Extracting prog: 59.164198959s Minimizing prog: 28m6.171022271s Simplifying prog options: 0s Extracting C: 45.725910231s Simplifying C: 5m9.095672339s extracting reproducer from 24 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-open-mount-mkdirat-mount-ioctl$KVM_GET_STATS_FD_vm-pwritev-bpf$MAP_UPDATE_ELEM_TAIL_CALL-socket$inet_tcp-setsockopt$inet_tcp_TCP_REPAIR-openat-ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x28410, 0x0) r7 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) pwritev(r7, &(0x7f0000002840)=[{&(0x7f00000000c0)="aac2558b8793e2", 0x7}, {&(0x7f00000002c0)="74277b99992c85425ed80518a4e6e84a7f893f64f6515113995e4bf60dd01d39b7baf66531b0b465082fb41a064d4c67e540bbf05b6921292783edf293f25207e436e6013b41e496d94a066f36f694980b926d70beb8836468e27d6807290f6ecaa1c66e6daad81fc5e05b6221f73df202277b520be60000000000", 0x7b}, {&(0x7f0000000340)="6a33ba461ad76dd3", 0x8}, {&(0x7f0000000380)="8506f461ac102d264dde71926041a916662da94776f84760960af9b73d6aac559a29e7c7ff8af5b7902e46c2ad", 0x2d}, {&(0x7f0000000440)="10ae80b0bafc07fb69f6034dd5ec10d603cb2dfe7157de0bb21424c1d58a88dd9e246f7093120e68309ea5431be1b20f293afea92a82706572153da47d4e874403279d28c080cf", 0x47}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000000640)="755a7dd9c95a4401e67567186796a6d6af7d43e3dc778c375a6138d80996f3d93265b8984cccac16e0fda596f3d5cec1c368c546b7ef067ba716cbce09a5853fca4e6e8b126bff2dde45fad27b61768e3e8bcd75912573360cd3e020407ea56b9ea2454a64020517c71e8d1f6de3df1430d53fd4e6493f186482fa84840a36d03be7c73bac2d7bac1aa982430ae9b72dc0e5d85748c7b01200", 0x99}, {&(0x7f00000026c0)="7733c56a7adf60c47bde356904c050b70175d34e66c261e168b7536d1bc014259d48df92a82a925ca472997bbd06dad404413a7d7a7c6de4e28f4eac7aad56d719603091", 0x44}, {&(0x7f0000002740)="41f383c343c5732041429c1517560cb68e9b7609b31ed47d5d488d50ebd1c8b2728255e6726b0df398741105f2d0966129359cf48cc74d587b10badc8762430300c4d94c58221ad2ea445d0b911dcaf1c562bb826b77937e86844eba0b4ebcca51ccd34371564e22fe1faf015834e9a85f31de74af2f0229d331703df18c6c40c89cf2892cf52e78da14d4c9aef0b53139fd1952eeeba76c7094678eb33d97b8bdf4f82061ac04d007bd5a3e6106aad06f87e90e8df5ca146fd8c067b2eb00835e592a2a67f4f7f779c2660099cb4e15bc4afa7ac7c91fbe205fb027ce9f19fd165e7c16e024e6b33fcebceb3a49be7907a049", 0xf3}], 0x9, 0xffff, 0x401) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f00000004c0), &(0x7f0000000600)=r4}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {r6}}, './dev/file0\x00'}) renameat2(r9, &(0x7f0000000240)='./mnt\x00', r9, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-open-mount-mkdirat-mount-ioctl$KVM_GET_STATS_FD_vm-pwritev-bpf$MAP_UPDATE_ELEM_TAIL_CALL-socket$inet_tcp-setsockopt$inet_tcp_TCP_REPAIR-openat-ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x28410, 0x0) r7 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) pwritev(r7, &(0x7f0000002840)=[{&(0x7f00000000c0)="aac2558b8793e2", 0x7}, {&(0x7f00000002c0)="74277b99992c85425ed80518a4e6e84a7f893f64f6515113995e4bf60dd01d39b7baf66531b0b465082fb41a064d4c67e540bbf05b6921292783edf293f25207e436e6013b41e496d94a066f36f694980b926d70beb8836468e27d6807290f6ecaa1c66e6daad81fc5e05b6221f73df202277b520be60000000000", 0x7b}, {&(0x7f0000000340)="6a33ba461ad76dd3", 0x8}, {&(0x7f0000000380)="8506f461ac102d264dde71926041a916662da94776f84760960af9b73d6aac559a29e7c7ff8af5b7902e46c2ad", 0x2d}, {&(0x7f0000000440)="10ae80b0bafc07fb69f6034dd5ec10d603cb2dfe7157de0bb21424c1d58a88dd9e246f7093120e68309ea5431be1b20f293afea92a82706572153da47d4e874403279d28c080cf", 0x47}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000000640)="755a7dd9c95a4401e67567186796a6d6af7d43e3dc778c375a6138d80996f3d93265b8984cccac16e0fda596f3d5cec1c368c546b7ef067ba716cbce09a5853fca4e6e8b126bff2dde45fad27b61768e3e8bcd75912573360cd3e020407ea56b9ea2454a64020517c71e8d1f6de3df1430d53fd4e6493f186482fa84840a36d03be7c73bac2d7bac1aa982430ae9b72dc0e5d85748c7b01200", 0x99}, {&(0x7f00000026c0)="7733c56a7adf60c47bde356904c050b70175d34e66c261e168b7536d1bc014259d48df92a82a925ca472997bbd06dad404413a7d7a7c6de4e28f4eac7aad56d719603091", 