0x7e2, 0x10001, 0x10000, 0x8001, 0x10000, 0x8f, 0x5, 0x10001, 0xaf0d, 0x8001, 0xffff, 0x8, 0x3ff, 0x4, 0x9, 0x0, 0x7fff, 0x60d, 0xfffffffffffffffd, 0x1, 0x3, 0x6, 0x8, 0x5, 0x10001, 0xffffffffffffff09, 0xfff, 0x9, 0xfffffffffffffff7, 0x7fff, 0xffffffff, 0x86, 0x7ff, 0x6315, 0x7, 0x20, 0x3, 0x200, 0x5, 0xc8f1, 0xff5b, 0x5, 0x7, 0x80000000, 0x7, 0x40, 0xd21e, 0x100000000, 0x8, 0x22, 0x8001, 0xc0c, 0x3, 0x1, 0x7, 0x1200000000000000, 0x3ff, 0x79d, 0x3, 0x76, 0x7, 0x9], [0x4, 0x4, 0x20, 0x92e, 0x2, 0x6, 0x80000001, 0x88, 0x2, 0x7, 0x8001, 0x3, 0x5, 0x9, 0x5, 0xcc02, 0x3, 0x1, 0x1, 0x28ae, 0x7fffffff, 0x0, 0x44a, 0x10000, 0x1, 0x7, 0x6, 0x9, 0x5, 0x80000001, 0x6, 0x3, 0x6, 0x7fff, 0x80, 0x5, 0x9, 0xfffffffffffffffa, 0x8, 0x7bc1, 0x1, 0x0, 0x80, 0x3ff, 0x1, 0x7, 0x5, 0x9, 0x244, 0xa165, 0x100, 0x4, 0x1, 0x6, 0x2, 0x7, 0x7, 0x100000000, 0x58, 0x400, 0x40, 0x2, 0x800, 0x9], [0x1, 0x9, 0x20, 0x0, 0x5, 0xffffffffffff0084, 0x7, 0xa3, 0x10001, 0x4e50522, 0x4, 0x7, 0xffffffffffffff7f, 0x4, 0x4, 0x3, 0x3ff, 0x1000, 0x80, 0x5, 0x401, 0x9, 0x8001, 0x3f, 0x10000, 0x20, 0x0, 0x9, 0xa5b7, 0x80, 0x5, 0x2, 0x0, 0xb52, 0x7, 0x1, 0x8000, 0xffffffffffffff80, 0x592, 0x6, 0x1, 0x2, 0x7fff, 0xfffffe0000000000, 0x9, 0x3a5, 0x1f, 0x8, 0xfffffffffffffffe, 0x1000, 0x3f, 0x0, 0x1000, 0x1, 0x401, 0x7ff, 0x13, 0x20, 0x10000, 0xfffffffffffffc01, 0x6, 0x5, 0xc9e7], [0xfffffffffffffffb, 0x4, 0x9, 0x9, 0x0, 0x0, 0xfffffffffffffffb, 0x4, 0xff, 0x0, 0x5, 0x5, 0x8, 0x5, 0xffffffffffffffa1, 0x3ff, 0x80000001, 0x1fbe, 0x80000001, 0x80000000, 0xb7, 0x116d, 0x10001, 0x1, 0x3ff, 0x2, 0xfffffffffffffffa, 0x67, 0x3, 0x0, 0x2, 0x6, 0x100000001, 0x1c17, 0x7f, 0x1, 0x4, 0x4, 0x0, 0xf794, 0x9, 0x8, 0x8, 0x101, 0x8, 0x81, 0x8, 0x100000000, 0x1, 0x3, 0x8, 0x3ff, 0x4, 0x1ffe0000, 0xfffffffffffffffa, 0x400, 0x2, 0xa8b, 0x3, 0x0, 0xa7, 0x7f, 0x1ff, 0x18]}, 0x45c) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000200)={0x400, 0x2, 0x2}) [ 2680.465187] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2680.477683] audit: type=1804 audit(1550254368.858:125): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1325/file0" dev="sda1" ino=16722 res=1 [ 2680.483228] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2680.513863] binder: release 4907:4912 transaction 162 out, still active 18:12:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:12:48 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12000e001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2680.534676] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2680.557112] binder: send failed reply for transaction 162, target dead [ 2680.562850] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2680.589252] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2680.601569] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2680.611039] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2680.611053] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2680.611179] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2680.611192] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2680.611207] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2680.611221] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2680.670501] kobject: 'loop2' (000000004811331c): kobject_uevent_env 18:12:49 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000002a040000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:12:49 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12000f001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2680.697267] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2680.716280] binder: 4955:4960 ioctl c018620b 0 returned -14 [ 2680.723369] audit: type=1804 audit(1550254369.118:126): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2624/file0" dev="sda1" ino=17318 res=1 [ 2680.822658] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2680.829238] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2680.852273] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2680.862494] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:12:49 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120010001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2680.920787] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2680.927546] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2680.962842] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2680.974512] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2680.982641] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2680.992581] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:12:49 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120011001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2681.006926] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2681.025924] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2681.035430] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2681.042984] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2681.051172] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2681.060744] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2681.103141] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2681.109781] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2681.124115] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2681.135127] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2681.157263] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2681.168817] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2681.185996] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:12:49 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120012001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2681.206945] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2681.229013] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2681.239208] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2681.249936] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:12:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2681.254596] Process accounting resumed [ 2681.259901] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2681.268728] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2681.276292] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2681.341314] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2681.349113] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2681.374862] kobject: 'loop3' (0000000077381589): kobject_uevent_env 18:12:49 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000002b040000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:12:49 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120013001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2681.395067] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:12:49 executing program 5: socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2681.462795] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2681.468106] Process accounting resumed [ 2681.472690] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2681.488895] audit: type=1804 audit(1550254369.878:127): pid=4990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1326/file0" dev="sda1" ino=17073 res=1 [ 2681.522545] binder: release 4955:4965 transaction 166 out, still active [ 2681.556634] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2681.577391] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2681.581132] binder: send failed reply for transaction 166, target dead 18:12:50 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) 18:12:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:12:50 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120014001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2681.618326] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2681.635309] audit: type=1804 audit(1550254370.018:128): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2625/file0" dev="sda1" ino=17312 res=1 [ 2681.640734] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2681.677405] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2681.711273] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2681.720513] Process accounting resumed 18:12:50 executing program 5: socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2681.728214] binder: 5008:5010 ioctl c018620b 0 returned -14 [ 2681.729663] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2681.744738] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2681.755056] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2681.760230] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:12:50 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120015001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2681.778620] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2681.795461] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2681.810094] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2681.813732] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2681.824405] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2681.826757] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2681.841437] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2681.848501] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2681.851610] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2681.880621] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2681.899070] audit: type=1804 audit(1550254370.288:129): pid=5021 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2626/file0" dev="sda1" ino=17230 res=1 [ 2681.932617] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2681.939243] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:12:50 executing program 5: socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') 18:12:50 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120016001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2681.987499] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2681.993534] Process accounting resumed [ 2682.011248] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:12:50 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000002c040000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2682.080274] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2682.087243] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2682.099984] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2682.106917] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2682.137690] audit: type=1804 audit(1550254370.528:130): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2627/file0" dev="sda1" ino=17312 res=1 [ 2682.196358] Process accounting resumed [ 2682.212641] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2682.219833] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2682.239021] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2682.262887] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2682.277094] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2682.284251] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2682.289147] Process accounting resumed 18:12:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:12:50 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120017001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:12:50 executing program 5: socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2682.309830] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2682.316772] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2682.358761] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2682.366744] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2682.380190] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:12:50 executing program 5: socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2682.433563] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2682.441086] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2682.487415] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2682.495421] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2682.502933] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2682.506325] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2682.510944] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2682.527446] audit: type=1804 audit(1550254370.918:131): pid=5050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1327/file0" dev="sda1" ino=17089 res=1 [ 2682.532568] binder: release 5008:5018 transaction 170 out, still active [ 2682.568950] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:12:50 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x6, 0x6, 0x5, 0x7, 0x7c5, 0xffffffffffff2d1f, 0x2, 0xffffffffffffff01}, &(0x7f0000000100)={0x2, 0xf999, 0x5, 0x3, 0x1, 0x8, 0x8, 0x8}, &(0x7f0000000140)={0x1000, 0x2400000000000, 0x200, 0x9, 0x100000000, 0x7, 0xfff, 0x200}, &(0x7f0000000200)={r2, r3+10000000}, &(0x7f0000000280)={&(0x7f0000000240)={0x100000001}, 0x8}) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) 18:12:50 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120018001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:12:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:12:51 executing program 5: socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2682.582571] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2682.590796] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2682.602583] binder: send failed reply for transaction 170, target dead [ 2682.612489] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:12:51 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120019001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2682.663074] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2682.670366] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2682.689953] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2682.704579] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2682.719444] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2682.740865] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2682.748130] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:12:51 executing program 5: socket$alg(0x26, 0x5, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2682.764586] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2682.779527] binder: 5062:5069 ioctl c018620b 0 returned -14 [ 2682.797440] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env 18:12:51 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000002d040000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:12:51 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12001a001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2682.809455] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2682.833690] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2682.842976] binder_alloc: 5062: binder_alloc_buf, no vma [ 2682.847437] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2682.848468] binder: 5062:5075 transaction failed 29189/-3, size 24-8 line 3035 [ 2682.859630] binder: 5062:5075 BC_INCREFS_DONE u0000000000000000 no match [ 2682.921443] binder: 5062:5081 Release 1 refcount change on invalid ref 1 ret -22 [ 2682.926545] audit: type=1804 audit(1550254371.308:132): pid=5080 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2631/file0" dev="sda1" ino=16674 res=1 [ 2682.952832] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2682.959270] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2683.009586] Process accounting resumed [ 