1}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) 12:22:10 executing program 3: r0 = gettid() r1 = fanotify_init(0x400000000000000, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200001, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000180)={0xc, 0xd9, "4a613f61b7f03268a6b5ceb2941a3b332c4ce2205a39e683b5e5f32ef6a3b777ea474c76f178ac0666567c5442e2694272f7643cfd92f94c890a18bdd02b4f4619bed1da709bea6e107f98e74554ead384d8f01355eebaffdd571e119ff2eb2c7a02f759332a118e2e99ebaf36b0c180942b7889c27bfba5fc766d2ce1a67f416f8cd8c7d86747c05bcdd154248cdf25fc374cc82c479eb14e8009935b23ce792070c002ef6c9cf1f60cfa8b96a732b1fa05dc5c658c7c171fcde2d02037655386079c0737b8af19baf9ec95febc2c897fb725566b863df96d"}, 0xdf) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r0) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/net\x00') read(r1, 0x0, 0x2f0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x1, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x100000000, 0x8009, 0x0, 0xad5, r3}, 0x10) tkill(r0, 0x10) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) [ 2059.139509][T11885] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:10 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:10 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) syz_open_procfs(r0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) fsetxattr$security_smack_transmute(r1, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) [ 2059.373782][T12005] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) 12:22:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64651b30303030303030303030303030303030303034303030322c7573d0765f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:22:10 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x13) 12:22:11 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="267f"]) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) [ 2059.589404][T12016] fuse: Bad value for 'fd' [ 2059.636896][T12017] device syz_tun entered promiscuous mode [ 2059.652038][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2059.656749][T12013] device syz_tun left promiscuous mode [ 2059.686182][T12041] fuse: Bad value for 'group_id' [ 2059.695786][T12041] fuse: Bad value for 'group_id' 12:22:13 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:22:13 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:13 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000er_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:22:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r0, 0x3, 0x6, @local}, 0x10) 12:22:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:22:13 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x0, 0x3, 0xffffffff, 0xfffffffffffffffb}, {0x2, 0x1, 0x9, 0x80000000000009}, {0x6, 0x7, 0x8000, 0xffff}, {0x0, 0xffffffffffffffff, 0x0, 0x56e2c971}]}, 0x10) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 2062.263959][T12140] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:13 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r3, 0x3, 0x6, @local}, 0x10) [ 2062.311267][T12136] fuse: Bad value for 'fd' 12:22:13 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00000000ff", 0x24) 12:22:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) dup2(r0, r0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000140)={0x3, 0x0, {0x51, 0x0, 0x3, {0x7f, 0x318}, {0x401, 0x8}, @period={0x5d, 0x5, 0xe7, 0x8, 0x1, {0x0, 0x81, 0x5, 0x80}, 0x9, &(0x7f0000000040)=[0x80000000, 0xffff, 0xfffffffffffffc00, 0xfdf4, 0x7, 0x1f, 0x1, 0x8, 0x7ff]}}, {0x56, 0x5, 0x0, {0x1, 0x7}, {0x1ff, 0xff}, @period={0x5d, 0x4, 0x10000, 0x4, 0x401, {0x5, 0xfffffffffffffffa, 0x10001, 0x3}, 0x3, &(0x7f0000000100)=[0x10c4000000000, 0x1, 0x1]}}}) [ 2062.450072][T12176] device syz_tun entered promiscuous mode [ 2062.456070][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2062.462433][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2062.481742][T12161] device syz_tun left promiscuous mode 12:22:14 executing program 4: gettid() r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000000)='mouB\xf6j\xd9o\x00\x00') ptrace$setsig(0x4203, r0, 0x7, &(0x7f00000000c0)={0x4, 0x289c, 0x20}) mkdir(&(0x7f0000000180)='./file0\x00', 0x100) recvfrom(r1, &(0x7f0000000280)=""/233, 0xe9, 0x0, &(0x7f0000000380)=@in={0x2, 0x4e21, @local}, 0x80) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) [ 2062.549552][T12256] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:14 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) r2 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x800, 0x42000) r3 = accept$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000001c0)={0x8, 0x8, 0x4, 0x12e800, {}, {0x2, 0x0, 0x3, 0x1ff, 0x10001, 0x8, "9a5e0973"}, 0x2, 0x2, @offset=0x2, 0x4}) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x53, "2eaf8eaa88049b6fe2a2692362debbd2de60a7dc155e944ecb876e330155f923637516724ba06cb13ef4794328f63ee7abe67caca3e0bac192bdc99f6334c628d738a2442be39b48e3110f6c8419bd9d94171b"}, &(0x7f0000000100)=0x77) 12:22:14 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2062.711446][T12284] device syz_tun entered promiscuous mode [ 2062.725295][T12266] device syz_tun left promiscuous mode [ 2062.745721][T12327] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2062.758757][T12336] device syz_tun entered promiscuous mode [ 2062.791832][T12266] device syz_tun left promiscuous mode 12:22:16 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:22:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="21000f92ce3d47cb0981b034fbdf25000003000000002100"/46], 0x21) ioctl$TIOCNOTTY(r0, 0x5422) 12:22:16 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000100)=0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x124) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) 12:22:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) signalfd4(r0, &(0x7f00000034c0)={0x2}, 0x8, 0x800) r2 = syz_open_dev$usbmon(&(0x7f0000003400)='/dev/usbmon#\x00', 0x6, 0x41) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000003440)=0x1) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000000)=""/16, 0x10}, {&(0x7f0000000040)=""/142, 0x8e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f00000001c0)=""/181, 0xb5}, {&(0x7f0000000280)=""/127, 0x7f}], 0x7, &(0x7f00000023c0)=""/4096, 0x1000}, 0xff}], 0x1, 0x0, &(0x7f00000033c0)={0x0, 0x1c9c380}) epoll_wait(r2, &(0x7f0000003480)=[{}], 0x1, 0x0) 12:22:16 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) quotactl(0x1ff, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000100)="c8d8398f98366caab2f2869c01ebde0520f1ef86473377d996b02f0612de7df7360295652f3c95308c16b61904ecdf8b36d461b1b6ef7537c4ef02044f9b224ce92cbde31926a4b739923ce1ccd8985483a9e9c8dfcec678d0d04b3835b42ea8c996be270677508bb606438f60d454e06d4dae39d385b7b8cdcf311544bbc0048db62fb44e2a04d35cef694af744e401c61ecb7896d6f44afbae9bb969ef4920e6735f6de1878c5b87359f5a0e7c9b18efb1d1798029fb47fc631914f70719309263e470f621a66fa3fbb82e152629d81b2c19a81046a14f87ee") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 2065.368109][T12389] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:16 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:16 executing program 2: r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000080)='mountinfo\x00') setsockopt$inet6_dccp_int(r1, 0x21, 0x7, &(0x7f0000000040)=0x2, 0x4) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000002c0)="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", 