0x44}, {&(0x7f0000002740)="41f383c343c5732041429c1517560cb68e9b7609b31ed47d5d488d50ebd1c8b2728255e6726b0df398741105f2d0966129359cf48cc74d587b10badc8762430300c4d94c58221ad2ea445d0b911dcaf1c562bb826b77937e86844eba0b4ebcca51ccd34371564e22fe1faf015834e9a85f31de74af2f0229d331703df18c6c40c89cf2892cf52e78da14d4c9aef0b53139fd1952eeeba76c7094678eb33d97b8bdf4f82061ac04d007bd5a3e6106aad06f87e90e8df5ca146fd8c067b2eb00835e592a2a67f4f7f779c2660099cb4e15bc4afa7ac7c91fbe205fb027ce9f19fd165e7c16e024e6b33fcebceb3a49be7907a049", 0xf3}], 0x9, 0xffff, 0x401) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f00000004c0), &(0x7f0000000600)=r4}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {r6}}, './dev/file0\x00'}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-open-mount-mkdirat-mount-ioctl$KVM_GET_STATS_FD_vm-pwritev-bpf$MAP_UPDATE_ELEM_TAIL_CALL-socket$inet_tcp-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x28410, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) pwritev(r6, &(0x7f0000002840)=[{&(0x7f00000000c0)="aac2558b8793e2", 0x7}, {&(0x7f00000002c0)="74277b99992c85425ed80518a4e6e84a7f893f64f6515113995e4bf60dd01d39b7baf66531b0b465082fb41a064d4c67e540bbf05b6921292783edf293f25207e436e6013b41e496d94a066f36f694980b926d70beb8836468e27d6807290f6ecaa1c66e6daad81fc5e05b6221f73df202277b520be60000000000", 0x7b}, {&(0x7f0000000340)="6a33ba461ad76dd3", 0x8}, {&(0x7f0000000380)="8506f461ac102d264dde71926041a916662da94776f84760960af9b73d6aac559a29e7c7ff8af5b7902e46c2ad", 0x2d}, {&(0x7f0000000440)="10ae80b0bafc07fb69f6034dd5ec10d603cb2dfe7157de0bb21424c1d58a88dd9e246f7093120e68309ea5431be1b20f293afea92a82706572153da47d4e874403279d28c080cf", 0x47}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000000640)="755a7dd9c95a4401e67567186796a6d6af7d43e3dc778c375a6138d80996f3d93265b8984cccac16e0fda596f3d5cec1c368c546b7ef067ba716cbce09a5853fca4e6e8b126bff2dde45fad27b61768e3e8bcd75912573360cd3e020407ea56b9ea2454a64020517c71e8d1f6de3df1430d53fd4e6493f186482fa84840a36d03be7c73bac2d7bac1aa982430ae9b72dc0e5d85748c7b01200", 0x99}, {&(0x7f00000026c0)="7733c56a7adf60c47bde356904c050b70175d34e66c261e168b7536d1bc014259d48df92a82a925ca472997bbd06dad404413a7d7a7c6de4e28f4eac7aad56d719603091", 0x44}, {&(0x7f0000002740)="41f383c343c5732041429c1517560cb68e9b7609b31ed47d5d488d50ebd1c8b2728255e6726b0df398741105f2d0966129359cf48cc74d587b10badc8762430300c4d94c58221ad2ea445d0b911dcaf1c562bb826b77937e86844eba0b4ebcca51ccd34371564e22fe1faf015834e9a85f31de74af2f0229d331703df18c6c40c89cf2892cf52e78da14d4c9aef0b53139fd1952eeeba76c7094678eb33d97b8bdf4f82061ac04d007bd5a3e6106aad06f87e90e8df5ca146fd8c067b2eb00835e592a2a67f4f7f779c2660099cb4e15bc4afa7ac7c91fbe205fb027ce9f19fd165e7c16e024e6b33fcebceb3a49be7907a049", 0xf3}], 0x9, 0xffff, 0x401) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f00000004c0), &(0x7f0000000600)=r4}, 0x20) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r8, &(0x7f0000000240)='./mnt\x00', r8, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-out-of-bounds Read in md5_block testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-open-mount-mkdirat-mount-ioctl$KVM_GET_STATS_FD_vm-pwritev-bpf$MAP_UPDATE_ELEM_TAIL_CALL-socket$inet_tcp-setsockopt$inet_tcp_TCP_REPAIR-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x28410, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) pwritev(r6, &(0x7f0000002840)=[{&(0x7f00000000c0)="aac2558b8793e2", 0x7}, {&(0x7f00000002c0)="74277b99992c85425ed80518a4e6e84a7f893f64f6515113995e4bf60dd01d39b7baf66531b0b465082fb41a064d4c67e540bbf05b6921292783edf293f25207e436e6013b41e496d94a066f36f694980b926d70beb8836468e27d6807290f6ecaa1c66e6daad81fc5e05b6221f73df202277b520be60000000000", 0x7b}, {&(0x7f0000000340)="6a33ba461ad76dd3", 0x8}, {&(0x7f0000000380)="8506f461ac102d264dde71926041a916662da94776f84760960af9b73d6aac559a29e7c7ff8af5b7902e46c2ad", 0x2d}, {&(0x7f0000000440)="10ae80b0bafc07fb69f6034dd5ec10d603cb2dfe7157de0bb21424c1d58a88dd9e246f7093120e68309ea5431be1b20f293afea92a82706572153da47d4e874403279d28c080cf", 0x47}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000000640)="755a7dd9c95a4401e67567186796a6d6af7d43e3dc778c375a6138d80996f3d93265b8984cccac16e0fda596f3d5cec1c368c546b7ef067ba716cbce09a5853fca4e6e8b126bff2dde45fad27b61768e3e8bcd75912573360cd3e020407ea56b9ea2454a64020517c71e8d1f6de3df1430d53fd4e6493f186482fa84840a36d03be7c73bac2d7bac1aa982430ae9b72dc0e5d85748c7b01200", 