[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.483012][ T23] audit: type=1800 audit(1572364623.595:25): pid=8693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.516069][ T23] audit: type=1800 audit(1572364623.595:26): pid=8693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.548524][ T23] audit: type=1800 audit(1572364623.595:27): pid=8693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.41' (ECDSA) to the list of known hosts. 2019/10/29 15:57:13 fuzzer started 2019/10/29 15:57:14 dialing manager at 10.128.0.26:34715 2019/10/29 15:57:14 syscalls: 2541 2019/10/29 15:57:14 code coverage: enabled 2019/10/29 15:57:14 comparison tracing: enabled 2019/10/29 15:57:14 extra coverage: extra coverage is not supported by the kernel 2019/10/29 15:57:14 setuid sandbox: enabled 2019/10/29 15:57:14 namespace sandbox: enabled 2019/10/29 15:57:14 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/29 15:57:14 fault injection: enabled 2019/10/29 15:57:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/29 15:57:14 net packet injection: enabled 2019/10/29 15:57:14 net device setup: enabled 2019/10/29 15:57:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 15:59:15 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) 15:59:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0), 0x8) clock_gettime(0x3, &(0x7f0000000380)) syzkaller login: [ 187.615025][ T8861] IPVS: ftp: loaded support on port[0] = 21 [ 187.742710][ T8863] IPVS: ftp: loaded support on port[0] = 21 [ 187.828723][ T8861] chnl_net:caif_netlink_parms(): no params data found [ 187.883507][ T8861] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.892015][ T8861] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.901781][ T8861] device bridge_slave_0 entered promiscuous mode [ 187.910984][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.920635][ T8861] bridge0: port 2(bridge_slave_1) entered disabled state 15:59:16 executing program 2: ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24000004) syz_open_dev$dspn(0x0, 0x1005, 0x88101) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x80004040, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x10420300, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_AD_LACP_RATE={0x8}, @IFLA_BOND_MODE={0x8, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) [ 187.929210][ T8861] device bridge_slave_1 entered promiscuous mode [ 187.959724][ T8861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.974026][ T8861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.005516][ T8861] team0: Port device team_slave_0 added [ 188.059218][ T8861] team0: Port device team_slave_1 added [ 188.119538][ T8863] chnl_net:caif_netlink_parms(): no params data found 15:59:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r3, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0xb}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 188.179336][ T8861] device hsr_slave_0 entered promiscuous mode [ 188.216383][ T8861] device hsr_slave_1 entered promiscuous mode [ 188.313467][ T8867] IPVS: ftp: loaded support on port[0] = 21 15:59:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000540)="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", 0xfffffd74}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfff}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 188.441427][ T8869] IPVS: ftp: loaded support on port[0] = 21 [ 188.463067][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.470346][ T8861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.478262][ T8861] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.485428][ T8861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.563291][ T8863] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.581835][ T8863] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.589980][ T8863] device bridge_slave_0 entered promiscuous mode [ 188.600207][ T8863] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.607386][ T8863] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.615166][ T8863] device bridge_slave_1 entered promiscuous mode [ 188.653573][ T8872] IPVS: ftp: loaded support on port[0] = 21 [ 188.706516][ T8863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.765585][ T8863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:59:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffe0a}) [ 188.808437][ T8861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.827358][ T8867] chnl_net:caif_netlink_parms(): no params data found [ 188.865215][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.885163][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.899813][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 188.923847][ T8863] team0: Port device team_slave_0 added [ 188.947711][ T8861] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.971031][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.981401][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.994565][ T8863] team0: Port device team_slave_1 added [ 189.010881][ T8877] IPVS: ftp: loaded support on port[0] = 21 [ 189.030141][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.037652][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.045357][ T8867] device bridge_slave_0 entered promiscuous mode [ 189.055140][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.062421][ T8867] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.070518][ T8867] device bridge_slave_1 entered promiscuous mode [ 189.122277][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.132944][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.141726][ T8876] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.148817][ T8876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.219260][ T8863] device hsr_slave_0 entered promiscuous mode [ 189.266560][ T8863] device hsr_slave_1 entered promiscuous mode [ 189.316125][ T8863] debugfs: Directory 'hsr0' with parent '/' already present! [ 189.325215][ T8867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.339401][ T8867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.367061][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.375584][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.384238][ T8875] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.391302][ T8875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.413057][ T8869] chnl_net:caif_netlink_parms(): no params data found [ 189.432964][ T8867] team0: Port device team_slave_0 added [ 189.442949][ T8867] team0: Port device team_slave_1 added [ 189.459929][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.469129][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.544342][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.553310][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.572130][ T8869] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.579709][ T8869] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.592034][ T8869] device bridge_slave_0 entered promiscuous mode [ 189.669135][ T8867] device hsr_slave_0 entered promiscuous mode [ 189.736434][ T8867] device hsr_slave_1 entered promiscuous mode [ 189.796186][ T8867] debugfs: Directory 'hsr0' with parent '/' already present! [ 189.814771][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.824971][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.833606][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.843037][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.851634][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.860061][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.868497][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.878863][ T8869] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.887067][ T8869] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.894735][ T8869] device bridge_slave_1 entered promiscuous mode [ 189.916661][ T8869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.941861][ T8869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.974183][ T8869] team0: Port device team_slave_0 added [ 189.980835][ T8872] chnl_net:caif_netlink_parms(): no params data found [ 190.002016][ T8869] team0: Port device team_slave_1 added [ 190.099314][ T8869] device hsr_slave_0 entered promiscuous mode [ 190.136562][ T8869] device hsr_slave_1 entered promiscuous mode [ 190.176125][ T8869] debugfs: Directory 'hsr0' with parent '/' already present! [ 190.262955][ T8861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.270660][ T8872] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.278627][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.287330][ T8872] device bridge_slave_0 entered promiscuous mode [ 190.323516][ T8877] chnl_net:caif_netlink_parms(): no params data found [ 190.333672][ T8872] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.340897][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.350197][ T8872] device bridge_slave_1 entered promiscuous mode [ 190.362090][ T8863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.405409][ T8872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.420546][ T8872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.451772][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.466093][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.476658][ T8863] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.501648][ T8872] team0: Port device team_slave_0 added [ 190.512669][ T8872] team0: Port device team_slave_1 added [ 