0x1000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) rt_sigqueueinfo(r3, 0x2e, &(0x7f0000000140)={0x40, 0x3, 0x7d}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)={0x21}, 0x21) setxattr$security_selinux(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='security.selinux\x00', &(0x7f0000001340)='system_u:object_r:vmware_device_t:s0\x00', 0x25, 0x1) 12:22:17 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2065.471123][T12387] device syz_tun entered promiscuous mode [ 2065.503930][T12468] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:17 executing program 4: [ 2065.627887][T12502] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:17 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:17 executing program 4: [ 2065.772611][T12509] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2065.902027][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2065.907898][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2065.972057][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2065.977926][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2066.157892][T12491] device syz_tun left promiscuous mode 12:22:19 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:22:19 executing program 4: 12:22:19 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:19 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r2 = msgget$private(0x0, 0x1) msgctl$IPC_RMID(r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:22:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40001, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/155, 0x9b, 0x2003, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) 12:22:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000040)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB="6593da7c87dcb4600942f752cab7701f78b1e3fdb0f590fd20f0a04dffee7933515d5bb9585818a60bb966685549b4965d3fb5f676ecb52c47c2c7e935c862b271f5bba4afd498a4b2918eefd961d0619301923900000000000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) 12:22:20 executing program 4: [ 2068.507448][T12528] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2068.520706][T12527] device syz_tun entered promiscuous mode [ 2068.530100][T12525] fuse: Bad value for 'user_id' [ 2068.535208][T12520] device syz_tun left promiscuous mode 12:22:20 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2068.568217][T12531] fuse: Bad value for 'user_id' 12:22:20 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0xc2300, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000200)=0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB="2c726f6f3030303030303030303030303030b03030303430303032d81f7181f5b586e42c7573a8725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="210000000300000000000000000000800000000000000000000000000000ae0000"], 0x21) 12:22:20 executing program 4: 12:22:20 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x40000, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f00000001c0)=0x7, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x0, @local, 0x4}], 0x2c) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfffffffffffffffe, 0x400) getsockopt$nfc_llcp(r4, 0x118, 0x0, &(0x7f0000000080)=""/180, 0xb4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r4, 0xc0a85322, &(0x7f0000000200)) r5 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffeffff, 0x2) getpeername$ax25(r5, &(0x7f0000000340)={{}, [@netrom, @bcast, @default, @netrom, @bcast, @netrom, @null, @default]}, &(0x7f00000003c0)=0x48) 12:22:20 executing program 4: [ 2068.738652][T12543] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2068.768452][T12542] fuse: Unknown parameter '0x0000000000000005' [ 2068.809007][T12546] fuse: Unknown parameter '0x0000000000000005' [ 2068.874690][T12548] device syz_tun entered promiscuous mode [ 2068.885709][T12545] device syz_tun left promiscuous mode [ 2068.934762][T12551] device syz_tun entered promiscuous mode [ 2068.940947][T12545] device syz_tun left promiscuous mode 12:22:23 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:22:23 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:22:23 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:23 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 12:22:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x8000, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x108) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) 12:22:23 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/96, 0x60) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 2071.582448][T12561] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2071.621422][T12563] device syz_tun entered promiscuous mode 12:22:23 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2071.645290][T12562] device syz_tun left promiscuous mode 12:22:23 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000180)=[0xee01, 0xee00, 0xee01]) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{0x2, 0x3, r1}, {0x2, 0x2, r2}], {0x4, 0x1}, [{0x8, 0x1, r3}], {0x10, 0x2}, {0x20, 0x5}}, 0x3c, 0x3) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00a83b0231caa711f6501347abb702ef26c5977c29c6f6d41fc2bea93ab6d24328e85341f63bd0ab693335ae70a83287cbdd9a63c02de3c717cce8e56b880229edc91dd4e2aba378770689e407c4addeea8c2e5c3f4d0f89692776db4076f72dca52059467463401c8abc4a201004dc51d70aeaca96fd2b0687fafd64f88373c5a005f10de36da2886233ff74b83ce1b7374a4"]) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)={0x21}, 0x21) 12:22:23 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2071.751482][T12573] device syz_tun entered promiscuous mode [ 2071.805141][T12573] device syz_tun left promiscuous mode [ 2071.866603][T12583] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000880)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000980)=0xe8) accept4$packet(r0, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a00)=0x14, 0x800) accept$packet(r0, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a80)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000ac0)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000bc0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001300)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000001400)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f00000015c0)={@loopback, 0x0}, &(0x7f0000001600)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001640)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000001740)=0xe8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001840)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000018c0)=""/104, 0x68}, {&(0x7f0000001940)=""/112, 0x70}, {&(0x7f00000019c0)=""/187, 0xbb}], 0x3, &(0x7f0000001ac0)=""/150, 0x96}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001bc0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000001cc0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002200)={&(0x7f0000001d00)={0x4f8, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1ac, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x1, 0x7, 0xff, 0xfe}, {0x7, 0x0, 0xfffffffffffff3f2, 0x2}, {0x8, 0x2, 0x0, 0x9}, {0x7, 0x4, 0x8}, {0x8, 0x54, 0x5, 0x7}, {0x2, 0x20, 0x0, 0x4c5}, {0x7f, 0x80000001, 0xfffffffffffffff7, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x76}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xc0, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x1a4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0xb4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r12}}}]}}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r13, 