0x99}, {&(0x7f00000026c0)="7733c56a7adf60c47bde356904c050b70175d34e66c261e168b7536d1bc014259d48df92a82a925ca472997bbd06dad404413a7d7a7c6de4e28f4eac7aad56d719603091", 0x44}, {&(0x7f0000002740)="41f383c343c5732041429c1517560cb68e9b7609b31ed47d5d488d50ebd1c8b2728255e6726b0df398741105f2d0966129359cf48cc74d587b10badc8762430300c4d94c58221ad2ea445d0b911dcaf1c562bb826b77937e86844eba0b4ebcca51ccd34371564e22fe1faf015834e9a85f31de74af2f0229d331703df18c6c40c89cf2892cf52e78da14d4c9aef0b53139fd1952eeeba76c7094678eb33d97b8bdf4f82061ac04d007bd5a3e6106aad06f87e90e8df5ca146fd8c067b2eb00835e592a2a67f4f7f779c2660099cb4e15bc4afa7ac7c91fbe205fb027ce9f19fd165e7c16e024e6b33fcebceb3a49be7907a049", 0xf3}], 0x9, 0xffff, 0x401) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f00000004c0), &(0x7f0000000600)=r4}, 0x20) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) renameat2(0xffffffffffffffff, &(0x7f0000000240)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-open-mount-mkdirat-mount-ioctl$KVM_GET_STATS_FD_vm-pwritev-bpf$MAP_UPDATE_ELEM_TAIL_CALL-socket$inet_tcp-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x28410, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) pwritev(r6, &(0x7f0000002840)=[{&(0x7f00000000c0)="aac2558b8793e2", 0x7}, {&(0x7f00000002c0)="74277b99992c85425ed80518a4e6e84a7f893f64f6515113995e4bf60dd01d39b7baf66531b0b465082fb41a064d4c67e540bbf05b6921292783edf293f25207e436e6013b41e496d94a066f36f694980b926d70beb8836468e27d6807290f6ecaa1c66e6daad81fc5e05b6221f73df202277b520be60000000000", 0x7b}, {&(0x7f0000000340)="6a33ba461ad76dd3", 0x8}, {&(0x7f0000000380)="8506f461ac102d264dde71926041a916662da94776f84760960af9b73d6aac559a29e7c7ff8af5b7902e46c2ad", 0x2d}, {&(0x7f0000000440)="10ae80b0bafc07fb69f6034dd5ec10d603cb2dfe7157de0bb21424c1d58a88dd9e246f7093120e68309ea5431be1b20f293afea92a82706572153da47d4e874403279d28c080cf", 0x47}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000000640)="755a7dd9c95a4401e67567186796a6d6af7d43e3dc778c375a6138d80996f3d93265b8984cccac16e0fda596f3d5cec1c368c546b7ef067ba716cbce09a5853fca4e6e8b126bff2dde45fad27b61768e3e8bcd75912573360cd3e020407ea56b9ea2454a64020517c71e8d1f6de3df1430d53fd4e6493f186482fa84840a36d03be7c73bac2d7bac1aa982430ae9b72dc0e5d85748c7b01200", 0x99}, {&(0x7f00000026c0)="7733c56a7adf60c47bde356904c050b70175d34e66c261e168b7536d1bc014259d48df92a82a925ca472997bbd06dad404413a7d7a7c6de4e28f4eac7aad56d719603091", 0x44}, {&(0x7f0000002740)="41f383c343c5732041429c1517560cb68e9b7609b31ed47d5d488d50ebd1c8b2728255e6726b0df398741105f2d0966129359cf48cc74d587b10badc8762430300c4d94c58221ad2ea445d0b911dcaf1c562bb826b77937e86844eba0b4ebcca51ccd34371564e22fe1faf015834e9a85f31de74af2f0229d331703df18c6c40c89cf2892cf52e78da14d4c9aef0b53139fd1952eeeba76c7094678eb33d97b8bdf4f82061ac04d007bd5a3e6106aad06f87e90e8df5ca146fd8c067b2eb00835e592a2a67f4f7f779c2660099cb4e15bc4afa7ac7c91fbe205fb027ce9f19fd165e7c16e024e6b33fcebceb3a49be7907a049", 0xf3}], 0x9, 0xffff, 0x401) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f00000004c0), &(0x7f0000000600)=r4}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r7, &(0x7f0000000240)='./mnt\x00', r7, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-open-mount-mkdirat-mount-ioctl$KVM_GET_STATS_FD_vm-pwritev-bpf$MAP_UPDATE_ELEM_TAIL_CALL-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x28410, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) pwritev(r6, &(0x7f0000002840)=[{&(0x7f00000000c0)="aac2558b8793e2", 0x7}, {&(0x7f00000002c0)="74277b99992c85425ed80518a4e6e84a7f893f64f6515113995e4bf60dd01d39b7baf66531b0b465082fb41a064d4c67e540bbf05b6921292783edf293f25207e436e6013b41e496d94a066f36f694980b926d70beb8836468e27d6807290f6ecaa1c66e6daad81fc5e05b6221f73df202277b520be60000000000", 0x7b}, {&(0x7f0000000340)="6a33ba461ad76dd3", 0x8}, {&(0x7f0000000380)="8506f461ac102d264dde71926041a916662da94776f84760960af9b73d6aac559a29e7c7ff8af5b7902e46c2ad", 0x2d}, {&(0x7f0000000440)="10ae80b0bafc07fb69f6034dd5ec10d603cb2dfe7157de0bb21424c1d58a88dd9e246f7093120e68309ea5431be1b20f293afea92a82706572153da47d4e874403279d28c080cf", 0x47}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000000640)="755a7dd9c95a4401e67567186796a6d6af7d43e3dc778c375a6138d80996f3d93265b8984cccac16e0fda596f3d5cec1c368c546b7ef067ba716cbce09a5853fca4e6e8b126bff2dde45fad27b61768e3e8bcd75912573360cd3e020407ea56b9ea2454a64020517c71e8d1f6de3df1430d53fd4e6493f186482fa84840a36d03be7c73bac2d7bac1aa982430ae9b72dc0e5d85748c7b01200", 