190.520928][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.530359][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.539100][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.546329][ T3022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.553861][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.562547][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.571038][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.578128][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.586355][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.678813][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.688152][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.711937][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.721682][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.736543][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.745363][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.760696][ T8877] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.776076][ T8877] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.783824][ T8877] device bridge_slave_0 entered promiscuous mode [ 190.809465][ T8877] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.820946][ T8877] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.832939][ T8877] device bridge_slave_1 entered promiscuous mode [ 190.856847][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.928094][ T8872] device hsr_slave_0 entered promiscuous mode [ 190.938946][ C0] hrtimer: interrupt took 31662 ns [ 190.986419][ T8872] device hsr_slave_1 entered promiscuous mode [ 191.046061][ T8872] debugfs: Directory 'hsr0' with parent '/' already present! [ 191.060781][ T8863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.086013][ T8863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 15:59:19 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) [ 191.120065][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.136785][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.145892][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.155037][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.193849][ T8867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.205754][ T8877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.233116][ T8869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.250867][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.272931][ T8867] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.286602][ T8877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.304428][ T8863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.332233][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.344045][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.373244][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.382829][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.412544][ T8876] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.419711][ T8876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.436999][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.445742][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.460590][ T8876] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.467776][ T8876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.513338][ T8877] team0: Port device team_slave_0 added [ 191.544399][ T8877] team0: Port device team_slave_1 added [ 191.568346][ T8869] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.575538][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.608621][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.640514][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.660639][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.673796][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 15:59:19 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x74, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f00000000c0)='./bus\x00', 0x40) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}, 0x120) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) [ 191.789422][ T8877] device hsr_slave_0 entered promiscuous mode [ 191.826747][ T8877] device hsr_slave_1 entered promiscuous mode [ 191.876161][ T8877] debugfs: Directory 'hsr0' with parent '/' already present! [ 191.902897][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.911696][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.921736][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.930992][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.939940][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.947081][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.954915][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.964216][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.973191][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.980336][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.988644][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.999004][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.008513][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.016518][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.028953][ T8902] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.054952][ T8867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.066833][ T8867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 15:59:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0), 0x8) clock_gettime(0x3, &(0x7f0000000380)) [ 192.119674][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.128878][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.163713][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 15:59:20 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @multicast1}, &(0x7f00000003c0)=0x10, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x9, 0x20000) dup2(0xffffffffffffffff, r2) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_INIT(r3, &(0x7f0000000300)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0x50) [ 192.204186][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 15:59:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0), 0x8) clock_gettime(0x3, &(0x7f0000000380)) [ 192.247074][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.292372][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 15:59:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0), 0x8) clock_gettime(0x3, &(0x7f0000000380)) [ 192.344117][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.359690][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.377284][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 15:59:20 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x8}, 0x0) close(0xffffffffffffffff) r1 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x8}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x143000, 0xaa) fchdir(r2) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) [ 192.391667][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.407060][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.423097][ T8867] 8021q: adding VLAN 0 to HW filter on device batadv0 15:59:20 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='inode32,sunit=0x0000000000000009,gquota']) [ 192.479741][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.495121][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.526945][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.543406][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.552457][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.580921][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.596304][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 192.602396][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 192.614043][ T8931] XFS (loop1): sunit and swidth must be specified together [ 192.693160][ T8931] XFS (loop1): sunit and swidth must be specified together [ 192.751301][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 192.756790][ T8872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.757588][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 192.770020][ T8869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.841861][ T8872] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.876759][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 192.883366][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 192.922841][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.944309][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.996067][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 193.001871][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 193.038472][ T8944] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 193.076098][ T8944] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 193.084400][ T8944] INFO: trying to register non-static key. [ 193.090197][ T8944] the code is fine but needs lockdep annotation. [ 193.097463][ T8944] turning off the locking correctness validator. [ 193.103797][ T8944] CPU: 1 PID: 8944 Comm: syz-executor.2 Not tainted 5.4.0-rc5-next-20191029 #0 [ 193.112722][ T8944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.120337][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 193.122783][ T8944] Call Trace: [ 193.122804][ T8944] dump_stack+0x172/0x1f0 [ 193.122824][ T8944] register_lock_class+0x179e/0x1850 [ 193.130785][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 193.131829][ T8944] ? is_dynamic_key+0x1c0/0x1c0 [ 193.131841][ T8944] ? mark_held_locks+0xa4/0xf0 [ 193.131865][ T8944] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 193.162625][ T8944] ? stack_depot_save+0x25a/0x450 [ 193.167650][ T8944] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 193.173451][ T8944] __lock_acquire+0xf4/0x4a00 [ 193.178124][ T8944] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 193.183944][ T8944] ? stack_depot_save+0x25a/0x450 [ 193.188973][ T8944] ? mark_held_locks+0xf0/0xf0 [ 193.193736][ T8944] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 193.199540][ T8944] ? kasan_kmalloc+0x9/0x10 [ 193.204031][ T8944] ? __kmalloc_node+0x4e/0x70 [ 193.208704][ T8944] ? kvmalloc_node+0x68/0x100 [ 193.213373][ T8944] ? alloc_netdev_mqs+0x8b4/0xde0 [ 193.218388][ T8944] ? rtnl_create_link+0x22d/0xab0 [ 193.223403][ T8944] ? __rtnl_newlink+0xfa3/0x16e0 [ 193.228329][ T8944] ? rtnl_newlink+0x69/0xa0 [ 193.232829][ T8944] lock_acquire+0x190/0x410 [ 193.237328][ T8944] ? bond_3ad_update_lacp_rate+0xb9/0x290 [ 193.243043][ T8944] _raw_spin_lock_bh+0x33/0x50 [ 193.247808][ T8944] ? bond_3ad_update_lacp_rate+0xb9/0x290 [ 193.253545][ T8944] bond_3ad_update_lacp_rate+0xb9/0x290 [ 193.259086][ T8944] ? bond_opt_get_val+0x120/0x120 [ 193.264104][ T8944] ? bond_3ad_lacpdu_recv+0x730/0x730 [ 193.269477][ T8944] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 193.275451][ T8944] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 193.281294][ T8944] bond_option_lacp_rate_set+0x66/0x80 [ 193.286750][ T8944] __bond_opt_set+0x2a1/0x540 [ 193.291541][ T8944] bond_changelink+0x139e/0x1bd0 [ 193.296507][ T8944] ? memset+0x32/0x40 [ 193.300667][ T8944] ? bond_slave_changelink+0x1e0/0x1e0 [ 193.306145][ T8944] bond_newlink+0x2d/0x90 [ 193.310472][ T8944] ? bond_changelink+0x1bd0/0x1bd0 [ 193.315597][ T8944] __rtnl_newlink+0x10a1/0x16e0 [ 193.320456][ T8944] ? rtnl_link_unregister+0x250/0x250 [ 193.326444][ T8944] ? is_bpf_text_address+0xce/0x160 [ 193.331642][ T8944] ? kernel_text_address+0x73/0xf0 [ 193.336847][ T8944] ? unwind_get_return_address+0x61/0xa0 [ 193.342479][ T8944] ? profile_setup.cold+0xbb/0xbb [ 193.347501][ T8944] ? arch_stack_walk+0x97/0xf0 [ 193.352269][ T8944] ? stack_trace_save+0xac/0xe0 [ 193.357131][ T8944] ? stack_trace_consume_entry+0x190/0x190 [ 193.362934][ T8944] ? __kasan_check_read+0x11/0x20 [ 193.367954][ T8944] ? __kasan_check_read+0x11/0x20 [ 193.372969][ T8944] ? __lock_acquire+0x16f2/0x4a00 [ 193.377989][ T8944] ? save_stack+0x5c/0x90 [ 193.382312][ T8944] ? save_stack+0x23/0x90 [ 193.386642][ T8944] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 193.392437][ T8944] ? kasan_kmalloc+0x9/0x10 [ 193.396929][ T8944] ? kmem_cache_alloc_trace+0x158/0x790 [ 193.402490][ T8944] ? rtnl_newlink+0x4b/0xa0 [ 193.406991][ T8944] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 193.413488][ T8944] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 193.419474][ T8944] rtnl_newlink+0x69/0xa0 [ 193.423806][ T8944] ? __rtnl_newlink+0x16e0/0x16e0 [ 193.428824][ T8944] rtnetlink_rcv_msg+0x45e/0xaf0 [ 193.433758][ T8944] ? rtnl_bridge_getlink+0x910/0x910 [ 193.439038][ T8944] ? netlink_deliver_tap+0x228/0xbe0 [ 193.444327][ T8944] ? find_held_lock+0x35/0x130 [ 193.449091][ T8944] netlink_rcv_skb+0x177/0x450 [ 193.454021][ T8944] ? rtnl_bridge_getlink+0x910/0x910 [ 193.459301][ T8944] ? netlink_ack+0xb50/0xb50 [ 193.463884][ T8944] ? __kasan_check_read+0x11/0x20 [ 193.468919][ T8944] ? netlink_deliver_tap+0x24a/0xbe0 [ 193.474201][ T8944] rtnetlink_rcv+0x1d/0x30 [ 193.478612][ T8944] netlink_unicast+0x531/0x710 [ 193.483368][ T8944] ? netlink_attachskb+0x7c0/0x7c0 [ 193.488483][ T8944] ? _copy_from_iter_full+0x25d/0x8c0 [ 193.493851][ T8944] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 193.499564][ T8944] ? __check_object_size+0x3d/0x437 [ 193.504767][ T8944] netlink_sendmsg+0x8cf/0xda0 [ 193.509534][ T8944] ? netlink_unicast+0x710/0x710 [ 193.514467][ T8944] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 193.520009][ T8944] ? apparmor_socket_sendmsg+0x2a/0x30 [ 193.525468][ T8944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 193.531703][ T8944] ? security_socket_sendmsg+0x8d/0xc0 [ 193.537158][ T8944] ? netlink_unicast+0x710/0x710 [ 193.542092][ T8944] sock_sendmsg+0xd7/0x130 [ 193.546502][ T8944] ___sys_sendmsg+0x803/0x920 [ 193.551187][ T8944] ? copy_msghdr_from_user+0x440/0x440 [ 193.556729][ T8944] ? __kasan_check_read+0x11/0x20 [ 193.561746][ T8944] ? __fget+0x37f/0x550 [ 193.565934][ T8944] ? ksys_dup3+0x3e0/0x3e0 [ 193.570348][ T8944] ? __fget_light+0x1a9/0x230 [ 193.575017][ T8944] ? __fdget+0x1b/0x20 [ 193.579090][ T8944] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 193.585322][ T8944] __sys_sendmsg+0x105/0x1d0 [ 193.589937][ T8944] ? __sys_sendmsg_sock+0xd0/0xd0 [ 193.594974][ T8944] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 193.600424][ T8944] ? do_syscall_64+0x26/0x760 [ 193.605097][ T8944] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 193.611157][ T8944] ? do_syscall_64+0x26/0x760 [ 193.615840][ T8944] __x64_sys_sendmsg+0x78/0xb0 [ 193.620617][ T8944] do_syscall_64+0xfa/0x760 [ 193.625123][ T8944] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 193.631004][ T8944] RIP: 0033:0x459f49 [ 193.634903][ T8944] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 193.654690][ T8944] RSP: 002b:00007f54d03a6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.663100][ T8944] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f49 [ 193.671068][ T8944] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 193.679055][ T8944] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 193.687016][ T8944] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54d03a76d4 [ 193.694983][ T8944] R13: 00000000004c8338 R14: 00000000004de608 R15: 00000000ffffffff [ 193.717522][ T3918] kobject: 'loop0' (0000000037d20291): kobject_uevent_env [ 193.724687][ T3918] kobject: 'loop0' (0000000037d20291): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 193.786310][ T8861] kobject: 'loop0' (0000000037d20291): kobject_uevent_env [ 193.794679][ T8861] kobject: 'loop0' (0000000037d20291): fill_kobj_path: path = '/devices/virtual/block/loop0' 15:59:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_INIT(r2, &(0x7f0000000300)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0x50) [ 193.861882][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 193.869603][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.877113][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 193.878344][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.903264][ T8876] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.910379][ T8876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.921677][ T8958] kobject: '0:46' (000000004bdce60f): kobject_add_internal: parent: 'bdi', set: 'devices' [ 193.923133][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.931943][ T8958] kobject: '0:46' (000000004bdce60f): kobject_uevent_env [ 193.946272][ T8958] kobject: '0:46' (000000004bdce60f): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 193.978699][ T8877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.986572][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.995064][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.004498][ T8875] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.011596][ T8875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.021172][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.030147][ T8958] kobject: '0:47' (00000000ba87ee9d): kobject_add_internal: parent: 'bdi', set: 'devices' [ 194.030203][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.040374][ T8958] kobject: '0:47' (00000000ba87ee9d): kobject_uevent_env [ 194.056971][ T8958] kobject: '0:47' (00000000ba87ee9d): fill_kobj_path: path = '/devices/virtual/bdi/0:47' [ 194.061233][ T8872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.077870][ T8872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.099578][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 194.104747][ T8877] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.113438][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 194.115123][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.132833][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.155848][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.164963][ T8965] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 194.165244][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.190128][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.191121][ T8965] kobject: 'kvm' (0000000076bc26c4): kobject_uevent_env [ 194.200292][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.207712][ T8965] kobject: 'kvm' (0000000076bc26c4): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 194.213603][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.233914][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.242279][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.250121][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.258167][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.265814][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.278673][ T8867] kobject: '0:47' (00000000ba87ee9d): kobject_uevent_env [ 194.281358][ T8872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.285764][ T8867] kobject: '0:47' (00000000ba87ee9d): fill_kobj_path: path = '/devices/virtual/bdi/0:47' [ 194.293211][ T8872] kobject: 'vlan0' (00000000bf692803): kobject_add_internal: parent: 'mesh', set: '' [ 194.306931][ T8867] kobject: '0:47' (00000000ba87ee9d): kobject_cleanup, parent 00000000645ba7ed [ 194.316319][ T8962] kobject: 'kvm' (0000000076bc26c4): kobject_uevent_env [ 194.329617][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.339867][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.348160][ T8962] kobject: 'kvm' (0000000076bc26c4): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 194.357999][ T8867] kobject: '0:47' (00000000ba87ee9d): calling ktype release [ 194.365292][ T8867] kobject: '0:47': free name [ 194.370940][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.378040][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.385728][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.394979][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.403466][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.410551][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.411566][ T8965] kobject: 'kvm' (0000000076bc26c4): kobject_uevent_env [ 194.427325][ T8867] kobject: '0:46' (000000004bdce60f): kobject_uevent_env [ 194.429131][ T8965] kobject: 'kvm' (0000000076bc26c4): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 194.434388][ T8867] kobject: '0:46' (000000004bdce60f): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 194.455002][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.463424][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.474223][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.483267][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.488451][ T8963] kobject: 'kvm' (0000000076bc26c4): kobject_uevent_env [ 194.495725][ T8867] kobject: '0:46' (000000004bdce60f): kobject_cleanup, parent 00000000645ba7ed [ 194.504158][ T8963] kobject: 'kvm' (0000000076bc26c4): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 194.508238][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.524900][ T8867] kobject: '0:46' (000000004bdce60f): calling ktype release 15:59:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r3, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0xb}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 194.533488][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.541745][ T8867] kobject: '0:46': free name [ 194.553359][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.555829][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 194.562523][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.578841][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 194.588904][ T8877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.597147][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 194.605003][ T8877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.614472][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 194.636169][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.644608][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.660921][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.681670][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.690724][ T8972] kobject: 'kvm' (0000000076bc26c4): kobject_uevent_env [ 194.699895][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.713800][ T8972] kobject: 'kvm' (0000000076bc26c4): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 194.724995][ T3918] kobject: 'loop4' (00000000bbf26076): kobject_uevent_env [ 194.734244][ T8877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.741709][ T8877] kobject: 'vlan0' (00000000eb1d8f61): kobject_add_internal: parent: 'mesh', set: '' [ 194.742400][ T3918] kobject: 'loop4' (00000000bbf26076): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 194.780899][ T8971] kobject: 'kvm' (0000000076bc26c4): kobject_uevent_env [ 194.789438][ T8971] kobject: 'kvm' (0000000076bc26c4): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 194.831278][ T3918] kobject: 'loop5' (000000003acf8c7d): kobject_uevent_env [ 194.876189][ T3918] kobject: 'loop5' (000000003acf8c7d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 194.921776][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 194.938685][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 195.102537][ T3918] kobject: 'loop5' (000000003acf8c7d): kobject_uevent_env [ 195.109766][ T3918] kobject: 'loop5' (000000003acf8c7d): fill_kobj_path: path = '/devices/virtual/block/loop5' 15:59:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000540)="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", 0xfffffd74}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfff}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 15:59:23 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='inode32,sunit=0x0000000000000009,gquota']) 15:59:23 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) socket(0x0, 0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x4048000, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x1}}], [{@uid_gt={'uid>', r1}}]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 15:59:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_INIT(r2, &(0x7f0000000300)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0x50) 15:59:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_INIT(r2, &(0x7f0000000300)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0x50) 15:59:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffe0a}) [ 195.600885][ T3918] kobject: 'loop4' (00000000bbf26076): kobject_uevent_env [ 195.636502][ T3918] kobject: 'loop4' (00000000bbf26076): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 195.636579][ T8995] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 195.654891][ T8995] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 195.673353][ T9003] kobject: '0:46' (00000000786d43cc): kobject_add_internal: parent: 'bdi', set: 'devices' [ 195.676500][ T9006] kobject: '0:47' (00000000f6c5d430): kobject_add_internal: parent: 'bdi', set: 'devices' [ 195.683579][ T9003] kobject: '0:46' (00000000786d43cc): kobject_uevent_env [ 195.693459][ T9006] kobject: '0:47' (00000000f6c5d430): kobject_uevent_env [ 195.693493][ T9006] kobject: '0:47' (00000000f6c5d430): fill_kobj_path: path = '/devices/virtual/bdi/0:47' [ 195.717643][ T9003] kobject: '0:46' (00000000786d43cc): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 195.734353][ T9004] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 15:59:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_INIT(r2, &(0x7f0000000300)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0x50) 15:59:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_INIT(r2, &(0x7f0000000300)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0x50) 15:59:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffe0a}) [ 195.939086][ T8995] XFS (loop1): sunit and swidth must be specified together [ 195.961307][ T8867] kobject: '0:47' (00000000f6c5d430): kobject_uevent_env [ 195.971172][ T8869] kobject: '0:46' (00000000786d43cc): kobject_uevent_env [ 195.985886][ T8995] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 195.986113][ T8867] kobject: '0:47' (00000000f6c5d430): fill_kobj_path: path = '/devices/virtual/bdi/0:47' [ 196.003947][ T8869] kobject: '0:46' (00000000786d43cc): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 196.007035][ T8867] kobject: '0:47' (00000000f6c5d430): kobject_cleanup, parent 00000000645ba7ed [ 196.015982][ T8995] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 196.025311][ T8867] kobject: '0:47' (00000000f6c5d430): calling ktype release [ 196.033544][ T8869] kobject: '0:46' (00000000786d43cc): kobject_cleanup, parent 00000000645ba7ed [ 196.042770][ T8867] kobject: '0:47': free name [ 196.053061][ T8869] kobject: '0:46' (00000000786d43cc): calling ktype release [ 196.064290][ T3918] kobject: 'loop5' (000000003acf8c7d): kobject_uevent_env [ 196.071648][ T3918] kobject: 'loop5' (000000003acf8c7d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 196.083151][ T8869] kobject: '0:46': free name [ 196.105100][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 196.125815][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 196.163494][ T9023] kobject: '0:46' (00000000237f0b9a): kobject_add_internal: parent: 'bdi', set: 'devices' [ 196.173765][ T9023] kobject: '0:46' (00000000237f0b9a): kobject_uevent_env [ 196.175436][ T9024] kobject: '0:47' (000000003120eb2e): kobject_add_internal: parent: 'bdi', set: 'devices' [ 196.180944][ T9023] kobject: '0:46' (00000000237f0b9a): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 196.191028][ T9024] kobject: '0:47' (000000003120eb2e): kobject_uevent_env 15:59:24 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='inode32,sunit=0x0000000000000009,gquota']) [ 196.207869][ T9024] kobject: '0:47' (000000003120eb2e): fill_kobj_path: path = '/devices/virtual/bdi/0:47' 15:59:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffe0a}) 15:59:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_INIT(r2, &(0x7f0000000300)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0x50) [ 196.249844][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 196.265195][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 196.283239][ T9029] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 196.298965][ T8869] kobject: '0:46' (00000000237f0b9a): kobject_uevent_env [ 196.304143][ T3918] kobject: 'loop5' (000000003acf8c7d): kobject_uevent_env [ 196.313393][ T9029] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 196.318222][ T8869] kobject: '0:46' (00000000237f0b9a): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 196.323966][ T3918] kobject: 'loop5' (000000003acf8c7d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 196.345723][ T3918] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 