0x3, 0x6, @local}, 0x10) 12:22:23 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x105}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:22:23 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:23 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2100000003000000000000000000000000000100"/33], 0x21) 12:22:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0xf00, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4) r3 = socket(0x40000000000001e, 0x1, 0x0) recvmsg$kcm(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/50, 0x32}], 0x1}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) [ 2072.123296][T12592] device syz_tun entered promiscuous mode [ 2072.132043][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2072.138019][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2072.146407][T12588] device syz_tun left promiscuous mode [ 2072.157758][T12596] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:23 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2072.208857][T12602] device syz_tun entered promiscuous mode [ 2072.219206][T12588] device syz_tun left promiscuous mode 12:22:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000100)=0x4) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x3, 0x9, 0x2, {0x0, @raw_data="cda047470aef8b4ee086efbc641e803550d357e6080ef3c5ad8cae0cc1d9de1fe278777bdae2e0fd67171030ca4c43a3172eb0ae5f337f2dd80fccdc598f644e0a04e0403dfe051a6748667c8e7553e71f9cba2ac486eaf73f977ace49c214af5339c5ab0babcd41a0e262484444dbeb2e9904c26fc5ca01e7f3a08a4d150883c7daae51d134e3f978c970d54145e31ba7d84d08d2335e5faef6c150e2fcd19f0aee4ccc1a05a73e3a78b4291c83721d20ae694a9670093f83fd3de9ef14a34f820c5395ad78d8bb"}}) [ 2072.279775][T12603] device syz_tun entered promiscuous mode [ 2072.298017][T12598] device syz_tun left promiscuous mode 12:22:23 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {r3, r4+10000000}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:22:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) recvmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/171, 0xab}, {&(0x7f00000001c0)=""/78, 0x4e}, {&(0x7f0000000240)=""/66, 0xfd7a}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000004c0)=""/214, 0xd6}], 0x6}, 0x100) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:22:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) [ 2072.380726][T12608] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:24 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2072.488459][T12615] device syz_tun entered promiscuous mode [ 2072.515409][T12614] device syz_tun left promiscuous mode [ 2072.581174][T12621] fuse: Bad value for 'fd' [ 2072.658471][T12628] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:26 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:22:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) fsetxattr$security_selinux(r1, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:audit_spool_t:s0\x00', 0x23, 0x1) write$FUSE_OPEN(r0, &(0x7f0000000280)={0x20, 0x0, 0x2, {0x0, 0x1}}, 0x20) 12:22:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) 12:22:26 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) recvmmsg(r1, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001680)=""/78, 0x4e}, {&(0x7f0000001700)=""/109, 0x6d}, {&(0x7f0000001780)=""/109, 0x6d}, {&(0x7f0000001800)=""/245, 0xf5}, {&(0x7f0000001900)=""/203, 0xcb}, {&(0x7f0000001a00)=""/155, 0x9b}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/43, 0x2b}], 0x8, &(0x7f0000002b80)=""/76, 0x4c}, 0x80}, {{&(0x7f0000002c00)=@ipx, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c80)=""/183, 0xb7}], 0x1, &(0x7f0000002d80)=""/116, 0x74}, 0x200}, {{&(0x7f0000002e00)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002e80)=""/75, 0x4b}], 0x1}, 0x48c3}, {{&(0x7f0000002f40)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000002fc0)=""/208, 0xd0}, {&(0x7f00000030c0)=""/248, 0xf8}, {&(0x7f00000031c0)=""/237, 0xed}, {&(0x7f00000032c0)=""/129, 0x81}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/8, 0x8}], 0x6}, 0xfffffffffffff432}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004440)=""/5, 0x5}, {&(0x7f0000004480)=""/139, 0x8b}, {&(0x7f0000004540)=""/185, 0xb9}, {&(0x7f0000004600)=""/207, 0xcf}, {&(0x7f0000004700)=""/239, 0xef}], 0x5, &(0x7f0000004880)=""/132, 0x84}, 0x7f}], 0x5, 0x40000000, &(0x7f0000004a80)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', r3}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x5, @local}, 0xffffffffffffffa1) 12:22:26 executing program 3: r0 = gettid() r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="230000000701001600236d643573756d75737872766d6e6574311770707030ff7f0000"], 0x23) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x34, 0x1, 0x3}}, 0x14) r2 = fanotify_init(0x0, 0x0) read(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 2074.852027][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2074.857899][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2074.916058][T12643] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2074.927468][T12640] fuse: Bad value for 'fd' 12:22:26 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) 12:22:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) signalfd(r1, &(0x7f0000000040)={0x9}, 0x8) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) 12:22:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x400003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) [ 2075.127225][T12656] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2075.181326][T12654] fuse: Bad value for 'fd' 12:22:26 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:26 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x102, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000280)={0xc0000000, 0x10f, "a7168ba6b44c4034efee13fbadc95ef4852203a53ce42feab6bed6f4e8948828", 0x8, 0x3ff, 0x5, 0xffffffff, 0xff, 0x1f, 0x8, 0x0, [0x0, 0x3, 0x1, 0x1000]}) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) [ 2075.235340][T12660] fuse: Unknown parameter '0x0000000000000004' [ 2075.278643][T12660] fuse: Unknown parameter '0x0000000000000004' [ 2075.338682][T12667] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2075.410962][T12670] fuse: Bad value for 'fd' 12:22:29 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:22:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'gre0\x00', 0x0}) inotify_init() setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) 12:22:29 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c49b62ae600c8d810821d4ec19e3c3a611d2ded082201d18ef24ab6f9f28fd2c39a2a854eea4a2031a408037baf65e73cd08bccfb64372b0094b2247a48caca042fcd6f1035203c40943dd4fc0a2450f71a424d0000000000"]) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2100cdb4d1f500e7ea60e4d438e3f6ba90c0f87f000000008b9800"/47], 0x21) 12:22:29 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:29 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x102, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000280)={0xc0000000, 0x10f, "a7168ba6b44c4034efee13fbadc95ef4852203a53ce42feab6bed6f4e8948828", 0x8, 0x3ff, 0x5, 0xffffffff, 0xff, 0x1f, 0x8, 0x0, [0x0, 0x3, 0x1, 0x1000]}) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) 12:22:29 