0x99}, {&(0x7f00000026c0)="7733c56a7adf60c47bde356904c050b70175d34e66c261e168b7536d1bc014259d48df92a82a925ca472997bbd06dad404413a7d7a7c6de4e28f4eac7aad56d719603091", 0x44}, {&(0x7f0000002740)="41f383c343c5732041429c1517560cb68e9b7609b31ed47d5d488d50ebd1c8b2728255e6726b0df398741105f2d0966129359cf48cc74d587b10badc8762430300c4d94c58221ad2ea445d0b911dcaf1c562bb826b77937e86844eba0b4ebcca51ccd34371564e22fe1faf015834e9a85f31de74af2f0229d331703df18c6c40c89cf2892cf52e78da14d4c9aef0b53139fd1952eeeba76c7094678eb33d97b8bdf4f82061ac04d007bd5a3e6106aad06f87e90e8df5ca146fd8c067b2eb00835e592a2a67f4f7f779c2660099cb4e15bc4afa7ac7c91fbe205fb027ce9f19fd165e7c16e024e6b33fcebceb3a49be7907a049", 0xf3}], 0x9, 0xffff, 0x401) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f00000004c0), &(0x7f0000000600)=r4}, 0x20) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r7, &(0x7f0000000240)='./mnt\x00', r7, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-open-mount-mkdirat-mount-ioctl$KVM_GET_STATS_FD_vm-pwritev-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x28410, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) pwritev(r6, &(0x7f0000002840)=[{&(0x7f00000000c0)="aac2558b8793e2", 0x7}, {&(0x7f00000002c0)="74277b99992c85425ed80518a4e6e84a7f893f64f6515113995e4bf60dd01d39b7baf66531b0b465082fb41a064d4c67e540bbf05b6921292783edf293f25207e436e6013b41e496d94a066f36f694980b926d70beb8836468e27d6807290f6ecaa1c66e6daad81fc5e05b6221f73df202277b520be60000000000", 0x7b}, {&(0x7f0000000340)="6a33ba461ad76dd3", 0x8}, {&(0x7f0000000380)="8506f461ac102d264dde71926041a916662da94776f84760960af9b73d6aac559a29e7c7ff8af5b7902e46c2ad", 0x2d}, {&(0x7f0000000440)="10ae80b0bafc07fb69f6034dd5ec10d603cb2dfe7157de0bb21424c1d58a88dd9e246f7093120e68309ea5431be1b20f293afea92a82706572153da47d4e874403279d28c080cf", 0x47}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000000640)="755a7dd9c95a4401e67567186796a6d6af7d43e3dc778c375a6138d80996f3d93265b8984cccac16e0fda596f3d5cec1c368c546b7ef067ba716cbce09a5853fca4e6e8b126bff2dde45fad27b61768e3e8bcd75912573360cd3e020407ea56b9ea2454a64020517c71e8d1f6de3df1430d53fd4e6493f186482fa84840a36d03be7c73bac2d7bac1aa982430ae9b72dc0e5d85748c7b01200", 0x99}, {&(0x7f00000026c0)="7733c56a7adf60c47bde356904c050b70175d34e66c261e168b7536d1bc014259d48df92a82a925ca472997bbd06dad404413a7d7a7c6de4e28f4eac7aad56d719603091", 0x44}, {&(0x7f0000002740)="41f383c343c5732041429c1517560cb68e9b7609b31ed47d5d488d50ebd1c8b2728255e6726b0df398741105f2d0966129359cf48cc74d587b10badc8762430300c4d94c58221ad2ea445d0b911dcaf1c562bb826b77937e86844eba0b4ebcca51ccd34371564e22fe1faf015834e9a85f31de74af2f0229d331703df18c6c40c89cf2892cf52e78da14d4c9aef0b53139fd1952eeeba76c7094678eb33d97b8bdf4f82061ac04d007bd5a3e6106aad06f87e90e8df5ca146fd8c067b2eb00835e592a2a67f4f7f779c2660099cb4e15bc4afa7ac7c91fbe205fb027ce9f19fd165e7c16e024e6b33fcebceb3a49be7907a049", 0xf3}], 0x9, 0xffff, 0x401) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r7, &(0x7f0000000240)='./mnt\x00', r7, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-out-of-bounds Read in md5_block testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-open-mount-mkdirat-mount-ioctl$KVM_GET_STATS_FD_vm-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x28410, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r6, &(0x7f0000000240)='./mnt\x00', r6, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-open-mount-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x28410, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r6, &(0x7f0000000240)='./mnt\x00', r6, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-open-mount-mkdirat-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r6, &(0x7f0000000240)='./mnt\x00', r6, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-open-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r6, &(0x7f0000000240)='./mnt\x00', r6, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-out-of-bounds Read in md5_block testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-open-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r6, &(0x7f0000000240)='./mnt\x00', r6, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r6, &(0x7f0000000240)='./mnt\x00', r6, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-out-of-bounds