196.348095][ T9029] XFS (loop1): sunit and swidth must be specified together [ 196.352954][ T3918] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 196.371334][ T8867] kobject: '0:47' (000000003120eb2e): kobject_uevent_env [ 196.384486][ T8867] kobject: '0:47' (000000003120eb2e): fill_kobj_path: path = '/devices/virtual/bdi/0:47' 15:59:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000540)="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", 0xfffffd74}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfff}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 15:59:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_INIT(r2, &(0x7f0000000300)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0x50) [ 196.460670][ T8867] kobject: '0:47' (000000003120eb2e): kobject_cleanup, parent 00000000645ba7ed [ 196.462446][ T9010] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 196.477917][ T8869] kobject: '0:46' (00000000237f0b9a): kobject_cleanup, parent 00000000645ba7ed [ 196.478019][ T8869] kobject: '0:46' (00000000237f0b9a): calling ktype release [ 196.478038][ T8869] kobject: '0:46': free name [ 196.484851][ T8867] kobject: '0:47' (000000003120eb2e): calling ktype release [ 196.513326][ T8867] kobject: '0:47': free name [ 196.518165][ T9029] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 196.525510][ T9029] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 196.541991][ T3918] kobject: 'loop4' (00000000bbf26076): kobject_uevent_env [ 196.567252][ T3918] kobject: 'loop4' (00000000bbf26076): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 196.586459][ T9043] kobject: '0:46' (0000000071ab9142): kobject_add_internal: parent: 'bdi', set: 'devices' [ 196.595124][ T9045] kobject: '0:47' (00000000dc323533): kobject_add_internal: parent: 'bdi', set: 'devices' [ 196.596900][ T9043] kobject: '0:46' (0000000071ab9142): kobject_uevent_env 15:59:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c) 15:59:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) socket(0x0, 0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x4048000, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x1}}], [{@uid_gt={'uid>', r1}}]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 196.606840][ T9045] kobject: '0:47' (00000000dc323533): kobject_uevent_env [ 196.613872][ T9043] kobject: '0:46' (0000000071ab9142): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 196.620956][ T9045] kobject: '0:47' (00000000dc323533): fill_kobj_path: path = '/devices/virtual/bdi/0:47' 15:59:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) [ 196.669643][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env 15:59:24 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='inode32,sunit=0x0000000000000009,gquota']) 15:59:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) [ 196.816185][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 196.839337][ T8867] kobject: '0:47' (00000000dc323533): kobject_uevent_env [ 196.850234][ T8867] kobject: '0:47' (00000000dc323533): fill_kobj_path: path = '/devices/virtual/bdi/0:47' [ 196.862453][ T8869] kobject: '0:46' (0000000071ab9142): kobject_uevent_env [ 196.876403][ T8869] kobject: '0:46' (0000000071ab9142): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 196.881124][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 196.893001][ T9057] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 196.899590][ T9056] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 196.909026][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 196.909920][ T8869] kobject: '0:46' (0000000071ab9142): kobject_cleanup, parent 00000000645ba7ed [ 196.919622][ T8867] kobject: '0:47' (00000000dc323533): kobject_cleanup, parent 00000000645ba7ed [ 196.937658][ T9057] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 196.948056][ T8869] kobject: '0:46' (0000000071ab9142): calling ktype release [ 196.958537][ T8869] kobject: '0:46': free name [ 196.963427][ T3918] kobject: 'loop0' (0000000037d20291): kobject_uevent_env [ 196.973185][ T9057] XFS (loop1): sunit and swidth must be specified together [ 196.988095][ T3918] kobject: 'loop0' (0000000037d20291): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 196.994319][ T8867] kobject: '0:47' (00000000dc323533): calling ktype release [ 197.005838][ T8867] kobject: '0:47': free name [ 197.018403][ T9062] kobject: '0:46' (000000004f34edef): kobject_add_internal: parent: 'bdi', set: 'devices' [ 197.018939][ T3918] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 197.028566][ T9062] kobject: '0:46' (000000004f34edef): kobject_uevent_env [ 197.036722][ T9057] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 197.042709][ T9062] kobject: '0:46' (000000004f34edef): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 197.051685][ T3918] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 197.072820][ T9057] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 197.077729][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 197.090881][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 197.113480][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 197.124088][ T9065] kobject: '0:47' (00000000d0a6fd27): kobject_add_internal: parent: 'bdi', set: 'devices' [ 197.132123][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 197.134776][ T9065] kobject: '0:47' (00000000d0a6fd27): kobject_uevent_env [ 197.151627][ T9065] kobject: '0:47' (00000000d0a6fd27): fill_kobj_path: path = '/devices/virtual/bdi/0:47' [ 197.162291][ T3918] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env 15:59:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 15:59:25 executing program 1: syz_mount_image$xfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='inode32,sunit=0x0000000000000009,gquota']) [ 197.171519][ T3918] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 197.182372][ T8869] kobject: '0:46' (000000004f34edef): kobject_uevent_env [ 197.203969][ T8869] kobject: '0:46' (000000004f34edef): fill_kobj_path: path = '/devices/virtual/bdi/0:46' 15:59:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 197.257817][ T8867] kobject: '0:47' (00000000d0a6fd27): kobject_uevent_env [ 197.263512][ T9073] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 197.265234][ T8869] kobject: '0:46' (000000004f34edef): kobject_cleanup, parent 00000000645ba7ed [ 197.278723][ T9073] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 197.283621][ T8867] kobject: '0:47' (00000000d0a6fd27): fill_kobj_path: path = '/devices/virtual/bdi/0:47' [ 197.320407][ T8869] kobject: '0:46' (000000004f34edef): calling ktype release [ 197.334305][ T8867] kobject: '0:47' (00000000d0a6fd27): kobject_cleanup, parent 00000000645ba7ed [ 197.343673][ T8869] kobject: '0:46': free name [ 197.352191][ T8867] kobject: '0:47' (00000000d0a6fd27): calling ktype release [ 197.359584][ T8867] kobject: '0:47': free name 15:59:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000540)="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", 0xfffffd74}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfff}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 15:59:25 executing program 1: syz_mount_image$xfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='inode32,sunit=0x0000000000000009,gquota']) [ 197.376216][ T9073] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 197.389106][ T9073] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 197.414702][ T9080] kobject: '0:46' (00000000065ddf70): kobject_add_internal: parent: 'bdi', set: 'devices' [ 197.425059][ T9080] kobject: '0:46' (00000000065ddf70): kobject_uevent_env [ 197.432190][ T9080] kobject: '0:46' (00000000065ddf70): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 197.440812][ T9082] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 197.443537][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 197.453096][ T9082] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' 15:59:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c) [ 197.486124][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 197.504314][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 197.512219][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 197.528456][ T3918] kobject: 'loop4' (00000000bbf26076): kobject_uevent_env 15:59:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) [ 197.535831][ T3918] kobject: 'loop4' (00000000bbf26076): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 197.547849][ T9089] kobject: '0:47' (00000000d7f3e2f7): kobject_add_internal: parent: 'bdi', set: 'devices' [ 197.557981][ T9089] kobject: '0:47' (00000000d7f3e2f7): kobject_uevent_env [ 197.562453][ T3918] kobject: 'loop5' (000000003acf8c7d): kobject_uevent_env [ 197.565223][ T9089] kobject: '0:47' (00000000d7f3e2f7): fill_kobj_path: path = '/devices/virtual/bdi/0:47' [ 197.573768][ T3918] kobject: 'loop5' (000000003acf8c7d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 197.607382][ T9082] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 197.608155][ T8869] kobject: '0:46' (00000000065ddf70): kobject_uevent_env [ 197.627957][ T8869] kobject: '0:46' (00000000065ddf70): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 197.644745][ T8869] kobject: '0:46' (00000000065ddf70): kobject_cleanup, parent 00000000645ba7ed 15:59:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 15:59:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) socket(0x0, 