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) read(r1, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x42040, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000040), 0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x17, 0x2, @tid=r0}, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:22:29 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x102, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000280)={0xc0000000, 0x10f, "a7168ba6b44c4034efee13fbadc95ef4852203a53ce42feab6bed6f4e8948828", 0x8, 0x3ff, 0x5, 0xffffffff, 0xff, 0x1f, 0x8, 0x0, [0x0, 0x3, 0x1, 0x1000]}) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) [ 2078.021299][T12688] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2078.036134][T12686] fuse: Unknown parameter 'I¶*æ' [ 2078.048138][T12684] fuse: Bad value for 'fd' 12:22:29 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:22:29 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:29 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) syz_open_procfs(r0, &(0x7f0000000080)='net/ipx\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) 12:22:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0x6, @local}, 0x10) [ 2078.204513][T12699] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:29 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2078.297504][T12701] fuse: Bad value for 'fd' 12:22:29 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f640", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x101}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2078.356278][T12710] device syz_tun entered promiscuous mode [ 2078.368436][T12709] device syz_tun left promiscuous mode 12:22:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x12, 0x1, 0x2, 0x15, 0x2, 0xfffffffffffffff9, 0x3, 0x73, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) 12:22:29 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f640", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x101}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:22:29 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2078.428143][T12716] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2078.452076][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2078.458062][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:22:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x4, @local}, 0x10) [ 2078.623475][T12733] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:32 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f640", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x101}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2080.960549][T12747] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:32 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 12:22:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000001280)='selinuxfs\x00', 0x20001, &(0x7f00000012c0)='{}&/vboxnet1cpuset@\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x10004002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001300)=""/240) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001200)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000a00000/0x600000)=nil, &(0x7f0000a52000/0x3000)=nil, &(0x7f0000000200)="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", 0x1000, r1}, 0x68) 12:22:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) capset(&(0x7f0000000040)={0x20071026, r2}, &(0x7f0000000080)={0x7, 0x7, 0xfffffffffffffffe, 0x536, 0x7f, 0x5}) 12:22:32 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x0, '', 0x4000000000000}}, 0x21) 12:22:32 executing program 3: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/rt_acct\x00') getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = gettid() read(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:22:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2081.263061][T12755] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2081.296967][T12757] device syz_tun entered promiscuous mode [ 2081.315030][T12751] fuse: Bad value for 'fd' [ 2081.329650][T12754] device syz_tun left promiscuous mode 12:22:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:32 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x0, '', 0x4000000000000}}, 0x21) 12:22:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="9220f5d7e9cc1c63adca4d6d98a46a94ece834", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0f20"]) sendmmsg$inet6(r0, &(0x7f0000001640)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0xb0, @local, 0x283d}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000140)="acdd69bc8559e449129ac9684b82282be096d059706b", 0x16}, {&(0x7f0000001280)="c0b5b9d06039af6cd4dd91cb7e99dcfcf86d98a03867cf86613d60888cdc6e547b39a2ba8526f69769c1d637cccb275010d9c9646361d9debe97c0cb120b315e5d508efd5a11b5d779a4b6eb53b2ac5605aa9f75f6c3c2af19a4cb6a1da50ea10ee494d790ebd0b55836edcde632e0b8e9a2", 0x72}, {&(0x7f0000001300)="8f7a18f5e5037194e23b9ee5b1ceec98b684d831c4b9b525009f3468165a77cf6b6bfb2d028cea1a0061cb0583022744aeb426f2895ab8e5c3353ca93567ec72939ea193ecd2b33761522a7971cff077a23192498dd49bded60c4d7a81f0e6d11e3742fc3c6834714805b257c72d418338e30fff0f29ae0fb225619217f3d79dce7a2442df", 0x85}, {&(0x7f00000013c0)="6b75eb2ff6bfbe9c7d4ff5ababd6ea2fc10b5615f7f5de6bbfc161a2eff08a208aabe9f1bd0cc90df3a81971d8a217e4d55bdbef513e2dac96538b2ee51bd087955843f57cad522ce056fd786d687eb5a12ca41f0fcf00f179bc9c8974dd0d1b62a7ac0af9c07540ead60195def0ecf313eee0dfa4342c499a495017ea51516c118dbe94425fb2f74f58dc6a19d7c07e5df3386674850f198f9a7a894ecc5656babe4b2a83f094f7e7f8b8568f94cd300f428bbb5d822b0c", 0xb8}, {&(0x7f0000001480)="934af6190ee4c52ae60e9e51488341e4e66681aec8999e46ca84c13a83fbd54bd137ce2fcb677f15f4e9414102a9e1821f87272c4071f3d5ce0015bbea2cb5aaf0ac5a7e12a86f5e5d118f20245a3daf4d8b148069b07e25370d60d3a4826c365d6f944dcd305942947f00759bd4c354395f3ce97c2cfeb7a0d687176ee66a84c339246d98b8", 0x86}, {&(0x7f0000001540)="6a782aadc24330f4ea6b74b4d1a8f20d5ec7307a58c1edced2ddd4728413ed59d9e03039a1e5917a1b3f5ca6f85e9f1aa39af9dc1071383ef5667dc861686a1a815eba524031", 0x46}], 0x7, &(0x7f0000000180)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x77, 0x0, [], [@enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x5}]}}}], 0x20}}], 0x1, 0xc081) fcntl$setpipe(r1, 0x407, 0x2a5) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000001680)={0x0, 0x1, {0x55, 0x20, 0x2e3, {0x3, 0x5492}, {0x1, 0x1}, @rumble={0x3, 0x2}}, {0x52, 0x380, 0x1000, {0x2}, {0x1f, 0x5c7}, @rumble={0xffffffff, 0x571e}}}) r2 = getpgid(0xffffffffffffffff) r3 = fcntl$getown(r1, 0x9) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000040)={r0, r0, 0x7}) 12:22:32 executing program 3: r0 = gettid() r1 = fanotify_init(0x100000, 0xfff7fffffffffffe) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mq_notify(r2, &(0x7f0000000200)={0x0, 0x2c, 0x7, @thr={&(0x7f0000000040)="f62b743c617ba47f177f46200087aa60d20465bdee93ddf156cdd41a777f5932ceee7d460450922835bbf17cf070db77c6321510983ba2f2d96bcd24aa94f63169d9909c3829269cfc64c5c3deea847f3d0448f886d50d63f220b49b753e7d3f1ed87bdb7e75217a131dce276893badd6ef47bf69da9d8e2285a18726f635b869db215bf51b21217e0d96277e9e60a1b4b35966cf1678a8cf0d634209f71edb08892470073668968310a9ceb6cb6b5866a4940208ff35ae8aa66ab31df936c76e321e5e5ddb0169cde55f034f7f924b4a9bd99958ab6549ef5335d24ae0676", &(0x7f0000000140)="06262e50187c0bd4ebe2e9c0732736378d55764b7f296c93154e6de711b7c33f9154475bb76545e0ca43d772e91330da7dc1a5c337964bc8d6bd9187501d92438cd24a76f68b0cdfedee8244b7504628a2f41433d2ef2f4d6864b50660f4db347f76fd38725a4bf4e65a35c1b2e8160c049f96044e1f461b796e681eca995fb3bf65fce07bac30fbb8b6fd710ad65735a1373d1a9426528a216076a9848b40c89e4061ca93"}}) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) 