Read in md5_block testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r6, &(0x7f0000000240)='./mnt\x00', r6, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r6, &(0x7f0000000240)='./mnt\x00', r6, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-getsockopt$TIPC_DEST_DROPPABLE-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r6, &(0x7f0000000240)='./mnt\x00', r6, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-sendto$inet_nvme_icreq_pdu-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x1, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x8000}, 0x80, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r6, &(0x7f0000000240)='./mnt\x00', r6, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-ioctl$SIOCSIFHWADDR-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r6, &(0x7f0000000240)='./mnt\x00', r6, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-socketpair-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r5, &(0x7f0000000240)='./mnt\x00', r5, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-epoll_ctl$EPOLL_CTL_ADD-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r5, &(0x7f0000000240)='./mnt\x00', r5, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-dup3-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) dup3(r2, r3, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r4, &(0x7f0000000240)='./mnt\x00', r4, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-epoll_pwait-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r4, &(0x7f0000000240)='./mnt\x00', r4, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r4, &(0x7f0000000240)='./mnt\x00', r4, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-epoll_create1-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) epoll_create1(0x0) epoll_create1(0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r2, &(0x7f0000000240)='./mnt\x00', r2, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-epoll_create1-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) epoll_create1(0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r2, &(0x7f0000000240)='./mnt\x00', r2, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-write$sndseq-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8, @time={0x1, 0x5a62}, {0x0, 0x40}, {}, @raw32={[0x0, 0x8]}}, {0xff, 0x0, 0x0, 0x0, @time={0xfffffffd, 0x3}, {0x0, 0x80}, {}, @quote={{}, 0x400}}], 0x38) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r2, &(0x7f0000000240)='./mnt\x00', r2, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-fcntl$dupfd-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r1, &(0x7f0000000240)='./mnt\x00', r1, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-out-of-bounds Read in md5_block testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-syz_open_dev$sg-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-out-of-bounds Read in md5_block testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket(0x10, 0x3, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, &(0x7f00000000c0)) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-out-of-bounds Read in md5_block testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='\x00', 0x0, &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='\x00', &(0x7f0000000000)='./mnt\x00', 0x0, 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, 0x0, r0, &(0x7f0000000280)='./dev\x00', 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, 0x0, 0x4) program did not crash extracting C reproducer testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 program crashed: KASAN: slab-out-of-bounds Read in md5_block simplifying C reproducer testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 program did not crash testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet validation run: crashed=true testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet validation run: crashed=true testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$TIPC_DEST_DROPPABLE-add_key$user-mkdirat-mount-setsockopt$inet_tcp_TCP_REPAIR-openat-renameat2 detailed listing: executing program 0: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000240)='./mnt\x00', r0, &(0x7f0000000280)='./dev\x00', 