2683.036203] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2683.046579] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2683.062315] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2683.068882] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2683.098092] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2683.098551] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2683.112530] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2683.124968] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2683.138789] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2683.146280] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2683.157747] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2683.165607] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2683.176660] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2683.183934] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2683.226610] Process accounting resumed [ 2683.232714] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2683.239497] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:12:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:12:51 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') 18:12:51 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12001b001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2683.269827] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2683.287807] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2683.303463] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2683.309472] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2683.319581] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2683.323381] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2683.335770] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2683.343649] audit: type=1804 audit(1550254371.728:133): pid=5101 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2632/file0" dev="sda1" ino=17289 res=1 18:12:51 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12001c001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2683.348680] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2683.383804] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2683.407777] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2683.414354] Process accounting resumed [ 2683.433143] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2683.441815] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2683.441826] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2683.441837] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2683.482690] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2683.496061] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2683.531105] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2683.538368] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2683.582753] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2683.589973] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2683.602090] audit: type=1804 audit(1550254371.988:134): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1328/file0" dev="sda1" ino=17252 res=1 [ 2683.619618] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:12:52 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x4e, "9b4ca9cfd4e952dd0e6feae74211fd92a4590917925a9c63a103721e8e129fe67e7013da662139a433e0b26d07f7151247c1a9e1ebc9db405e14ec4695339f51e4590877b04061b84cc646b0f325"}, &(0x7f0000000000)=0x56) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r3, 0x10000, 0x2, [0x9, 0x3ff]}, 0xc) 18:12:52 executing program 5: open(0x0, 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') 18:12:52 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000002e040000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:12:52 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12001d001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:12:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2683.632855] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2683.660259] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2683.670288] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2683.708441] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2683.715016] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2683.717066] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2683.744801] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:12:52 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12001e001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:12:52 executing program 5: open(0x0, 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2683.775684] binder: 5124:5128 ioctl c018620b 0 returned -14 [ 2683.778399] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2683.792726] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2683.806881] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2683.811469] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2683.853661] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2683.853952] binder_alloc: 5124: binder_alloc_buf, no vma [ 2683.870159] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2683.874669] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2683.893394] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2683.902206] binder: 5124:5133 BC_INCREFS_DONE u0000000000000000 no match [ 2683.910307] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2683.917808] binder: 5124:5133 Release 1 refcount change on invalid ref 1 ret -22 [ 2683.918646] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2683.932702] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2683.949973] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2683.964985] binder: 5124:5128 transaction failed 29189/-3, size 24-8 line 3035 [ 2683.975641] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:12:52 executing program 5: open(0x0, 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2683.998077] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2684.042928] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2684.049793] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2684.060811] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2684.068004] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2684.082180] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2684.090633] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2684.099282] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2684.109126] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2684.117429] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2684.128300] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2684.139711] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2684.149313] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2684.159270] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2684.171516] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2684.189889] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2684.202261] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2684.213932] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2684.221191] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:12:52 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:12:52 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120021001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:12:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:12:52 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2684.265041] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2684.271629] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2684.300095] Process accounting resumed [ 2684.342866] binder: 5152:5155 ioctl c018620b 0 returned -14 [ 2684.372579] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2684.379231] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2684.390616] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2684.401947] binder_alloc: 5152: binder_alloc_buf, no vma [ 2684.415046] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2684.422494] binder: 5152:5161 transaction failed 29189/-3, size 24-8 line 3035 [ 2684.434342] binder: 5152:5161 BC_INCREFS_DONE u0000000000000000 no match [ 2684.448686] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2684.452848] binder: 5152:5161 Release 1 refcount change on invalid ref 1 ret -22 [ 2684.463426] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2684.480529] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2684.490683] audit: type=1804 audit(1550254372.878:135): pid=5166 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1329/file0" dev="sda1" ino=16537 res=1 [ 2684.508650] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:12:53 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r2, 0xfffffffffffffff9}, &(0x7f00000001c0)=0x8) getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000100)=""/124, 0x7c) 18:12:53 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000002f040000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:12:53 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) acct(&(0x7f0000000140)='./file0\x00') 18:12:53 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120022001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:12:53 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2684.694341] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2684.707179] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2684.717788] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2684.732447] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:12:53 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120023001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2684.771313] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2684.789770] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2684.790658] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2684.805105] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:12:53 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(0x0) [ 2684.821988] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2684.839756] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2684.848449] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2684.856429] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2684.865457] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2684.873209] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2684.875916] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2684.884384] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:12:53 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120024001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2684.915889] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2684.932507] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2684.952982] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2684.966383] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2684.980412] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2684.987508] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2684.994234] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2685.004159] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2685.020529] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2685.036196] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2685.050441] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2685.059682] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2685.082600] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2685.090195] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2685.112297] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2685.152241] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2685.206040] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2685.218442] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2685.228987] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2685.235756] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:12:53 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:12:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:12:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:12:53 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120025001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2685.250586] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2685.258143] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2685.259113] Process accounting resumed [ 2685.292457] net_ratelimit: 26 callbacks suppressed [ 2685.292465] protocol 88fb is buggy, dev hsr_slave_0 [ 2685.302530] protocol 88fb is buggy, dev hsr_slave_1 [ 2685.307689] protocol 88fb is buggy, dev hsr_slave_0 [ 2685.312800] protocol 88fb is buggy, dev hsr_slave_1 [ 2685.367431] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2685.371585] binder: 5209:5214 ioctl c018620b 0 returned -14 [ 2685.378925] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2685.414460] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2685.428377] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2685.449045] binder_alloc: 5209: binder_alloc_buf, no vma [ 2685.468390] audit: type=1804 audit(1550254373.858:136): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2640/file0" dev="sda1" ino=17324 res=1 [ 2685.498016] binder: 5209:5217 transaction failed 29189/-3, size 24-8 line 3035 [ 2685.507074] binder: 5209:5217 BC_INCREFS_DONE u0000000000000000 no match [ 2685.514662] binder: 5209:5217 Release 1 refcount change on invalid ref 1 ret -22 [ 2685.532442] protocol 88fb is buggy, dev hsr_slave_0 [ 2685.537626] protocol 88fb is buggy, dev hsr_slave_1 18:12:54 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000030040000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:12:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) r2 = geteuid() syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xfff, 0x0, &(0x7f0000000140), 0x400, &(0x7f00000003c0)={[{@nodots='nodots'}, {@fat=@uid={'uid', 0x3d, r2}}, {@dots='dots'}, {@dots='dots'}, {@dots='dots'}], [{@euid_lt={'euid<', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x63, 0x34, 0x34, 0x32, 0x64, 0x32, 0x37], 0x2d, [0x63, 0x31, 0x76, 0x3f], 0x2d, [0x39, 0x7b, 0x65, 0x61], 0x2d, [0x73, 0x75, 0x73, 0x7f], 0x2d, [0x65, 0x33, 0x66, 0x79, 0x37, 0x0, 0x35, 0x7c]}}}, {@pcr={'pcr', 0x3d, 0x2a}}]}) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000180)={0x2, 0x9, 0x7ff, 0x766d, 0x0, 0x1, 0x9, 0x2f8d, 0x6f2, 0x9}) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000001c0)) 18:12:54 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120026001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2685.602950] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2685.609480] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2685.679841] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2685.686751] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2685.706727] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2685.721457] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:12:54 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120027001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2685.725097] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2685.736491] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2685.747200] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2685.756354] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2685.776495] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2685.779960] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2685.783693] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2685.792636] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2685.808498] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2685.826935] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2685.836954] FAT-fs (loop1): Unrecognized