0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x4048000, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x1}}], [{@uid_gt={'uid>', r1}}]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 197.753718][ T8867] kobject: '0:47' (00000000d7f3e2f7): kobject_uevent_env [ 197.766231][ T8869] kobject: '0:46' (00000000065ddf70): calling ktype release [ 197.773982][ T9082] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 197.811475][ T8867] kobject: '0:47' (00000000d7f3e2f7): fill_kobj_path: path = '/devices/virtual/bdi/0:47' [ 197.826439][ T8869] kobject: '0:46': free name 15:59:26 executing program 1: syz_mount_image$xfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='inode32,sunit=0x0000000000000009,gquota']) [ 197.872026][ T3918] kobject: 'loop0' (0000000037d20291): kobject_uevent_env [ 197.882475][ T3918] kobject: 'loop0' (0000000037d20291): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 197.888446][ T8867] kobject: '0:47' (00000000d7f3e2f7): kobject_cleanup, parent 00000000645ba7ed [ 197.906068][ T8867] kobject: '0:47' (00000000d7f3e2f7): calling ktype release [ 197.915488][ T8867] kobject: '0:47': free name [ 197.934403][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 197.942856][ T9103] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 197.966524][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 197.967537][ T9108] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env 15:59:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) [ 197.989835][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 197.997474][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 198.002394][ T9108] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 198.018979][ T9111] fuse: Bad value for 'fd' 15:59:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 198.118502][ T9108] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 198.127093][ T9108] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 198.141132][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env 15:59:26 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='inode32,sunit=0x0000000000000009,gquota']) 15:59:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) [ 198.164113][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 198.175516][ T9121] fuse: Bad value for 'fd' [ 198.197049][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 198.204345][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' 15:59:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 15:59:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000540)="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", 0xfffffd74}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfff}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 198.231064][ T9127] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 198.256260][ T9127] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' 15:59:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) 15:59:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c) 15:59:26 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='inode32,sunit=0x0000000000000009,gquota']) [ 198.296323][ T9127] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 198.303666][ T9127] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 198.332171][ T3918] kobject: 'loop4' (00000000bbf26076): kobject_uevent_env [ 198.369668][ T9132] fuse: Bad value for 'fd' [ 198.372234][ T3918] kobject: 'loop4' (00000000bbf26076): fill_kobj_path: path = '/devices/virtual/block/loop4' 15:59:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 198.413048][ T3918] kobject: 'loop5' (000000003acf8c7d): kobject_uevent_env [ 198.442553][ T9141] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 198.450562][ T9141] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 198.471380][ T3918] kobject: 'loop5' (000000003acf8c7d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 198.546422][ T9141] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 198.577377][ T9148] kobject: '0:46' (00000000e325c4f8): kobject_add_internal: parent: 'bdi', set: 'devices' [ 198.586548][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 198.587677][ T9148] kobject: '0:46' (00000000e325c4f8): kobject_uevent_env [ 198.601828][ T9148] kobject: '0:46' (00000000e325c4f8): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 198.628404][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 198.645530][ T9141] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 198.707118][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 198.714306][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 198.730234][ T8867] kobject: '0:46' (00000000e325c4f8): kobject_uevent_env 15:59:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) socket(0x0, 0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x4048000, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x1}}], [{@uid_gt={'uid>', r1}}]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 15:59:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 15:59:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 15:59:26 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='inode32,sunit=0x0000000000000009,gquota']) [ 198.755132][ T8867] kobject: '0:46' (00000000e325c4f8): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 198.767962][ T8867] kobject: '0:46' (00000000e325c4f8): kobject_cleanup, parent 00000000645ba7ed [ 198.802959][ T8867] kobject: '0:46' (00000000e325c4f8): calling ktype release [ 198.818785][ T3918] kobject: 'loop0' (0000000037d20291): kobject_uevent_env [ 198.829816][ T8867] kobject: '0:46': free name [ 198.833322][ T3918] kobject: 'loop0' (0000000037d20291): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 198.835732][ T9157] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 198.857157][ T9157] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 198.865783][ T9161] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 198.903037][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 198.918918][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 198.931364][ T9165] kobject: '0:46' (0000000011fa2eb0): kobject_add_internal: parent: 'bdi', set: 'devices' [ 198.941572][ T9165] kobject: '0:46' (0000000011fa2eb0): kobject_uevent_env 15:59:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) [ 198.948959][ T9165] kobject: '0:46' (0000000011fa2eb0): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 198.976202][ T9157] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 198.986006][ T9157] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' 15:59:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 198.998093][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 199.005281][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 199.043383][ T8867] kobject: '0:46' (0000000011fa2eb0): kobject_uevent_env 15:59:27 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 199.058931][ T8867] kobject: '0:46' (0000000011fa2eb0): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 199.089982][ T8867] kobject: '0:46' (0000000011fa2eb0): kobject_cleanup, parent 00000000645ba7ed [ 199.105490][ T8867] kobject: '0:46' (0000000011fa2eb0): calling ktype release [ 199.110448][ T9175] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 199.116442][ T8867] kobject: '0:46': free name [ 199.120649][ T9175] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 199.152551][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env 15:59:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000540)="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", 0xfffffd74}], 0x1, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 15:59:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) 15:59:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffe0a}) [ 199.163150][ T9179] kobject: '0:46' (00000000ea16700a): kobject_add_internal: parent: 'bdi', set: 'devices' [ 199.168353][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 199.173687][ T9179] kobject: '0:46' (00000000ea16700a): kobject_uevent_env [ 199.190640][ T9179] kobject: '0:46' (00000000ea16700a): fill_kobj_path: path = '/devices/virtual/bdi/0:46' 15:59:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 199.248142][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 199.273702][ T8867] kobject: '0:46' (00000000ea16700a): kobject_uevent_env [ 199.274227][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' 15:59:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffe0a}) [ 199.290371][ T8867] kobject: '0:46' (00000000ea16700a): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 199.305503][ T8867] kobject: '0:46' (00000000ea16700a): kobject_cleanup, parent 00000000645ba7ed [ 199.313433][ T3918] kobject: 'loop5' (000000003acf8c7d): kobject_uevent_env [ 199.314713][ T9175] XFS (loop1): Invalid superblock magic number [ 199.330918][ T8867] kobject: '0:46' (00000000ea16700a): calling ktype release [ 199.332039][ T3918] kobject: 'loop5' (000000003acf8c7d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 199.338903][ T8867] kobject: '0:46': free name [ 199.485306][ T3918] kobject: 'loop4' (00000000bbf26076): kobject_uevent_env [ 199.493318][ T3918] kobject: 'loop4' (00000000bbf26076): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 199.505535][ T3918] kobject: 'loop5' (000000003acf8c7d): kobject_uevent_env [ 199.512913][ T3918] kobject: 'loop5' (000000003acf8c7d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 199.524747][ T9198] kobject: '0:46' (0000000055d53298): kobject_add_internal: parent: 'bdi', set: 'devices' [ 199.535186][ T9198] kobject: '0:46' (0000000055d53298): kobject_uevent_env [ 199.542306][ T9198] kobject: '0:46' (0000000055d53298): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 199.554314][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 199.561512][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 199.572905][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 199.580114][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 199.592334][ T3918] kobject: 'loop5' (000000003acf8c7d): kobject_uevent_env [ 199.599599][ T3918] kobject: 'loop5' (000000003acf8c7d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 199.606066][ T9175] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 199.640359][ T8867] kobject: '0:46' (0000000055d53298): kobject_uevent_env [ 199.644879][ T9175] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 199.673674][ T8867] kobject: '0:46' (0000000055d53298): fill_kobj_path: path = '/devices/virtual/bdi/0:46' 15:59:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) socket(0x0, 0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x4048000, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x1}}], [{@uid_gt={'uid>', r1}}]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 15:59:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) 15:59:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffe0a}) 15:59:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 15:59:27 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 199.696725][ T8867] kobject: '0:46' (0000000055d53298): kobject_cleanup, parent 00000000645ba7ed [ 199.705820][ T8867] kobject: '0:46' (0000000055d53298): calling ktype release [ 199.733451][ T8867] kobject: '0:46': free name [ 199.754172][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 199.763940][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' 15:59:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) 15:59:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffe0a}) [ 199.797976][ T3918] kobject: 'loop0' (0000000037d20291): kobject_uevent_env [ 199.807763][ T9211] kobject: '0:46' (00000000bd7d4016): kobject_add_internal: parent: 'bdi', set: 'devices' [ 199.818029][ T9211] kobject: '0:46' (00000000bd7d4016): kobject_uevent_env [ 199.825196][ T9211] kobject: '0:46' (00000000bd7d4016): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 199.845338][ T9214] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 199.871288][ T3918] kobject: 'loop0' (0000000037d20291): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 199.887125][ T9217] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 199.894465][ T9217] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 199.921799][ T8867] kobject: '0:46' (00000000bd7d4016): kobject_uevent_env [ 199.929131][ T8867] kobject: '0:46' (00000000bd7d4016): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 199.940381][ T8867] kobject: '0:46' (00000000bd7d4016): kobject_cleanup, parent 00000000645ba7ed [ 199.942315][ T3918] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 199.957216][ T8867] kobject: '0:46' (00000000bd7d4016): calling ktype release [ 199.964689][ T8867] kobject: '0:46': free name [ 199.970713][ T3918] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 199.982877][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 199.997434][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 200.011251][ T3918] kobject: 'loop5' (000000003acf8c7d): kobject_uevent_env 15:59:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000540)="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", 0xfffffd74}], 0x1, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 15:59:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 15:59:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffe0a}) 15:59:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) [ 200.018504][ T3918] kobject: 'loop5' (000000003acf8c7d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 200.019935][ T9217] XFS (loop1): Invalid superblock magic number [ 200.029945][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 200.042720][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 200.076716][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 200.083926][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 200.102784][ T3918] kobject: 'loop4' (00000000bbf26076): kobject_uevent_env [ 200.111245][ T9234] kobject: '0:46' (00000000a43eb0c7): kobject_add_internal: parent: 'bdi', set: 'devices' 15:59:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffe0a}) [ 200.121952][ T9234] kobject: '0:46' (00000000a43eb0c7): kobject_uevent_env [ 200.129673][ T9234] kobject: '0:46' (00000000a43eb0c7): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 200.157581][ T8867] kobject: '0:46' (00000000a43eb0c7): kobject_uevent_env [ 200.161348][ T3918] kobject: 'loop4' (00000000bbf26076): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 200.164847][ T8867] kobject: '0:46' (00000000a43eb0c7): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 200.186744][ T3918] kobject: 'loop5' (000000003acf8c7d): kobject_uevent_env [ 200.193955][ T3918] kobject: 'loop5' (000000003acf8c7d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 200.334982][ T8867] kobject: '0:46' (00000000a43eb0c7): kobject_cleanup, parent 00000000645ba7ed [ 200.346053][ T9217] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 200.356018][ T8867] kobject: '0:46' (00000000a43eb0c7): calling ktype release [ 200.363282][ T9217] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 200.366659][ T8867] kobject: '0:46': free name [ 200.423263][ T3918] kobject: 'loop5' (000000003acf8c7d): kobject_uevent_env [ 200.449256][ T3918] kobject: 'loop5' (000000003acf8c7d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 200.470187][ T3918] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 200.477814][ T3918] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' 15:59:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) 15:59:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) socket(0x0, 0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x4048000, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x1}}], [{@uid_gt={'uid>', r1}}]}) 15:59:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 15:59:28 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:59:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffe0a}) [ 200.656486][ T3918] kobject: 'loop0' (0000000037d20291): kobject_uevent_env [ 200.660361][ T9261] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 200.663672][ T3918] kobject: 'loop0' (0000000037d20291): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 200.684773][ T9259] kobject: '0:46' (0000000050f3f85d): kobject_add_internal: parent: 'bdi', set: 'devices' [ 200.684793][ T9261] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' 15:59:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 200.695036][ T9259] kobject: '0:46' (0000000050f3f85d): kobject_uevent_env [ 200.712075][ T9259] kobject: '0:46' (0000000050f3f85d): fill_kobj_path: path = '/devices/virtual/bdi/0:46' 15:59:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) [ 200.750936][ T8867] kobject: '0:46' (0000000050f3f85d): kobject_uevent_env [ 200.758621][ T8867] kobject: '0:46' (0000000050f3f85d): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 200.772226][ T9268] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 200.780277][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 200.785632][ T8867] kobject: '0:46' (0000000050f3f85d): kobject_cleanup, parent 00000000645ba7ed [ 200.796714][ T8867] kobject: '0:46' (0000000050f3f85d): calling ktype release [ 200.801009][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 200.804063][ T8867] kobject: '0:46': free name [ 200.841926][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 200.852087][ T9278] kobject: '0:46' (00000000cfcf8e69): kobject_add_internal: parent: 'bdi', set: 'devices' [ 200.854604][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 200.863226][ T9278] kobject: '0:46' (00000000cfcf8e69): kobject_uevent_env [ 200.879846][ T3918] kobject: 'loop0' (0000000037d20291): kobject_uevent_env [ 200.880528][ T9278] kobject: '0:46' (00000000cfcf8e69): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 200.887663][ T3918] kobject: 'loop0' (0000000037d20291): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 200.916579][ T9261] XFS (loop1): Invalid superblock magic number [ 200.940794][ T8867] kobject: '0:46' (00000000cfcf8e69): kobject_uevent_env [ 200.955901][ T8867] kobject: '0:46' (00000000cfcf8e69): fill_kobj_path: path = '/devices/virtual/bdi/0:46' 15:59:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000540)="5557f3e33496c75dafca864567730a9fc5eb8d657d2550b1237e22fcf200b22d56af87a89326dca864251348671fb63217146bf2d81fdace07516d82610d0b17378ff0701322a151fc50f048855fb001c84303c1e06847d4871f4db09fe6d196e19b6e8bdfdf2ba0859bba23c13a69496a893ff5c9c4be1dfb42e715176c2fbba864689587e3cf5f0596c6a4b987b57f0780a3c684d7370d1c9f6e01117975f98fcd575fcc0e78b3f965f4d856d5f90dbc6de66cf68e6009d4b8418c90668391c8060338a36ab1d36c56253d8f433ec85c3a998892a21ae3968c2142a3bc7821273f5f5f00aadc3d1ef1c664fa87c3e429725aa755ab236db37bc91884f44899af89277c4f3baaa118b7df8dfecf00068e2d1c156866b278ed4613e38bbdfbf14252bf5d59b04e980a0373aabe9d20773bbaf31313bbcc0e52ce1730af251bd373dbc0", 0xfffffd74}], 0x1, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 15:59:29 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) socket(0x0, 0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) 