0x4) program crashed: KASAN: slab-use-after-free Read in ecryptfs_write_tag_70_packet validation run: crashed=true reproducing took 37m5.427932514s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in ecryptfs_write_tag_70_packet+0x117b/0x1410 fs/ecryptfs/keystore.c:742 Read of size 4 at addr ffff8880383ee698 by task syz.0.17/5905 CPU: 0 UID: 0 PID: 5905 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0x13d/0x4b0 mm/kasan/report.c:482 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595 ecryptfs_write_tag_70_packet+0x117b/0x1410 fs/ecryptfs/keystore.c:742 ecryptfs_encrypt_filename fs/ecryptfs/crypto.c:1378 [inline] ecryptfs_encrypt_and_encode_filename+0x428/0xa60 fs/ecryptfs/crypto.c:1789 ecryptfs_lookup+0x1f7/0x830 fs/ecryptfs/inode.c:402 lookup_one_qstr_excl+0x1cd/0x250 fs/namei.c:1810 __start_renaming+0x16d/0x520 fs/namei.c:3882 filename_renameat2+0x538/0xa60 fs/namei.c:6301 __do_sys_renameat2 fs/namei.c:6355 [inline] __se_sys_renameat2 fs/namei.c:6350 [inline] __x64_sys_renameat2+0xef/0x140 fs/namei.c:6350 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8aec99e159 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff5284b6e8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c RAX: ffffffffffffffda RBX: 00007f8aecc25fa0 RCX: 00007f8aec99e159 RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 RBP: 00007f8aeca3506b R08: 0000000000000004 R09: 0000000000000000 R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f8aecc25fac R14: 00007f8aecc25fa0 R15: 00007f8aecc25fa0 Allocated by task 5829: kasan_save_stack+0x30/0x50 mm/kasan/common.c:57 kasan_save_track+0x14/0x30 mm/kasan/common.c:78 poison_kmalloc_redzone mm/kasan/common.c:398 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:415 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5414 [inline] __kmalloc_noprof+0x32f/0x840 mm/slub.c:5439 _kmalloc_noprof include/linux/slab.h:995 [inline] _kzalloc_noprof include/linux/slab.h:1312 [inline] __list_lru_init+0xd9/0x4b0 mm/list_lru.c:678 alloc_super fs/super.c:399 [inline] sget_fc+0xaca/0x1f70 fs/super.c:874 vfs_get_super fs/super.c:1385 [inline] get_tree_nodev+0x28/0x190 fs/super.c:1409 vfs_get_tree+0x92/0x320 fs/super.c:1932 fc_mount fs/namespace.c:1198 [inline] do_new_mount_fc fs/namespace.c:3772 [inline] do_new_mount fs/namespace.c:3848 [inline] path_mount+0x7d0/0x24c0 fs/namespace.c:4168 do_mount fs/namespace.c:4181 [inline] __do_sys_mount fs/namespace.c:4397 [inline] __se_sys_mount fs/namespace.c:4374 [inline] __x64_sys_mount+0x293/0x310 fs/namespace.c:4374 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 5829: kasan_save_stack+0x30/0x50 mm/kasan/common.c:57 kasan_save_track+0x14/0x30 mm/kasan/common.c:78 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2748 [inline] slab_free mm/slub.c:6508 [inline] kfree+0x22b/0x6d0 mm/slub.c:6801 list_lru_destroy mm/list_lru.c:701 [inline] list_lru_destroy+0x155/0x710 mm/list_lru.c:692 deactivate_locked_super+0xdd/0x130 fs/super.c:592 deactivate_super fs/super.c:614 [inline] deactivate_super+0xea/0x110 fs/super.c:610 cleanup_mnt+0x21f/0x450 fs/namespace.c:1317 task_work_run+0x150/0x240 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x8da/0x2a50 kernel/exit.c:986 do_group_exit+0xd5/0x2a0 kernel/exit.c:1129 get_signal+0x1ec7/0x21e0 kernel/signal.c:3112 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x139/0x700 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:343 [inline] do_syscall_64+0x661/0x790 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f The buggy address belongs to the object at ffff8880383ee600 which belongs to the cache kmalloc-256 of size 256 The buggy address is located 152 bytes inside of freed 256-byte region [ffff8880383ee600, ffff8880383ee700) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x383ee head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5824, tgid 5824 (syz-executor), ts 42896404998 set_page_owner include/linux/page_owner.h:33 [inline] post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871 prep_new_page mm/page_alloc.c:1879 [inline] get_page_from_freelist+0x110d/0x35d0 mm/page_alloc.c:3943 __alloc_frozen_pages_noprof+0x2eb/0x3300 mm/page_alloc.c:5436 alloc_slab_page mm/slub.c:3347 [inline] allocate_slab