mount option "euid<00000000000000000000" or missing value [ 2685.853399] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2685.860090] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2685.878204] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2685.890526] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:12:54 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120028001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2685.924619] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2685.945255] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2685.969047] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2685.979783] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2685.994084] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2686.007236] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2686.012763] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2686.021227] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2686.022322] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2686.022464] protocol 88fb is buggy, dev hsr_slave_0 [ 2686.028712] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2686.037815] protocol 88fb is buggy, dev hsr_slave_1 [ 2686.037926] protocol 88fb is buggy, dev hsr_slave_0 [ 2686.043365] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2686.050416] protocol 88fb is buggy, dev hsr_slave_1 [ 2686.076449] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2686.085010] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2686.092988] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:12:54 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000003d040000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:12:54 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120029001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:12:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2686.158403] Process accounting resumed [ 2686.179579] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2686.188307] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2686.212841] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2686.221170] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2686.232683] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2686.251053] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2686.273229] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2686.297348] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2686.306284] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2686.325477] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2686.331604] Process accounting resumed [ 2686.339709] kobject: 'loop2' (000000004811331c): kobject_uevent_env 18:12:54 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:12:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:12:54 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12002a001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2686.352062] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2686.388900] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2686.403503] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2686.426021] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2686.432490] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2686.457446] binder: 5265:5267 ioctl c018620b 0 returned -14 [ 2686.477870] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2686.494203] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2686.507454] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2686.520138] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2686.534148] binder_alloc: 5265: binder_alloc_buf, no vma [ 2686.537604] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:12:54 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120060001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2686.552598] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2686.555526] binder: 5265:5274 transaction failed 29189/-3, size 24-8 line 3035 [ 2686.563056] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2686.577096] kauditd_printk_skb: 2 callbacks suppressed [ 2686.577110] audit: type=1804 audit(1550254374.968:139): pid=5275 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1331/file0" dev="sda1" ino=16548 res=1 [ 2686.588823] binder: 5265:5277 BC_INCREFS_DONE u0000000000000000 no match [ 2686.609705] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2686.621830] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2686.630878] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2686.638003] binder: 5265:5274 Release 1 refcount change on invalid ref 1 ret -22 [ 2686.682796] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2686.689361] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2686.703542] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2686.710543] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:12:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) [ 2686.761908] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2686.771843] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:12:55 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200f0001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:12:55 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000050000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2686.853192] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2686.859654] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2686.886710] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2686.900138] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2686.931389] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2686.938911] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:12:55 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000031600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2686.970987] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2686.984569] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2687.036585] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2687.042694] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2687.045158] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2687.050202] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2687.070139] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2687.077750] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:12:55 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000051600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2687.085737] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2687.101192] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2687.109145] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2687.116865] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:12:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2687.136161] Process accounting resumed [ 2687.172742] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2687.179607] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2687.190446] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2687.203963] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2687.220275] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2687.238689] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2687.260774] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:12:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:12:55 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000061600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2687.269511] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2687.349434] Process accounting resumed 18:12:55 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:12:55 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000060000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2687.375713] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2687.382164] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2687.398425] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2687.412978] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2687.457638] binder: 5320:5326 ioctl c018620b 0 returned -14 [ 2687.473841] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2687.480458] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2687.523139] binder_alloc: 5320: binder_alloc_buf, no vma [ 2687.523930] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2687.540394] binder: 5320:5328 transaction failed 29189/-3, size 24-8 line 3035 [ 2687.559296] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:12:56 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000071600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2687.609792] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2687.621254] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2687.633941] binder: 5320:5328 BC_INCREFS_DONE u0000000000000000 no match [ 2687.646689] binder: 5320:5328 Release 1 refcount change on invalid ref 1 ret -22 [ 2687.662431] audit: type=1804 audit(1550254376.048:140): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1332/file0" dev="sda1" ino=17348 res=1 [ 2687.688852] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2687.695692] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2687.701899] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2687.707394] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2687.723796] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2687.734026] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2687.744671] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:12:56 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000091600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:12:56 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='task\x00') getpid() getdents64(r3, &(0x7f0000000500)=""/175, 0x5d) dup(r0) accept4$alg(r3, 0x0, 0x0, 0x80000) exit(0x0) getdents64(r3, &(0x7f0000000080)=""/124, 0x7c) [ 2687.772494] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2687.789082] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2687.796623] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2687.832575] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2687.839353] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2687.860393] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:12:56 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200000a1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2687.875084] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2687.885433] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2687.898421] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2687.900052] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2687.915425] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:12:56 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000070000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:12:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:12:56 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200000b1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2688.082611] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2688.089385] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2688.100433] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2688.137499] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2688.139694] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2688.144135] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2688.179502] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2688.197078] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2688.200989] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2688.217715] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2688.237773] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2688.252174] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2688.271114] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2688.287019] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:12:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:12:56 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200000c1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2688.296438] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2688.305343] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2688.342729] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2688.349423] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2688.370122] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2688.381504] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2688.395302] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2688.403336] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2688.411835] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2688.424303] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2688.441432] Process accounting resumed 18:12:56 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:12:56 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200000d1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:12:56 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000026070000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2688.503964] binder: 5372:5380 BC_INCREFS_DONE node 187 has no pending increfs request [ 2688.522155] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2688.533013] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2688.546619] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:12:57 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200000e1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2688.559151] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2688.612627] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2688.619441] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2688.639668] audit: type=1804 audit(1550254377.028:141): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1333/file0" dev="sda1" ino=17342 res=1 [ 2688.668242] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2688.697993] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:12:57 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200c00e1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:12:57 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x203d, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x41, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000080)={0x6, 0x100, 0x0, 0x0, 0xff, 0x8cc}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000000800) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) getdents64(r0, &(0x7f00000003c0)=""/245, 0xf5) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x400000, 0x0) exit(0x0) [ 2688.714216] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2688.728143] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2688.773941] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2688.785790] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2688.796062] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2688.803942] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2688.827296] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2688.833974] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2688.863784] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:12:57 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200000f1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2688.871051] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2688.891564] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2688.892829] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2688.901493] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2688.917159] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2688.918296] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2688.936416] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:12:57 