12:22:32 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x3) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) 12:22:33 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2081.526286][T12773] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:33 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x2) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {r2, 0xfffffffffffffffa, 0x0, 0x0, 0x0, @ib={0x1b, 0x7, 0x534b, {"8179ebeed69d85686291cdc0a76c8e8a"}, 0xfffffffffffeffff, 0xfffffffffffffff8, 0x9}, @in6={0xa, 0x4e23, 0x81, @local}}}, 0x118) tkill(r0, 0x14) 12:22:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2081.674202][T12819] device syz_tun entered promiscuous mode [ 2081.681693][T12837] fuse: Unknown parameter '’ õ×éÌc­ÊMm˜¤j”ìè40x0000000000000004' [ 2081.691427][T12815] device syz_tun left promiscuous mode 12:22:33 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2081.747246][T12837] fuse: Unknown parameter '’ õ×éÌc­ÊMm˜¤j”ìè40x0000000000000004' [ 2081.773655][T12892] device syz_tun entered promiscuous mode 12:22:33 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x0, 0x0, 0x0, '', 0x4000000000000}}, 0x21) 12:22:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f67746d6f64653d3030303030520400000000000000f9d6a442cc303030322c757365725f69663db0d3a36acea584dba99a8cf853db6058f56259b64039d22ebb2cf04d0eedc6611f90f4a47c7ead602d306d0dd384efd9ae30f02be1aa73399f0650a2ab5674843c9ff87da989e98a835d55dc", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x12481, 0x0) [ 2081.808597][T12894] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2081.835099][T12892] device syz_tun left promiscuous mode 12:22:33 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$unix(0x1, 0x7, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000040)=""/184, &(0x7f0000000100)=""/100, &(0x7f00000001c0)=""/196, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000340)={'bpq0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) 12:22:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:33 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) [ 2082.019565][T12910] device syz_tun entered promiscuous mode [ 2082.030110][T12913] fuse: Unknown parameter 'rogtmode' [ 2082.038700][T12914] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2082.043226][T12911] fuse: Bad value for 'fd' [ 2082.076198][T12905] device syz_tun left promiscuous mode [ 2082.089436][T12918] fuse: Unknown parameter 'rogtmode' 12:22:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:33 executing program 4: socketpair(0x6, 0x0, 0x0, &(0x7f0000000200)) [ 2082.118817][T12910] device syz_tun entered promiscuous mode [ 2082.139503][T12910] device syz_tun left promiscuous mode 12:22:33 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x800117) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000180)=0x0, &(0x7f0000000300), &(0x7f0000000340)) syz_mount_image$nfs4(&(0x7f0000000480)='nfs4\x00', &(0x7f00000004c0)='./file0\x00', 0x3, 0x8, &(0x7f0000000980)=[{&(0x7f0000000500)="5c68e4b5e2752b2c64579d7762b01c1fa0e5acb440882f033f70e60ac759f24ee050cabe57af1d494466fa2256cbd74e2fcb3a12535ecebedf133f1e8f2bf0185178468f97eef57ca0511231368c770530d5c594695dca584f9ea29c8ffbeb46c0b2ac9163053a1390b6831e98ccede103bf9d498bee1211d417e1", 0x7b, 0x4}, {&(0x7f0000000580)="3df9da56f609212c72cc0e335f091d04f940edb23189a7513172d9869142758b1bc01f1773d62084dae2b9fafb765c1eaf7e7ceff5a28aab30317c2eac42c1a8af3ce2320f296b0673544e6f808fb056e6fae2221696fad0c5dde89f1462bac384f30fb759263673dfdd7b6c86a26b3a89513fef8c2d83c19dd9046a6e621d644ebe044a7c85b519e6deb628829e373352b0d24522f67ad1ef41346f4699fac9cafb6c8c782a06c7f150af2841443030adf12bfe", 0xb4, 0x7fffffff}, {&(0x7f0000000640)="fc8b878692c15eaf74893fac6ddd39df66efa9928b3f6b915f4b46d6ee", 0x1d, 0x40008000}, {&(0x7f0000000680)="a8c43f27a0e8e57c9cf5dc6f63d19dd768cfbda6d12c85934e0093b441c5099b733f0484ee3c8ff88a11f1a569db85c930a9277d157764a8e346bcfc76e9769cbc0c05a70d541c357ff93bf639a3791019fc1b22f45d5b4d6aa455748b7ab1ab89c7719e5b96ef52b2b38ccfe25229b705d14d3d91225454019156d33f3b63f661b8e1be583fbf78b8522d818aba7832cf7c6cba98ac508babf919901edc4226902a69d88c44ff47fe7d94497e186abab25dea290b7d", 0xb6, 0x6}, {&(0x7f0000000740)="51932b3cf725af1c32bdac36596972afc0c0ab2b7942afaea5d1b4264eb357922e068cf3ab5f44ac2ad4a4afa90e4aba151e2c434b498bb00f51b53bcfd35e75006b98f6b7e8be389ef7f0b95605c076a7bacff518ab4aeffadb345dedc09bc612eee71bcfc9dffd9c04d3c2193aa507a094c87a867f23141a2da8490257803d57d0016a81bb58b3a1ef6ad8b80b5166d4b3cfeb5aafa136094062f5", 0x9c, 0x80000000}, {&(0x7f0000000800)="7f3abac14a3c502a419eff798dc27fa0a8d9a96346521367f186aa384933d832431a4bc5815e72058a96c0f16ced9eb3e95397dfd002ee436deea1a22d4e5253574f7392a7c7e8caa9980d0dd1e4b03c5b9b54baf04109a62cd12cb0289426b9d13e777afd1aad38d526fbbe6729260dbd0397bb472067f9de5d82661ae6e29e591f2b1a2b732061d8049781bb340fb4483948169936c114f7cc4f0492a4e25c322842d891f0ed6f218430ba236112c8a629f2a7e590eb8320012d031fe4d6bd0afcfa173b20648d9bb1c6c5ae905a", 0xcf, 0x9}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000000900)="6ff02669899a6aec90782130b0a24a57d0740e21171ae78211e903985c35b1a08b6ebe7f60aa64315e4229281135fd5b3f45c2517247ee1a89e081b64202c96c8e237a1d0044b25ef87b8956e3f2ba5701aa", 0x52, 0x6}], 0x10, &(0x7f0000000a40)='\x00') mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x44c80, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x49e}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}], [{@obj_role={'obj_role', 0x3d, 'mountinfo\x00'}}]}}) 12:22:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x400040, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8040, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc00000013000205f3e40000ffdbdf25170000004ce902e40f7a869402d53cb8f8dcd2d1ac12c30efc48f07b1d79057d8e57b5be59586a62698af7465bb2a122885cf1a8ba9422c9b47339f69ba12e61f79aa4c3f9d9283df4bebe11d684646b6e49e84c6d54bb2691eb70f412652b6f53192a2347e1d9d7ecc41e7f869cad45c6dc18ab232b915ac2a5acd75cc8a7a449099f5c147033b4018c91b14aac62ac6b9ce2b9bebe75354fc34d34b0cedf8bff15075bfbc7c8f1295a4651d067e683eb0b0e17fdfdbae3cdcebd003fe5f8e8a11f0faab685fadd376ebf29b11dcd97ed1207f5ce719642d58145e53e51f0c39d38288f0ccb39ab7ffc9b82e106311a7892f1299f0a0e9f67f843ba194f407d2ce92d1e25d1bbed8f5264491bbf9f5f228743d5ed34568f68ae7dd7306dc34b096707ea7ce025ab876b5468bf87d8dd4e1fa0ccfbccb5abc978606b31d2af4aca46cd18340e386d208c93a982a663f1aef7284e0f6fd6c8feb605acbb0b93d3b8ab71d115c9f41f936dfa1b8a11f9e88dca010decb9789a6e49cf8cc22a7900f260d44c00f0952af50a585f369fc354e20c229db4fde30aa94c4a0b5dc08e29731b882fe75c94a24cc9b86ef106d788cf0819c0b6f8bdf881217a67ad9a4fdffb70c44b569996f8fc408d542791c2cadfb47e05238e941813300159fb27b5cb25878ff9bc64c3064fe3bbaecaa0aca4c88ce602d8394e084500000000000000b099f3103544cd34b716"], 0xcc}, 0x1, 0x0, 0x0, 0x11}, 0x44040) connect$rose(r2, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) [ 2082.220849][T12923] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2082.348759][T12931] device syz_tun entered promiscuous mode [ 2082.368057][T12930] device syz_tun left promiscuous mode [ 2082.433841][T12936] device syz_tun entered promiscuous mode [ 2082.440009][T12930] device syz_tun left promiscuous mode 12:22:34 executing program 3: r0 = gettid() r1 = fanotify_init(0xfffffffffffffffe, 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000040)) 12:22:34 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) r2 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x5, 0x111800) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x1fe, 0x2, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'syz_tun\x00', r1}) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000580)='./file0\x00', &(0x7f0000000900)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000280)=0x5, 0x4) sendmsg$kcm(r3, 0x0, 0x20000000) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[]}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x40008, 0x2e, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x2) 12:22:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:34 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0xfffffffffffffff7, 0xffffffff7fffffff, 0x4, 0x212, 0x11, 0x3, 0x8001, 0xfffffffffffffa8e}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) fchmod(r0, 0x20) r3 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r3}, {0x2, 0x5, r4}], {0x4, 0x4}, [{0x8, 0x4, r5}, {0x8, 0x5, r6}, {0x8, 0x6, r7}, {0x8, 0x3}, {0x8, 0x3, r8}], {0x10, 0x5}, {0x20, 0x1}}, 0x5c, 0x1) [ 2082.704666][T12942] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) 12:22:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x40008, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f00000000c0)) 12:22:34 executing program 3: gettid() r0 = fanotify_init(0x0, 0x0) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) pwritev(r0, &(0x7f0000001500)=[{&(0x7f0000000000)="d17905162f3656a3d9c5d47ba587d042c9e2430711d052204bbe56d9377c03bc6dae7921131f12e70951c3bdfbc4534f199ec09abc9d2b65b729e55c737a0ee87b7fbdf20d82725416e0803917e1b7b28681771f076d7eb845f04385fddc178775de044a89b2e35e17a2ec13994737b1815f16d5e3d8476771c468ebca735fa7e8644dcc83f6df28a33cc39a0546dd797e8f5ad330bd3408e4342ff62d79c34a3c346cd94b22f7c74c6f1297d94c11dd1da91697a793b423994b9e4ba748195abf32fbb84b13118830d2f98b773b10b2b6", 0xd1}, {&(0x7f0000000100)="d581b6afa2b325b88a1a94fe784c976e065ee2e1048c1ce2363d85eab6e2343fc6060235d183904dee2a53d1d02d7449cd01472f11df2997bc25ef65deb067f39874eda6e90167c990d859c072174aa8bc183146fc7f3dccd66fee5e086294d357d4d2fafe165663530012729535172e02db68c4c46be94a5853f6bb19763773ef7e8c49ac4b82b7773275de0511a3d796b1f20af90d8e84e6c86f5a3372488f6640525b92376686414c6371ac583dca7bc9536c04d5b10dec4ffcbeaf3efc91c199eee72d01d530303db94222772e34980c932fd173956136d2c6473614", 0xde}, {&(0x7f0000000200)="249ce79fa0b8a6bc72ee97917ba308d4f4b943f51924aa1fc240a8746c1680aac32ebb04ca64d9df878995709e84585e57fba19e7851ab21edac62bf1fb826f958c7300eb688b8dd777cd9101a93cecf35f6903a87a12213aaf4526f64ca81e3b4", 0x61}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="2e49454c9173b7664eb7b3f4607c3cad668b5bb0df667fdca08dd2f1c44d569bbe7874b8bef205267b4389d955069ac8b2b52eca4e0f8d4b4787e2bec8f480fd22e0a888de582e5aae1c46ecac2abf2ca64111db0769551b3e770bee6e3eacacff372ef46d5c903d79415f3e4acd43e578cfb873e354c36ad8dbf3c6fe5c437f1296d2968f1061126dd77ffe5b02761e4425f53dd461f46d2cfdf5b967884987015d3a8f2e92ccd1999c56afc13e6432e9", 0xb1}, {&(0x7f0000001340)="ecc442fe8fe3737342302de359cb44ac15de3607de42f5a08e8aa63fabca5cfa5e30411868ed359854e183ca1401c5b82a4dd7e778d957dec5d78d9a4c6cf42a40470bd827cd1cca6959bbc4fab450eb9433177424f42974ac2c1aead45945bfd47990a74e6ce9af22d5ed151c3370d4a6ef1703fa018036f8c03e4801296f28d8a68140b4a6b31c0468bac47f1f6472270be399635111d414d2bdddf828062f60517f2f25bbadbedb39ae60c76e259302005da7eb0028fbd5ff3cae626e2e5343b4a1", 0xc3}, {&(0x7f0000001440)="6e415dda89252ae7f4f69f7161f3de14c6f4ff8bb0f006aaeae3257ac9967a7294ec10ea876a6cee14dbdb6a70dd391acce5716e603cf93a59efb839eebc46f4f11e0d31c55926f3007ddc99ea2c28ba5b7ec950f24f6706afc5938ae8179e57e7e8328dd321b0b8572ad4a598b0c2d59664a72f25af913fba5106d414791ff520ad591c834b45581eb85dd9348796aaf7e8ebb51bff5d18a4", 0x99}], 0x7, 0x0) [ 2082.880656][T13055] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:36 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 12:22:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = userfaultfd(0x80000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) 12:22:36 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00000000ff", 0x24) 12:22:36 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) 12:22:36 executing program 4: r0 = shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x6000) mremap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f000000b000/0x4000)=nil) shmdt(r0) 12:22:36 executing program 3: r0 = gettid() r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000000c0)) finit_module(r1, &(0x7f0000000100)='mime_type,cpuset%-\x00', 0x1) r2 = fanotify_init(0x0, 0x0) read(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x42440, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @empty}, 0x8) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000040)=0x5, 0x4) tkill(r0, 0x14) [ 2085.121444][T13184] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2085.143127][T13182] fuse: Bad value for 'fd' [ 2085.152813][T13176] device syz_tun entered promiscuous mode 12:22:36 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00000000ff", 0x24) [ 2085.168793][T13173] device syz_tun left promiscuous mode [ 2085.179031][T13216] fuse: Bad value for 'fd' 12:22:36 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000004c0)='net/anycast\x91\r7\x1f\x92;|$\xaa\xc6\xb7\x94\x00\xaa\xbf\xb1I\xbc)\xfc\xd2\f3\xd3v \xf5k\x98<\xa1\xc2\xe6\xf2\xde\x92\x84;\x15\xe6\x84_Xe\xf6mgZ\x1d\x91C!\xcf+\x1f\x1dt\xb6\xdd:\xba\'\xe0\xfb\xc3\xeb\x14;\xc5qk\x94\x15u\x19&;}\x9c\x9b\x805\xd3\xc5H\x1e\xab\x81\xd26\x87\xb3\xea\x91\xde\xac\xd5\xb6b\x98h|\x94m;\xaa\xf5E\xb2\x1f\x9e\xe0ul\xb2\x16\xd5\x891\xb6\xaf\x86q\x02\xa0TeL\x7f}nt\xf9') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000040)={'tunl0\x00', {0x2, 0x4e21, @multicast1}}) fadvise64(r1, 0x0, 0x441, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75704ebfebb9f08337a375b34f3f110e0878673c9bc62bf8ea35b84de0ad0efcfd828a1bb6e9706604351ed3a386590afb4d506f88f00b4e925b4cad76febc6bdcca2def186b7349898333a49026121a5a457f0d56f392212568b24b63058f44899e90082ec484212158", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x2) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2100000003000000000000002000"/33], 0x21) 12:22:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x1200) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:22:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='auxv\x00') fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000004c0)='syz_tun\x00', &(0x7f00000001c0)="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", 0xffffffffffffff0d) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) [ 2085.319366][T13291] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:36 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00000000ff", 0x24) 12:22:36 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="210000efe600000000000000006ebb00"/33], 0x21) [ 2085.495834][T13375] device syz_tun entered promiscuous mode [ 2085.521784][T13320] device syz_tun left promiscuous mode 12:22:39 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYPTR64, @ANYBLOB="aff0a5f3854c65cadd8cc664c20981d749de27c92a32e776e0c9584a33ff0918a67ee32a233131bb808a5adc8383df9491fa0c70d0c91ddf8b45e160e04d72a4500ef615636dc4f3da8b4958031438e557417f912353492194c2765940e402c05b6b579c12d56999a4d6f4b3faf9339225edf5e7a29324207a000b3670d793cb62a34a5cbf7b8ca444593bba000000000000000bed62037303db759f464e7980d7498fe7ada7a5da6c86cc97ce11d4e809ad22f03029ea17c73dfd097f7d4d99f64075577faa42504be897000000", @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 