mm/slub.c:3462 [inline] new_slab+0xa9/0x6e0 mm/slub.c:3513 refill_objects+0xe3/0x410 mm/slub.c:7417 refill_sheaf mm/slub.c:2885 [inline] __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774 alloc_from_pcs mm/slub.c:4850 [inline] slab_alloc_node mm/slub.c:4984 [inline] __do_kmalloc_node mm/slub.c:5413 [inline] __kmalloc_noprof+0x67c/0x840 mm/slub.c:5439 _kmalloc_noprof include/linux/slab.h:995 [inline] _kmalloc_array_noprof include/linux/slab.h:1211 [inline] security_inode_init_security+0x113/0x370 security/security.c:1347 shmem_mknod+0x2ce/0x480 mm/shmem.c:3838 shmem_mkdir+0x31/0x80 mm/shmem.c:3893 vfs_mkdir+0x364/0x850 fs/namei.c:5410 filename_mkdirat+0x48b/0x5e0 fs/namei.c:5443 __do_sys_mkdirat fs/namei.c:5464 [inline] __se_sys_mkdirat fs/namei.c:5461 [inline] __x64_sys_mkdirat+0x89/0xc0 fs/namei.c:5461 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f page last free pid 5824 tgid 5824 ts 42895264690 stack trace: reset_page_owner include/linux/page_owner.h:26 [inline] __free_pages_prepare mm/page_alloc.c:1418 [inline] __free_frozen_pages+0x79f/0x10f0 mm/page_alloc.c:2962 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4683 [inline] slab_alloc_node mm/slub.c:4996 [inline] kmem_cache_alloc_noprof+0x269/0x6a0 mm/slub.c:5010 alloc_vfsmnt+0x23/0x710 fs/namespace.c:287 vfs_create_mount fs/namespace.c:1183 [inline] vfs_create_mount fs/namespace.c:1176 [inline] fc_mount fs/namespace.c:1201 [inline] fc_mount fs/namespace.c:1196 [inline] do_new_mount_fc fs/namespace.c:3772 [inline] do_new_mount fs/namespace.c:3848 [inline] path_mount+0x1f31/0x24c0 fs/namespace.c:4168 do_mount fs/namespace.c:4181 [inline] __do_sys_mount fs/namespace.c:4397 [inline] __se_sys_mount fs/namespace.c:4374 [inline] __x64_sys_mount+0x293/0x310 fs/namespace.c:4374 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f Memory state around the buggy address: ffff8880383ee580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff8880383ee600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff8880383ee680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8880383ee700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff8880383ee780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in ecryptfs_write_tag_70_packet+0x117b/0x1410 fs/ecryptfs/keystore.c:742 Read of size 4 at addr ffff8880383ee698 by task syz.0.17/5905 CPU: 0 UID: 0 PID: 5905 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0x13d/0x4b0 mm/kasan/report.c:482 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595 ecryptfs_write_tag_70_packet+0x117b/0x1410 fs/ecryptfs/keystore.c:742 ecryptfs_encrypt_filename fs/ecryptfs/crypto.c:1378 [inline] ecryptfs_encrypt_and_encode_filename+0x428/0xa60 fs/ecryptfs/crypto.c:1789 ecryptfs_lookup+0x1f7/0x830 fs/ecryptfs/inode.c:402 lookup_one_qstr_excl+0x1cd/0x250 fs/namei.c:1810 __start_renaming+0x16d/0x520 fs/namei.c:3882 filename_renameat2+0x538/0xa60 fs/namei.c:6301 __do_sys_renameat2 fs/namei.c:6355 [inline] __se_sys_renameat2 fs/namei.c:6350 [inline] __x64_sys_renameat2+0xef/0x140 fs/namei.c:6350 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8aec99e159 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff5284b6e8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c RAX: ffffffffffffffda RBX: 00007f8aecc25fa0 RCX: 00007f8aec99e159 RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 RBP: 00007f8aeca3506b R08: 0000000000000004 R09: 0000000000000000 R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f8aecc25fac R14: 00007f8aecc25fa0 R15: 00007f8aecc25fa0 Allocated by task 5829: kasan_save_stack+0x30/0x50 mm/kasan/common.c:57 kasan_save_track+0x14/0x30 mm/kasan/common.c:78 poison_kmalloc_redzone mm/kasan/common.c:398 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:415 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5414 [inline] __kmalloc_noprof+0x32f/0x840 mm/slub.c:5439 _kmalloc_noprof include/linux/slab.h:995 [inline] _kzalloc_noprof include/linux/slab.h:1312 [inline] __list_lru_init+0xd9/0x4b0 mm/list_lru.c:678 alloc_super fs/super.c:399 [inline] sget_fc+0xaca/0x1f70 fs/super.c:874 vfs_get_super fs/super.c:1385 [inline] get_tree_nodev+0x28/0x190 fs/super.c:1409 vfs_get_tree+0x92/0x320 fs/super.c:1932 fc_mount fs/namespace.c:1198 [inline] do_new_mount_fc