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000111600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:12:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2689.002972] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2689.010800] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2689.026647] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2689.035703] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2689.036056] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2689.044600] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2689.075032] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2689.076574] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2689.087528] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2689.114145] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2689.157417] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2689.187384] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:12:57 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000121600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2689.202673] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2689.210523] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2689.222423] binder: release 5372:5374 transaction 186 out, still active [ 2689.225190] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2689.229208] binder: undelivered TRANSACTION_COMPLETE 18:12:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:12:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2689.252732] binder: send failed reply for transaction 186, target dead [ 2689.259015] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2689.272823] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2689.279579] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2689.332887] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2689.339512] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2689.369320] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2689.385387] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2689.400148] Process accounting resumed [ 2689.408129] audit: type=1804 audit(1550254377.798:142): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2645/file0" dev="sda1" ino=16548 res=1 18:12:57 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000000a0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:12:57 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000131600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:12:57 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2689.425665] binder: 5429:5432 BC_INCREFS_DONE node 191 has no pending increfs request [ 2689.444115] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2689.450783] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2689.474578] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2689.494472] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2689.529357] kobject: 'loop3' (0000000077381589): kobject_uevent_env 18:12:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2689.558466] Process accounting resumed [ 2689.560530] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2689.567919] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2689.586277] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2689.628942] audit: type=1804 audit(1550254378.018:143): pid=5450 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1334/file0" dev="sda1" ino=17349 res=1 [ 2689.643580] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2689.666874] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2689.681715] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2689.698575] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2689.723172] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:12:58 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x101000) write$P9_RREMOVE(r0, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) exit(0x6) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) [ 2689.746120] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2689.770181] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:12:58 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000141600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:12:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2689.796532] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2689.807894] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2689.818798] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2689.862849] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2689.869547] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2689.902125] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2689.908946] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2689.921192] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2689.936190] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2689.938280] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2689.959071] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2689.964840] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2689.967482] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2689.990768] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2689.997485] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2689.998588] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:12:58 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000151600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2690.006432] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2690.017982] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2690.049441] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:12:58 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000161600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:12:58 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000260c0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2690.088975] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2690.096740] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:12:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2690.157225] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2690.169666] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2690.180099] binder: release 5429:5431 transaction 190 out, still active [ 2690.188644] binder: undelivered TRANSACTION_COMPLETE [ 2690.198390] binder: send failed reply for transaction 190, target dead [ 2690.222962] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2690.229854] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2690.256414] kobject: 'loop2' (000000004811331c): kobject_uevent_env 18:12:58 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000171600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2690.278989] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2690.307995] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2690.314840] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2690.338629] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2690.352788] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2690.359246] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2690.369796] binder: 5479:5486 BC_INCREFS_DONE node 195 has no pending increfs request [ 2690.380847] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:12:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2690.391418] Process accounting resumed [ 2690.399772] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2690.422877] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:12:58 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000181600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2690.441313] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2690.450223] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2690.458375] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2690.461523] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2690.467885] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2690.472993] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2690.513476] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2690.520139] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2690.535751] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2690.557067] audit: type=1804 audit(1550254378.948:144): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1335/file0" dev="sda1" ino=17340 res=1 [ 2690.558130] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2690.593298] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2690.600427] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:12:59 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000191600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:12:59 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000020100000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2690.687411] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2690.694179] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:12:59 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x5) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) 18:12:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:12:59 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200001a1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2690.773373] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2690.780314] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2690.796316] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2690.816175] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2690.852261] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2690.864766] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2690.875375] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2690.883214] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2690.889805] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:12:59 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200001b1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2690.899620] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2690.972938] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2690.979780] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2690.992651] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2690.999680] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:12:59 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200001c1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2691.029110] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2691.038439] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2691.046529] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2691.053915] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2691.061499] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2691.069018] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:12:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2691.100963] binder: release 5479:5482 transaction 194 out, still active [ 2691.109619] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2691.112626] binder: undelivered TRANSACTION_COMPLETE [ 2691.122541] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2691.139571] binder: send failed reply for transaction 194, target dead [ 2691.148093] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2691.163840] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2691.187929] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:12:59 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000140000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2691.198003] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2691.212174] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2691.239139] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:12:59 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200001d1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2691.263470] binder: 5533:5537 ioctl c018620b 0 returned -14 [ 2691.303117] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2691.309572] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2691.315098] Process accounting resumed [ 2691.337513] binder: 5533:5539 BC_INCREFS_DONE node 199 has no pending increfs request [ 2691.340426] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:12:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2691.371860] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2691.381987] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2691.405083] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2691.441233] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2691.449236] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2691.461943] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2691.469497] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:12:59 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200001e1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2691.510079] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2691.519258] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2691.529348] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2691.532660] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2691.538490] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2691.543188] net_ratelimit: 26 callbacks suppressed [ 2691.543196] protocol 88fb is buggy, dev hsr_slave_0 [ 2691.543253] protocol 88fb is buggy, dev hsr_slave_1 [ 2691.556029] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2691.560741] protocol 88fb is buggy, dev hsr_slave_0 [ 2691.577836] protocol 88fb is buggy, dev hsr_slave_1 [ 2691.581282] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2691.584576] audit: type=1804 audit(1550254379.978:145): pid=5553 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1336/file0" dev="sda1" ino=17354 res=1 [ 2691.615997] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2691.632920] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2691.640080] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2691.651603] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2691.659019] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2691.692756] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2691.699586] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:00 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200001f1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:00 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)={0x3, {{0x2, 0x4e20, @multicast2}}, 0x0, 0x3, [{{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}]}, 0x210) 18:13:00 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000026180000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2691.772579] protocol 88fb is buggy, dev hsr_slave_0 [ 2691.777734] protocol 88fb is buggy, dev hsr_slave_1 [ 2691.802773] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2691.809415] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2691.820998] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2691.828061] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2691.845495] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:00 