12:22:39 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0xd4b9b22) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() lseek(r0, 0x0, 0x5) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x35) ftruncate(r0, 0x0) 12:22:39 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000088", 0x24) 12:22:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timers\x00') fcntl$setflags(r0, 0x2, 0x124b696cfe55bc21) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x21}, 0x21) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) r3 = getgid() mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x70, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@appraise_type='appraise_type=imasig'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x80000000}}, {@measure='measure'}, {@smackfshat={'smackfshat', 0x3d, 'group_id'}}, {@smackfshat={'smackfshat', 0x3d, 'ppp0\'}\xc6'}}, {@dont_appraise='dont_appraise'}]}}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x12) 12:22:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 12:22:39 executing program 3: r0 = gettid() r1 = fanotify_init(0x0, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmmsg(r2, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="c93b54d477b3c15f4016d0162dab7dca1c443085af5545083b241d1a6074272fc74b497767fda6323cec50173e29de66e3d19f", 0x33}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1300}}, {{&(0x7f0000001380)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001400)="0d9f87fb20d0cf911f61fe44998cdd54bc076ac6cafbdbc8ea36f6436c4a51c79ad93669cf070eaa858062a7c2d2549b59e2adfcd02e0590a8fa5e01b85a290948e524ecd1e60138ad423bb92f9c36318d36017f679c5ca21411b5c86eeff852464a2efbad", 0x65}, {&(0x7f0000001480)="68aaa82b0c55cb00db8b81a6c0b04c965325757bd60a0777014b542b38ca1d8331950a91cbabfdd8539a66e72c87e861036ebc51cd05099e1d7f099af898453611dcbc7ab0afbf46a3126725aa", 0x4d}, {&(0x7f0000001500)="cea617dc7de3f74f74ef5855fb3b15442de5", 0x12}], 0x3, &(0x7f0000001580)=[{0x90, 0x115, 0x8001, "fa95f9eba400d33cd2d87db46c4a80206078662aac2799c2ca20081669cafa74022c8af02a10bd8bc2bb86a2a0535e7201948fa09b386d82a64047b03c33c22f0b03c2c53bd698ff6695f9f050822815b548fe9904b8f2662360ff0b5c73f436c89534ce3ba9d51fb1e9e3fe22ea38eb0693e72e9d0415813e91e5a1"}, {0xf8, 0x11, 0x3, "e0e81b1ffeec42277f7ffa979ce48fab1c5133ce1607a70854a1a18f9740a4b566fd0e325446815cab3f8249903e01069b910a7bf60dc0ae8cff8246a676b546221c4093261078ad64ce1fe118ce4a99627b0cab080abc88220052ecb903260be11b2cbbbcfe8d13803e1130766751fedef1835865e89900212e5c83a48d1790808c9ab6b7493e78700fae15216cd925ad03bcf7623bc01bd6c96709cc0dc4c2d166593f365691e04be1f71d0b4903d39b5b56a8027f392f4422faddb79be3874459fc1fb2e03b24119152202625f769c6bf734a5c01e22ea4fca6d18ce35d4fe7c995880c46"}, {0xb8, 0x10a, 0x7, "aeed647e680fd67b03c148072f2e5c9993aaa39d7d5e62b4325a60f819a7407c8aa3e752e2e9f9c80a11b5763e04e7355645f5879d9e1d16518dd404495169953f0e48aa0a03834b1105a59e8401ea670a4f81b5f64ddc0ff85cce3a3c7643ace7d4591dbffac26d1bc27684e85008c69cdfaca907587dbf09f1cda87ef90fcf26e66c9dd27c6d4a2366a6b38d06816ec8ff2a45af9130061d31b639ee4f508aefe4"}, {0x110, 0x110, 0x80, "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"}, {0xa8, 0x11e, 0x6, "6e9bc0e5cd2dc0d8f250d81562ab83a4f77fa03fe5e086ae2792a08a7c76ec8ce2c0226f3aeced1f43cbe319953d3eb6acb8ada732898f513ee12a9a5fd7f667cb9aa3ad54f33777fbf8faf387882c44f617ce282bfd7861eb42e9ca0c2203fb223d6f2943e0cfda0ec32129b929e1bbf05d110137a2563c2afd4dfdbd0032b07947aa9321d3d6421295ecabe9bf08ee47d9f9f7a29a"}, {0xb8, 0x9ee565dddc507b66, 0x0, "1215a7ae1fce93a393970a6b6904677d511fda8d05c3320fbd4e1ea990207270eb4a842f5836cd7523d361167447fba112fc12080235f9d875b019dd255112e7afdbaeaa55ddd37ecf00a275640fce9b016df12e3213d68b1000f318cc4a3a6056ef742311ec6b0629e3a7dcff77af0cf28410ed94ca9f859b58319221b575719ffe9a4eb4066d1bc4651df8c79a5333964d29f0a8b5ed4a897a744a9b5a6f6ce6a7fcf7bd"}, {0x58, 0x88, 0x100000000, "989986d5cb6a7ba50850e9ee097f5af87cf988a4f808df45b9c1d3a418c6b2ed1b100a1884321764c26fc5674ea73de5f302830008549eaf0d13e67bb5bc1e3d052fc4a6ebcb"}], 0x508}}, {{&(0x7f0000001ac0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x2, 0x1, 0x2}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001b40)="132d487815fbdce725f2abab586fc30baf3b60bf7a230cd139b0f3ef7ea5f15e4dc257af97d6844959ce4f93f2017864eea31b9959be4733da21b69e33a74b57dbe130db3c6b3d44cb204d9ebd5b7f458fe3c6eb136c1a1351efa077b8b3005b673118346108cee0be3713e92b62bbb67e1bc1bdfd3d23da183178b20ff6efc537c6282d76236ac60c018e6a8498194bf669c627e60d067d67b4", 0x9a}, {&(0x7f0000001c00)="cb7d1eb29572ad76d999bcdf682ba72f72e6443d4a91a5a8720f8a4bf705a376e247dc0402a50454f6939b340c905a937fd9a773be711d88b9e0b384b8dd63c60c3f97693de99ce2ce81cd232e26920a186615a0e74dda787918ed4fd2", 0x5d}, {&(0x7f0000001c80)="fe2ef388b09d9d29c4adc9258100c200c2ad57581360f9f15da57009f9c9edbdee5c6ff46e434f07531c0473d49dc6a65cd9178d62b8ae55aaeb2cf8799de236869982cf58a88217abde22c1dfe5e8aef1f66a016c02a24c28b5c27323561a14e02ee05b042ac28d26692c1c532499502e6419398d832a1c10e37d8a1314e667fa625d2ce22b9058ffab14094b454f3e20f6e3de0410638ecc13dee91deefa71ad7cc128f5e07534d992166afc7e3529f923afb1d34ae71f16d8330a936e98c2f4d7033c05e4e4d93fc0387bf3adf2ed005dbc26a05d15713a9d9093f28504", 0xdf}, {&(0x7f0000001d80)="e6810435e463205267884f235908cf5c298672bd43955ec809711c3706d8c4d93abab9adffc793892205d3058a2ba26df45ad657db821dc630c92ed59e720ed693d20dd07f37f78c6a16f4c4dc3261d0112b4c5afb02ab4b4eb2a5f37444f2f09f606db7f35719b5ddcfe54bd8ef00541f3fb190101edf99bdcb47b5aa48088b09984ae4189e2810dbb41eceae89d8ebde1bbcc4a5e69af7a2dc0f43a33f428cb2dc913c1b01a15a3d4cd9a707e8e05e5101477c844fa0338536bfea79f78977d2c50fdf4dcecc11dffe37bcab55f0f30ca5eee0f4e24eede3050b7337e82a558be1c9", 0xe3}, {&(0x7f0000001e80)="eef6966b1e7d9afb7dab561ffec3e221fc1ad96af4a6bde9ddc694824ecdd438db00aa91225d099cdf10d94f472c1cf26a9db91b1ef3802486ee0ebef91f331d2e1aa7719dc36778bf0917844b5e5672d61ed51a0b777b6d737e72f7ffdbacd116b9fb3c5988681e4cb54952442a583817ab1123f4588be872f8394e14e83dc983796e7dd938fe8dab089086ae472f6d6f0605af42ad2ad71df4dcd0dd4fbad4cba8be3ecc09b66cf55fe41df843d675449919d47d0c8c9de647e04d5e0bcbf8039e6b767ad6eaff195a1a14943f91c5eccd52b6eabcdd8d81632ea9aaca94302dc2f4641ba8986aeef4783fc8b12b", 0xef}], 0x5, &(0x7f00000021c0)=ANY=[@ANYBLOB="c80000000000000001000000b80100006d1a4b7b09372aa5c4664c448f1865f424bcd36b80aa7f05e5945ddbd7394a8f1ce2cd112325af43e4dde0c1a49893b25ca04cb9eac7801dceb719a038ce30bc60f5848008b59a531d7a48352dd6774d3f4af561256df7722da7590d77435151116aef1bdc3be035865b4fc2451d69303796320f99c8c7fe657cca2fa41254154de66fa64cedc15d4e2d0232374e87288e788b7f3461464d605b459c7fab0c577d9b928ceb8ab4df11c267e5c24934ad0fc3f7920cd8b4cdd9cc44114eb327b8d200000000000000"], 0xc8}}], 0x3, 0x40000) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000002000)='/dev/full\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000002080)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000022c0)={0x10, 0x30, 0xfa00, {&(0x7f0000002040), 0x3, {0xa, 0x4e21, 0x4, @ipv4={[], [], @local}, 0x2}, r4}}, 0x38) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) [ 2088.208524][T13422] device syz_tun entered promiscuous mode [ 