15:59:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 15:59:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) [ 200.985716][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 200.987261][ T8867] kobject: '0:46' (00000000cfcf8e69): kobject_cleanup, parent 00000000645ba7ed [ 201.001902][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 201.004500][ T3918] kobject: 'loop4' (00000000bbf26076): kobject_uevent_env [ 201.024317][ T3918] kobject: 'loop4' (00000000bbf26076): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 201.033549][ T9284] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 201.058335][ T8867] kobject: '0:46' (00000000cfcf8e69): calling ktype release [ 201.065989][ T8867] kobject: '0:46': free name 15:59:29 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) socket(0x0, 0x0, 0x0) [ 201.085217][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 201.105884][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 201.133804][ T9294] kobject: '0:46' (00000000510230b2): kobject_add_internal: parent: 'bdi', set: 'devices' [ 201.145192][ T9294] kobject: '0:46' (00000000510230b2): kobject_uevent_env [ 201.147963][ T3918] kobject: 'loop0' (0000000037d20291): kobject_uevent_env [ 201.152563][ T9294] kobject: '0:46' (00000000510230b2): fill_kobj_path: path = '/devices/virtual/bdi/0:46' 15:59:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) 15:59:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 201.287074][ T9261] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 201.297566][ T8867] kobject: '0:46' (00000000510230b2): kobject_uevent_env [ 201.300167][ T9261] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 201.305236][ T3918] kobject: 'loop0' (0000000037d20291): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 201.320352][ T9297] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 201.331684][ T8867] kobject: '0:46' (00000000510230b2): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 201.359363][ T8867] kobject: '0:46' (00000000510230b2): kobject_cleanup, parent 00000000645ba7ed [ 201.369541][ T8867] kobject: '0:46' (00000000510230b2): calling ktype release [ 201.378467][ T3918] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env 15:59:29 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[]) [ 201.385686][ T8867] kobject: '0:46': free name [ 201.390851][ T3918] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 201.419907][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 201.422942][ T9303] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env 15:59:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffe0a}) 15:59:29 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 15:59:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) 15:59:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 201.434509][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 201.438137][ T9303] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 201.445156][ T9306] kobject: '0:46' (00000000ac258a57): kobject_add_internal: parent: 'bdi', set: 'devices' [ 201.465180][ T9306] kobject: '0:46' (00000000ac258a57): kobject_uevent_env [ 201.472443][ T9306] kobject: '0:46' (00000000ac258a57): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 201.513154][ T8867] kobject: '0:46' (00000000ac258a57): kobject_uevent_env [ 201.523150][ T9312] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 201.528485][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 201.549973][ T8867] kobject: '0:46' (00000000ac258a57): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 201.561413][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 201.574980][ T8867] kobject: '0:46' (00000000ac258a57): kobject_cleanup, parent 00000000645ba7ed [ 201.576243][ T3918] kobject: 'loop0' (0000000037d20291): kobject_uevent_env [ 201.585742][ T8867] kobject: '0:46' (00000000ac258a57): calling ktype release [ 201.591590][ T3918] kobject: 'loop0' (0000000037d20291): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 201.599887][ T9303] XFS (loop1): Invalid superblock magic number [ 201.610382][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 201.617267][ T8867] kobject: '0:46': free name [ 201.633927][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 201.647630][ T9321] kobject: '0:46' (000000009e6521cd): kobject_add_internal: parent: 'bdi', set: 'devices' [ 201.648856][ T3918] kobject: 'loop5' (000000003acf8c7d): kobject_uevent_env [ 201.657800][ T9321] kobject: '0:46' (000000009e6521cd): kobject_uevent_env [ 201.665103][ T3918] kobject: 'loop5' (000000003acf8c7d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 201.671920][ T9321] kobject: '0:46' (000000009e6521cd): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 201.683399][ T3918] kobject: 'loop0' (0000000037d20291): kobject_uevent_env [ 201.699143][ T3918] kobject: 'loop0' (0000000037d20291): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 201.710763][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 201.718993][ T8867] kobject: '0:46' (000000009e6521cd): kobject_uevent_env [ 201.719653][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 201.728313][ T8867] kobject: '0:46' (000000009e6521cd): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 201.745750][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 201.747763][ T8867] kobject: '0:46' (000000009e6521cd): kobject_cleanup, parent 00000000645ba7ed [ 201.757332][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 201.763562][ T8867] kobject: '0:46' (000000009e6521cd): calling ktype release [ 201.780961][ T8867] kobject: '0:46': free name [ 201.793990][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 201.801269][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' 15:59:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfff}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 15:59:30 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 15:59:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) 15:59:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 201.912318][ T3918] kobject: 'loop4' (00000000bbf26076): kobject_uevent_env [ 201.923904][ T9333] kobject: '0:46' (0000000044eb96cc): kobject_add_internal: parent: 'bdi', set: 'devices' [ 201.929303][ T3918] kobject: 'loop4' (00000000bbf26076): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 201.934087][ T9333] kobject: '0:46' (0000000044eb96cc): kobject_uevent_env [ 201.951135][ T9333] kobject: '0:46' (0000000044eb96cc): fill_kobj_path: path = '/devices/virtual/bdi/0:46' 15:59:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 201.958442][ T9334] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 201.988577][ T9303] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 201.998166][ T8867] kobject: '0:46' (0000000044eb96cc): kobject_uevent_env 15:59:30 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) [ 202.005271][ T8867] kobject: '0:46' (0000000044eb96cc): fill_kobj_path: path = '/devices/virtual/bdi/0:46' [ 202.017705][ T9303] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' 15:59:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) [ 202.065402][ T8867] kobject: '0:46' (0000000044eb96cc): kobject_cleanup, parent 00000000645ba7ed [ 202.102089][ T3918] kobject: 'loop0' (0000000037d20291): kobject_uevent_env 15:59:30 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[]) [ 202.120759][ T8867] kobject: '0:46' (0000000044eb96cc): calling ktype release [ 202.130710][ T3918] kobject: 'loop0' (0000000037d20291): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 202.156806][ T8867] kobject: '0:46': free name [ 202.174567][ T3918] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 202.192670][ T3918] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 202.216113][ T9353] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 202.221239][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 202.236505][ T9353] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 202.247132][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 202.260929][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 202.268942][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 202.280621][ T9353] XFS (loop1): Invalid superblock magic number [ 202.288779][ T3918] kobject: 'loop3' (000000001f22f70c): kobject_uevent_env [ 202.296485][ T3918] kobject: 'loop3' (000000001f22f70c): fill_kobj_path: path = '/devices/virtual/block/loop3' 15:59:30 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 15:59:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 15:59:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x3c) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffe0a}) 15:59:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) [ 202.383919][ T3918] kobject: 'loop5' (000000003acf8c7d): kobject_uevent_env [ 202.402484][ T3918] kobject: 'loop5' (000000003acf8c7d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 202.438531][ T3918] kobject: 'loop2' (00000000b2f33cc1): kobject_uevent_env [ 202.445803][ T3918] kobject: 'loop2' (00000000b2f33cc1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 202.464346][ T3918] kobject: 'loop0' (0000000037d20291): kobject_uevent_env [ 202.471713][ T3918] kobject: 'loop0' (0000000037d20291): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 202.526161][ T9353] kobject: 'loop1' (00000000d694e39b): kobject_uevent_env [ 202.533505][ T9353] kobject: 'loop1' (00000000d694e39b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 202.555964][ T3918] kobject: 'loop3'