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000201600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2691.866174] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2691.892595] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2691.899068] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2691.959749] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2691.970921] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2691.997778] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2692.004650] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2692.032798] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2692.049873] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2692.059399] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2692.072434] binder: release 5533:5537 transaction 198 out, still active 18:13:00 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000211600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2692.072569] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2692.079199] binder: undelivered TRANSACTION_COMPLETE [ 2692.107319] binder: send failed reply for transaction 198, target dead [ 2692.113479] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2692.122287] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2692.131191] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2692.139082] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2692.142773] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2692.154067] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:00 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000221600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2692.192850] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2692.199346] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2692.222886] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2692.241092] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2692.252412] protocol 88fb is buggy, dev hsr_slave_0 [ 2692.257589] protocol 88fb is buggy, dev hsr_slave_1 [ 2692.262724] protocol 88fb is buggy, dev hsr_slave_0 [ 2692.262935] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2692.267783] protocol 88fb is buggy, dev hsr_slave_1 [ 2692.298356] binder: 5590:5592 ioctl c018620b 0 returned -14 [ 2692.307094] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2692.314234] Process accounting resumed [ 2692.332960] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:13:00 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000200000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2692.340178] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2692.364589] binder: 5590:5595 BC_INCREFS_DONE node 203 has no pending increfs request 18:13:00 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000231600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2692.426145] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2692.435084] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2692.472573] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2692.479734] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2692.495722] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2692.502259] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2692.541032] audit: type=1804 audit(1550254380.928:146): pid=5606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1337/file0" dev="sda1" ino=17333 res=1 18:13:00 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000241600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2692.590304] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2692.597614] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2692.622889] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2692.629931] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:01 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2692.642249] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2692.663275] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2692.670709] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2692.681674] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2692.691904] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2692.699613] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env 18:13:01 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000251600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:01 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0xaf) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) [ 2692.734472] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2692.751349] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2692.769803] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2692.777316] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2692.784031] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2692.803750] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2692.815843] audit: type=1804 audit(1550254381.208:147): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2650/file0" dev="sda1" ino=16534 res=1 [ 2692.821158] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2692.855953] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2692.867693] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2692.878433] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2692.908773] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2692.919580] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2692.946495] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2692.957652] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2692.967691] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2692.989717] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2693.001246] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2693.010838] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2693.022276] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2693.031486] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:01 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000010200000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:01 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000261600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2693.102729] binder: release 5590:5592 transaction 202 out, still active [ 2693.109499] binder: undelivered TRANSACTION_COMPLETE [ 2693.130081] binder: send failed reply for transaction 202, target dead [ 2693.150321] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2693.158438] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2693.175470] binder: 5635:5636 ioctl c018620b 0 returned -14 [ 2693.192600] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2693.199346] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2693.226306] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2693.233629] binder: 5635:5640 BC_INCREFS_DONE node 207 has no pending increfs request [ 2693.246462] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2693.260428] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2693.282139] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:13:01 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000271600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2693.314322] Process accounting resumed [ 2693.339119] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2693.347203] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2693.355145] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2693.362633] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2693.370269] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2693.383000] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2693.394026] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2693.404316] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2693.412669] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2693.419274] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2693.426569] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2693.436601] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:01 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000281600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2693.496335] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2693.504449] audit: type=1804 audit(1550254381.898:148): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1338/file0" dev="sda1" ino=17348 res=1 [ 2693.504579] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2693.554879] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2693.561549] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2693.578230] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2693.587655] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2693.598760] Process accounting resumed 18:13:02 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2693.601737] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2693.623621] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2693.637602] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2693.646334] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:02 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000291600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2693.658157] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2693.673664] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2693.683160] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2693.697958] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:02 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f00000001c0)=""/124, 0x68) [ 2693.707948] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2693.720968] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2693.740490] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2693.747348] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:02 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000007260000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2693.762275] audit: type=1804 audit(1550254382.148:149): pid=5668 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2651/file0" dev="sda1" ino=17333 res=1 [ 2693.802061] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2693.827571] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2693.863034] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:02 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200002a1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2693.872392] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2693.916898] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2693.928719] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2693.942546] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:02 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120065301600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2693.966847] binder: release 5635:5636 transaction 206 out, still active [ 2693.979967] binder: undelivered TRANSACTION_COMPLETE [ 2693.980169] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2694.008887] binder: send failed reply for transaction 206, target dead [ 2694.039810] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2694.047242] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2694.055821] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2694.066482] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2694.083277] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2694.093960] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2694.095659] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2694.110909] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2694.130227] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:02 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120065581600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2694.137997] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2694.151300] binder: 5687:5692 ioctl c018620b 0 returned -14 [ 2694.157432] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2694.157461] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2694.172780] binder: 5687:5692 ioctl c0306201 0 returned -14 [ 2694.224242] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2694.227893] binder: 5687:5694 BC_INCREFS_DONE node 211 has no pending increfs request [ 2694.243849] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2694.270984] Process accounting resumed [ 2694.289096] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2694.296648] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2694.310454] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2694.327803] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2694.336018] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2694.344669] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2694.350456] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:02 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000601600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2694.376644] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2694.393686] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2694.400517] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2694.412785] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2694.421116] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:02 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000c260000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2694.427610] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2694.427631] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2694.427641] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2694.450858] audit: type=1804 audit(1550254382.838:150): pid=5706 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1339/file0" dev="sda1" ino=17358 res=1 18:13:02 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120030651600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:02 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2694.511251] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2694.526059] Process accounting resumed 18:13:02 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120058651600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2694.602550] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2694.609090] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2694.619763] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2694.626743] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2694.635489] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2694.644632] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2694.695604] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2694.711069] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2694.721607] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2694.732520] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:03 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) connect$rds(r0, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) perf_event_open(&(0x7f000001d000)={0x1, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f00000001c0)) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f00000000c0), 0x3b2, 0x0) exit(0x0) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) write$9p(r2, &(0x7f0000000000)="18350a15529472fca7197a73ca4739e86acad90745a5ce68209776e7d6ce3dfa9231edd00604517568f10e8834b58379ff9a379347", 0x35) 18:13:03 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000811600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2694.752054] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2694.767439] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2694.778053] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2694.786948] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2694.795976] audit: type=1804 audit(1550254383.188:151): pid=5725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2652/file0" dev="sda1" ino=17365 res=1 [ 