2088.214810][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2088.220998][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2088.229655][T13421] validate_nla: 1 callbacks suppressed [ 2088.229667][T13421] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 12:22:39 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b0000000000", 0x24) [ 2088.275600][T13416] device syz_tun left promiscuous mode [ 2088.314355][T13425] kasan: CONFIG_KASAN_INLINE enabled [ 2088.331007][T13425] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2088.375103][T13425] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2088.382098][T13425] CPU: 0 PID: 13425 Comm: syz-executor.2 Not tainted 5.2.0-next-20190718 #41 [ 2088.390867][T13425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2088.400998][T13425] RIP: 0010:map_id_range_down+0x87/0x370 [ 2088.406654][T13425] Code: 6e 81 c7 00 f1 f1 f1 f1 c7 40 04 00 04 f3 f3 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 e8 c0 a5 03 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 74 08 3c 03 0f 8e 9f 02 00 00 4c 8b ad 68 ff [ 2088.426275][T13425] RSP: 0018:ffff88808b417a30 EFLAGS: 00010246 [ 2088.432367][T13425] RAX: 0000000000000000 RBX: ffff88808b417aa8 RCX: ffffc90013818000 [ 2088.440352][T13425] RDX: 000000000000a306 RSI: ffffffff816edf30 RDI: 0000000000000000 [ 2088.448369][T13425] RBP: ffff88808b417ad0 R08: ffff88808ac14600 R09: ffffed1012342803 [ 2088.456358][T13425] R10: ffffed1012342802 R11: 0000000000000003 R12: 0000000000000001 [ 2088.464349][T13425] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2088.472345][T13425] FS: 00007f7a36013700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 2088.481289][T13425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2088.487896][T13425] CR2: 000000000075c000 CR3: 00000000924a7000 CR4: 00000000001406f0 [ 2088.495898][T13425] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2088.503897][T13425] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2088.511887][T13425] Call Trace: [ 2088.515195][T13425] ? __put_user_ns+0x70/0x70 [ 2088.519812][T13425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2088.526078][T13425] ? fs_parse+0x53c/0x1080 [ 2088.530523][T13425] make_kuid+0x23/0x30 [ 2088.534641][T13425] fuse_parse_param+0x2cb/0x750 [ 2088.539519][T13425] ? process_init_reply+0x1650/0x1650 [ 2088.544929][T13425] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2088.550682][T13425] ? __lookup_constant+0xd6/0x100 [ 2088.555736][T13425] ? process_init_reply+0x1650/0x1650 [ 2088.561141][T13425] vfs_parse_fs_param+0x2ca/0x540 [ 2088.566201][T13425] vfs_parse_fs_string+0x105/0x170 [ 2088.571610][T13425] ? vfs_parse_fs_param+0x540/0x540 [ 2088.576884][T13425] ? fuse_init_fs_context+0x44/0x1d0 [ 2088.582202][T13425] ? rcu_read_lock_sched_held+0x110/0x130 [ 2088.587948][T13425] ? kmem_cache_alloc_trace+0x397/0x790 [ 2088.593530][T13425] generic_parse_monolithic+0x181/0x200 [ 2088.599104][T13425] ? vfs_parse_fs_string+0x170/0x170 [ 2088.604417][T13425] ? fuse_dev_alloc+0x410/0x410 [ 2088.607558][T13501] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2088.609284][T13425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2088.609302][T13425] ? alloc_fs_context+0x400/0x690 [ 2088.609324][T13425] ? vfs_parse_fs_string+0x170/0x170 [ 2088.634162][T13425] parse_monolithic_mount_data+0x69/0x90 [ 2088.639827][T13425] do_mount+0x924/0x1c30 [ 2088.644101][T13425] ? copy_mount_string+0x40/0x40 [ 2088.649060][T13425] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2088.655321][T13425] ? _copy_from_user+0x12c/0x1a0 [ 2088.660292][T13425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2088.666564][T13425] ? copy_mount_options+0x2e8/0x3f0 [ 2088.671886][T13425] ksys_mount+0xdb/0x150 [ 2088.676149][T13425] __x64_sys_mount+0xbe/0x150 [ 2088.680853][T13425] do_syscall_64+0xfd/0x6a0 [ 2088.685384][T13425] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2088.691287][T13425] RIP: 0033:0x459819 [ 2088.695190][T13425] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2088.714799][T13425] RSP: 002b:00007f7a36012c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 12:22:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b000000009e", 0x24) 12:22:40 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)) [ 2088.723215][T13425] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459819 [ 2088.731184][T13425] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000000000000 [ 2088.739162][T13425] RBP: 000000000075bf20 R08: 0000000020000300 R09: 0000000000000000 [ 2088.747148][T13425] R10: 0000000000000070 R11: 0000000000000246 R12: 00007f7a360136d4 [ 2088.755132][T13425] R13: 00000000004c5cc9 R14: 00000000004da570 R15: 00000000ffffffff [ 2088.763118][T13425] Modules linked in: [ 2088.764591][ T3902] kobject: 'loop5' (0000000021225966): kobject_uevent_env 12:22:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x40, 0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000040)) [ 2088.784586][T13425] ---[ end trace ff85714debbfb605 ]--- [ 2088.797053][T13538] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2088.804518][ T3902] kobject: 'loop5' (0000000021225966): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2088.810216][T13425] RIP: 0010:map_id_range_down+0x87/0x370 12:22:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a000000000000000000000008001b00000000f0", 0x24) 12:22:40 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x103002, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000000)=""/15) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, 0x0, 0x800) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) [ 2088.840121][T13425] Code: 6e 81 c7 00 f1 f1 f1 f1 c7 40 04 00 04 f3 f3 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 e8 c0 a5 03 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 74 08 3c 03 0f 8e 9f 02 00 00 4c 8b ad 68 ff [ 2088.840696][ T3902] kobject: 'loop1' (0000000066ac1d7b): kobject_uevent_env [ 2088.867820][T13425] RSP: 0018:ffff88808b417a30 EFLAGS: 00010246 [ 2088.875778][T13425] RAX: 0000000000000000 RBX: ffff88808b417aa8 RCX: ffffc90013818000 [ 2088.889214][T13425] RDX: 000000000000a306 RSI: ffffffff816edf30 RDI: 0000000000000000 [ 2088.900654][T13543] device syz_tun entered promiscuous mode [ 2088.909576][T13542] device syz_tun left promiscuous mode [ 2088.913978][T13425] RBP: ffff88808b417ad0 R08: ffff88808ac14600 R09: ffffed1012342803 [ 2088.915168][ T3902] kobject: 'loop1' (0000000066ac1d7b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2088.932313][T13425] R10: ffffed1012342802 R11: 0000000000000003 R12: 0000000000000001 [ 2088.943189][T13425] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2088.951688][T13425] FS: 00007f7a36013700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 2088.964816][T13546] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2088.969677][T13425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2088.975918][T13543] device syz_tun entered promiscuous mode [ 2088.983228][T13425] CR2: 00007fff908239c8 CR3: 00000000924a7000 CR4: 00000000001406e0 [ 2088.990303][T13543] device syz_tun left promiscuous mode [ 2089.008384][T13425] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2089.016948][T13425] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2089.025404][T13425] Kernel panic - not syncing: Fatal exception [ 2089.032617][T13425] Kernel Offset: disabled [ 2089.036938][T13425] Rebooting in 86400 seconds..