fs/namespace.c:3772 [inline] do_new_mount fs/namespace.c:3848 [inline] path_mount+0x7d0/0x24c0 fs/namespace.c:4168 do_mount fs/namespace.c:4181 [inline] __do_sys_mount fs/namespace.c:4397 [inline] __se_sys_mount fs/namespace.c:4374 [inline] __x64_sys_mount+0x293/0x310 fs/namespace.c:4374 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 5829: kasan_save_stack+0x30/0x50 mm/kasan/common.c:57 kasan_save_track+0x14/0x30 mm/kasan/common.c:78 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2748 [inline] slab_free mm/slub.c:6508 [inline] kfree+0x22b/0x6d0 mm/slub.c:6801 list_lru_destroy mm/list_lru.c:701 [inline] list_lru_destroy+0x155/0x710 mm/list_lru.c:692 deactivate_locked_super+0xdd/0x130 fs/super.c:592 deactivate_super fs/super.c:614 [inline] deactivate_super+0xea/0x110 fs/super.c:610 cleanup_mnt+0x21f/0x450 fs/namespace.c:1317 task_work_run+0x150/0x240 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x8da/0x2a50 kernel/exit.c:986 do_group_exit+0xd5/0x2a0 kernel/exit.c:1129 get_signal+0x1ec7/0x21e0 kernel/signal.c:3112 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x139/0x700 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:343 [inline] do_syscall_64+0x661/0x790 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f The buggy address belongs to the object at ffff8880383ee600 which belongs to the cache kmalloc-256 of size 256 The buggy address is located 152 bytes inside of freed 256-byte region [ffff8880383ee600, ffff8880383ee700) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x383ee head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5824, tgid 5824 (syz-executor), ts 42896404998 set_page_owner include/linux/page_owner.h:33 [inline] post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871 prep_new_page mm/page_alloc.c:1879 [inline] get_page_from_freelist+0x110d/0x35d0 mm/page_alloc.c:3943 __alloc_frozen_pages_noprof+0x2eb/0x3300 mm/page_alloc.c:5436 alloc_slab_page mm/slub.c:3347 [inline] allocate_slab mm/slub.c:3462 [inline] new_slab+0xa9/0x6e0 mm/slub.c:3513 refill_objects+0xe3/0x410 mm/slub.c:7417 refill_sheaf mm/slub.c:2885 [inline] __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774 alloc_from_pcs mm/slub.c:4850 [inline] slab_alloc_node mm/slub.c:4984 [inline] __do_kmalloc_node mm/slub.c:5413 [inline] __kmalloc_noprof+0x67c/0x840 mm/slub.c:5439 _kmalloc_noprof include/linux/slab.h:995 [inline] _kmalloc_array_noprof include/linux/slab.h:1211 [inline] security_inode_init_security+0x113/0x370 security/security.c:1347 shmem_mknod+0x2ce/0x480 mm/shmem.c:3838 shmem_mkdir+0x31/0x80 mm/shmem.c:3893 vfs_mkdir+0x364/0x850 fs/namei.c:5410 filename_mkdirat+0x48b/0x5e0 fs/namei.c:5443 __do_sys_mkdirat fs/namei.c:5464 [inline] __se_sys_mkdirat fs/namei.c:5461 [inline] __x64_sys_mkdirat+0x89/0xc0 fs/namei.c:5461 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f page last free pid 5824 tgid 5824 ts 42895264690 stack trace: reset_page_owner include/linux/page_owner.h:26 [inline] __free_pages_prepare mm/page_alloc.c:1418 [inline] __free_frozen_pages+0x79f/0x10f0 mm/page_alloc.c:2962 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4683 [inline] slab_alloc_node mm/slub.c:4996 [inline] kmem_cache_alloc_noprof+0x269/0x6a0 mm/slub.c:5010 alloc_vfsmnt+0x23/0x710 fs/namespace.c:287 vfs_create_mount fs/namespace.c:1183 [inline] vfs_create_mount fs/namespace.c:1176 [inline] fc_mount fs/namespace.c:1201 [inline] fc_mount fs/namespace.c:1196 [inline] do_new_mount_fc fs/namespace.c:3772 [inline] do_new_mount fs/namespace.c:3848 [inline] path_mount+0x1f31/0x24c0 fs/namespace.c:4168 do_mount fs/namespace.c:4181 [inline] __do_sys_mount fs/namespace.c:4397 [inline] __se_sys_mount fs/namespace.c:4374 [inline] __x64_sys_mount+0x293/0x310 fs/namespace.c:4374 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f Memory state around the buggy address: ffff8880383ee580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff8880383ee600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff8880383ee680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8880383ee700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff8880383ee780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ==================================================================