2694.842692] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2694.849308] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2694.859959] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2694.873240] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2694.884711] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2694.892035] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2694.905595] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2694.908541] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2694.931482] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:13:03 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12000ec01600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2694.943207] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2694.952669] binder: release 5687:5692 transaction 210 out, still active [ 2694.972950] binder: undelivered TRANSACTION_COMPLETE [ 2694.982571] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2695.009353] binder: send failed reply for transaction 210, target dead [ 2695.011865] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2695.030028] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2695.037697] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2695.045715] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:03 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000f01600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2695.052161] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2695.052509] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2695.070055] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2695.117364] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2695.127438] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:13:03 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000018260000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2695.162881] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2695.169328] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2695.202150] binder: 5741:5743 ioctl c018620b 0 returned -14 18:13:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:13:03 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000ff1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2695.217043] Process accounting resumed [ 2695.227780] binder: 5741:5743 ioctl c0306201 0 returned -14 [ 2695.234328] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2695.241826] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2695.275880] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2695.284261] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2695.304050] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2695.311678] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2695.312830] binder: 5741:5754 BC_INCREFS_DONE node 215 has no pending increfs request [ 2695.325809] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2695.353074] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2695.358688] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2695.371797] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2695.384658] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2695.392064] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2695.400193] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:03 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000000f00e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2695.408649] audit: type=1804 audit(1550254383.798:152): pid=5761 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1340/file0" dev="sda1" ino=17331 res=1 [ 2695.409777] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2695.450083] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2695.458636] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:03 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2695.523034] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2695.535457] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2695.539181] Process accounting resumed [ 2695.560887] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2695.574565] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2695.590254] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2695.599672] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2695.622789] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2695.629277] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2695.631336] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:04 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000021600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:04 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000100)=""/124, 0xfde9) recvmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000080)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}, {&(0x7f0000000240)=""/184, 0xb8}, {&(0x7f0000000300)=""/194, 0xc2}, {&(0x7f0000000400)=""/100, 0x64}], 0x4, &(0x7f0000000480)=""/6, 0x6}, 0x40000000) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000005c0)={r2, 0x9, 0x9, 0x100, 0x5, 0x5, 0x6}) [ 2695.696832] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2695.714800] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2695.721973] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2695.735531] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2695.744215] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2695.752159] audit: type=1804 audit(1550254384.138:153): pid=5772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2653/file0" dev="sda1" ino=17370 res=1 18:13:04 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000047260000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2695.815205] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2695.821661] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:04 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000031600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2695.861121] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2695.869032] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2695.933209] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2695.939664] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2695.980538] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2695.987631] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2695.987660] binder: release 5741:5743 transaction 214 out, still active [ 2696.012168] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2696.019581] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2696.049761] binder: undelivered TRANSACTION_COMPLETE [ 2696.066574] binder: send failed reply for transaction 214, target dead [ 2696.076860] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2696.085539] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:13:04 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000041600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2696.087975] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2696.115143] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2696.130885] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2696.138661] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2696.147780] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2696.155567] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2696.163621] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2696.168461] Process accounting resumed [ 2696.171169] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2696.187724] binder: 5793:5794 ioctl c018620b 0 returned -14 [ 2696.194137] binder: 5793:5794 ioctl c0306201 0 returned -14 [ 2696.222920] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2696.229525] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2696.240344] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2696.247317] binder: 5793:5796 BC_INCREFS_DONE node 219 has no pending increfs request [ 2696.256863] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2696.263631] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2696.274885] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2696.280073] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2696.283417] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2696.301189] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2696.309507] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2696.318334] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2696.321042] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2696.338548] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2696.349582] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2696.351363] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2696.362247] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:04 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000051600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2696.380151] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2696.403652] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:04 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000004280000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2696.425702] audit: type=1804 audit(1550254384.818:154): pid=5806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1341/file0" dev="sda1" ino=16769 res=1 [ 2696.463514] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2696.470494] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:04 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:13:04 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000061600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2696.521920] Process accounting resumed [ 2696.572652] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2696.579317] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2696.599029] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2696.611926] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:05 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000071600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2696.655772] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2696.662567] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2696.678883] audit: type=1804 audit(1550254385.068:155): pid=5822 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2654/file0" dev="sda1" ino=16801 res=1 18:13:05 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000280)=""/175, 0xe435c0a31182ad10) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) [ 2696.718349] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2696.726376] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2696.734249] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2696.745552] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2696.760926] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2696.778141] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2696.793243] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2696.800103] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2696.809198] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:05 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000081600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2696.832461] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2696.851781] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2696.859252] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2696.859432] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2696.877953] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2696.913851] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2696.922458] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2696.933040] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2696.952507] binder: release 5793:5794 transaction 218 out, still active [ 2696.959399] binder: undelivered TRANSACTION_COMPLETE [ 2696.970284] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2696.995760] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:05 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000091600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:05 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000004290000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2697.008286] binder: send failed reply for transaction 218, target dead [ 2697.016260] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2697.064716] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2697.071180] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2697.094894] binder: 5840:5842 ioctl c018620b 0 returned -14 [ 2697.109194] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2697.112823] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2697.123486] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2697.132163] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:05 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200000a1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2697.187073] Process accounting resumed [ 2697.214608] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2697.221284] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2697.231776] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2697.246581] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2697.261437] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2697.275423] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2697.281347] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2697.302285] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:05 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200000b1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2697.314876] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2697.322552] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2697.331155] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2697.339323] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2697.347326] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2697.356376] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2697.404815] audit: type=1804 audit(1550254385.798:156): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1342/file0" dev="sda1" ino=16961 res=1 [ 2697.412612] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2697.444707] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:05 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2697.448726] Process accounting resumed [ 2697.462896] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2697.477430] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2697.481022] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2697.518846] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2697.532518] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2697.551645] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:06 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200000c1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:06 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000042a0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:06 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000000)={0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 'none\x00', 0x4, 0x0, 0x1e}, 0x2c) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) recvfrom$unix(r0, &(0x7f0000000100)=""/87, 0x57, 0x1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) [ 2697.644699] audit: type=1804 audit(1550254386.038:157): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2655/file0" dev="sda1" ino=16769 res=1 [ 2697.692589] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2697.699703] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2697.725157] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2697.731616] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:06 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200000d1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2697.760051] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2697.767958] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2697.777597] net_ratelimit: 26 callbacks suppressed [ 2697.777602] protocol 88fb is buggy, dev hsr_slave_0 [ 2697.777639] protocol 88fb is buggy, dev hsr_slave_1 [ 2697.777704] protocol 88fb is buggy, dev hsr_slave_0 [ 2697.777756] protocol 88fb is buggy, dev hsr_slave_1 [ 2697.811313] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2697.817369] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2697.820635] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2697.838179] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2697.871034] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2697.892639] binder: release 5840:5848 transaction 222 out, still active [ 2697.893163] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2697.918279] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2697.922901] binder: send failed reply for transaction 222, target dead [ 2697.941622] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:06 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200000e1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2697.960238] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2697.970060] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2697.978996] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2698.005377] binder: 5892:5894 ioctl c018620b 0 returned -14 [ 2698.005734] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:06 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200000f1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2698.018853] protocol 88fb is buggy, dev hsr_slave_0 [ 2698.018921] protocol 88fb is buggy, dev hsr_slave_1 [ 2698.029294] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2698.036605] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2698.038358] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2698.053129] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2698.102868] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2698.110897] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2698.118481] Process accounting resumed [ 2698.137903] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2698.149770] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2698.169471] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2698.178630] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2698.182856] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2698.192486] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:06 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000101600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2698.199805] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2698.208852] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2698.215276] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2698.230387] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2698.239404] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2698.253238] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:06 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000042b0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2698.318125] audit: type=1804 audit(1550254386.708:158): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1343/file0" dev="sda1" ino=16663 res=1 [ 2698.320100] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2698.351438] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:13:06 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000111600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2698.409763] Process accounting resumed [ 2698.442614] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2698.453084] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2698.480223] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2698.486851] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2698.502527] protocol 88fb is buggy, dev hsr_slave_0 [ 2698.506571] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2698.507683] protocol 88fb is buggy, dev hsr_slave_1 [ 2698.516801] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2698.519218] protocol 88fb is buggy, dev hsr_slave_0 [ 2698.533708] protocol 88fb is buggy, dev hsr_slave_1 18:13:06 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000121600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2698.566768] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2698.576950] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2698.606908] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2698.610228] audit: type=1804 audit(1550254386.998:159): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2656/file0" dev="sda1" ino=16961 res=1 [ 2698.627180] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2698.645489] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2698.652878] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2698.660436] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:07 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f00000001c0)=""/175, 0xaf) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) [ 2698.667874] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2698.675763] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2698.682205] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2698.703192] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:07 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000131600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2698.720046] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2698.772845] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2698.781972] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2698.796907] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2698.813489] binder: release 5892:5896 transaction 226 out, still active 18:13:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2698.825119] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2698.840232] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2698.847169] binder: send failed reply for transaction 226, target dead [ 2698.856892] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:07 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000141600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2698.872220] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2698.877600] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:07 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000042c0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2698.917689] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2698.937292] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:13:07 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000151600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2698.967429] binder: 5942:5944 ioctl c018620b 0 returned -14 [ 2698.980098] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2698.995175] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2699.060821] Process accounting resumed [ 2699.102681] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2699.109407] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2699.140325] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2699.152469] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2699.172299] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2699.179397] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:07 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000161600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2699.216780] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2699.234516] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2699.274181] audit: type=1804 audit(1550254387.658:160): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1344/file0" dev="sda1" ino=16994 res=1 [ 2699.299401] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2699.310930] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:13:07 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000171600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2699.322120] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2699.324856] Process accounting resumed [ 2699.336793] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2699.349426] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2699.360996] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2699.368911] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2699.376978] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2699.404137] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2699.411044] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2699.421860] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2699.433290] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2699.462958] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:07 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000181600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2699.470106] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2699.470277] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2699.491928] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2699.559447] audit: type=1804 audit(1550254387.948:161): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2657/file0" dev="sda1" ino=16849 res=1 [ 2699.583438] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2699.596419] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:08 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000191600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2699.605594] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2699.613236] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2699.621248] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2699.634425] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2699.642880] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2699.650714] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:08 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x801, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000001c0)=0x14) exit(0x0) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) 18:13:08 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000042d0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2699.722727] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2699.729395] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2699.762525] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env 18:13:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2699.764422] binder: release 5942:5950 transaction 230 out, still active [ 2699.777383] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2699.807147] binder: send failed reply for transaction 230, target dead 18:13:08 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200001a1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2699.832650] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2699.840512] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2699.871748] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2699.881686] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2699.905437] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2699.915198] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2699.918797] binder: 5991:5995 ioctl c018620b 0 returned -14 18:13:08 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200001b1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2699.946234] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2699.960511] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2699.992247] Process accounting resumed [ 2700.011795] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2700.019815] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2700.028285] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2700.036740] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2700.043545] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2700.047437] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2700.062555] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2700.070249] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2700.079445] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:08 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200001c1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2700.089343] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2700.107837] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2700.121473] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2700.163536] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2700.170220] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2700.180203] audit: type=1804 audit(1550254388.568:162): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1345/file0" dev="sda1" ino=16882 res=1 [ 2700.228901] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2700.236850] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2700.254254] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2700.264338] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2700.273434] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2700.280741] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2700.288689] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2700.298922] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2700.308494] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2700.316678] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:08 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200001d1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2700.324850] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2700.333871] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2700.344000] Process accounting resumed 18:13:08 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000042e0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2700.383100] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2700.395666] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:08 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200001e1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2700.447049] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2700.457275] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2700.482535] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2700.490450] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2700.520769] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2700.535817] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2700.547551] audit: type=1804 audit(1550254388.938:163): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2658/file0" dev="sda1" ino=16664 res=1 [ 2700.585318] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2700.594209] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:09 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000211600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2700.628318] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2700.636069] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2700.647838] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2700.656910] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2700.665117] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:09 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000100)={0x0, 0x7, 0x6, [], &(0x7f0000000000)=0x4}) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) [ 2700.672214] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2700.682942] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2700.690987] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2700.712530] binder: release 5991:6002 transaction 234 out, still active 18:13:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2700.729925] binder: send failed reply for transaction 234, target dead [ 2700.737232] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2700.744462] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2700.759978] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2700.772058] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:09 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000221600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2700.780112] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2700.792614] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:09 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000042f0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2700.829760] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2700.836897] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2700.876609] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2700.903431] binder: 6044:6048 ioctl c018620b 0 returned -14 [ 2700.908872] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:13:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2700.924143] Process accounting resumed 18:13:09 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000231600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2700.952673] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2700.962194] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2700.993414] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2701.008182] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2701.028608] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2701.035427] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2701.052546] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2701.066046] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2701.090549] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2701.102616] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2701.112199] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2701.114011] audit: type=1804 audit(1550254389.498:164): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1346/file0" dev="sda1" ino=16801 res=1 18:13:09 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000241600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2701.132792] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2701.167475] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2701.176350] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2701.185509] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2701.193399] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2701.232875] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2701.239594] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2701.250467] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2701.270793] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2701.271872] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2701.279526] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2701.299530] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2701.320486] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2701.324609] Process accounting resumed 18:13:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2701.341009] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:09 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000251600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2701.371166] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2701.381790] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2701.390588] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2701.404045] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2701.410805] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:09 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000261600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2701.433125] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2701.435989] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2701.449484] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2701.455262] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:09 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000004300000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2701.539327] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2701.546124] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:10 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x101600, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000440)={0x3, 0x40, &(0x7f00000002c0)=""/19, &(0x7f0000000300)=""/5, &(0x7f0000000400)=""/10, 0x4000}) socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @bt={0x100, 0xeee1, 0x1ff, 0x80000000, 0x81db, 0x20, 0x4, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xf, 0x100, 0x1000, 0x3, 0x2, r2, 0x800}, 0x2c) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r3, &(0x7f0000000340)=""/175, 0x5d) exit(0x0) getdents64(r4, &(0x7f0000000080)=""/124, 0x7c) fsetxattr$security_ima(r0, &(0x7f0000000100)='security.ima\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="198dc8c4fe9a63a07fd4ceef908967f1f14a00dc487e12c1d329a9e8b465fc2d60"], 0x5, 0x1) [ 2701.622677] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2701.633935] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2701.651313] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2701.668147] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2701.692840] binder: release 6044:6053 transaction 238 out, still active [ 2701.710393] Unknown ioctl 1076408081 18:13:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2701.742768] binder: send failed reply for transaction 238, target dead [ 2701.757660] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:10 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000271600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:10 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7163, 0xcb8f6f2262c89c08) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$getown(r1, 0x9) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='attr/prev\x00') ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default, @rose={'rose', 0x0}, 0x1, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) getdents64(r4, &(0x7f00000001c0)=""/175, 0xd912b3f75a8fe899) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000340)=ANY=[@ANYBLOB="03004200c3299f518d9ec7fe89333e219be5bfaa91f8923d9f7b21d98b097a30a68677b5b17c3d9b70a6eaa015038f69a01b59589527c4042a01c8ea4fbb"]) exit(0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x50, &(0x7f0000000280)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)=r5, 0x4) getdents64(r4, &(0x7f0000000380)=""/124, 0xffffffffffffffb6) [ 2701.792213] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2701.812981] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2701.833825] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2701.850881] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2701.858993] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2701.872877] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2701.888728] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2701.899820] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2701.905145] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2701.915659] Process accounting resumed [ 2701.919428] binder: 6098:6101 ioctl c018620b 0 returned -14 [ 2701.929305] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:13:10 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000281600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2701.935377] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2701.939673] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2701.954170] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2701.966199] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2701.981350] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2702.017492] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2702.026977] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2702.037737] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2702.063172] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2702.074248] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2702.081942] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2702.089213] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2702.095644] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:10 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000291600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2702.116752] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2702.139913] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2702.162791] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2702.178065] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2702.193056] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2702.202041] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2702.211173] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2702.216022] kauditd_printk_skb: 1 callbacks suppressed [ 2702.216036] audit: type=1804 audit(1550254390.598:166): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1347/file0" dev="sda1" ino=17057 res=1 [ 2702.221700] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2702.256286] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:13:10 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000043d0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2702.265592] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2702.306893] Process accounting resumed 18:13:10 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200002a1600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2702.361669] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2702.369443] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2702.388758] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2702.395935] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2702.442675] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2702.449350] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2702.464543] audit: type=1804 audit(1550254390.858:167): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2660/file0" dev="sda1" ino=16641 res=1 18:13:10 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000601600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2702.489492] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2702.504659] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2702.529665] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2702.536757] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2702.557118] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2702.566275] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2702.570518] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2702.576654] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2702.580996] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2702.589614] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2702.607773] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2702.627218] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:11 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000006700e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2702.642772] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2702.650792] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2702.702825] binder: release 6098:6108 transaction 242 out, still active [ 2702.703243] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2702.714971] binder: send failed reply for transaction 242, target dead [ 2702.725679] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:11 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) write$UHID_INPUT(r1, &(0x7f00000005c0)={0x8, "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", 0x1000}, 0x1006) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) [ 2702.760982] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2702.783743] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2702.801496] kobject: 'loop2' (000000004811331c): kobject_uevent_env 18:13:11 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12000000ff00e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2702.809204] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2702.840107] binder: 6148:6150 ioctl c018620b 0 returned -14 [ 2702.847763] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2702.854941] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2702.863214] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2702.871148] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2702.882941] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2702.890907] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2702.916630] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2702.928635] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2702.928646] binder: 6148:6155 BC_INCREFS_DONE node 247 has no pending increfs request [ 2702.949187] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:13:11 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000000f00e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2702.962668] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2702.974088] Process accounting resumed [ 2702.984452] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2702.997463] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:11 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000003f0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2703.045251] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2703.054901] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2703.099425] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2703.108095] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:11 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000006700e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2703.147584] audit: type=1804 audit(1550254391.538:168): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1348/file0" dev="sda1" ino=16626 res=1 [ 2703.152484] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2703.179301] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2703.222854] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2703.229490] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2703.251392] Process accounting resumed [ 2703.286873] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2703.293661] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2703.323051] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env 18:13:11 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001602e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2703.342609] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2703.348424] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2703.349650] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2703.349705] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2703.349715] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2703.349811] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2703.390682] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2703.407151] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2703.417675] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2703.477081] audit: type=1804 audit(1550254391.868:169): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2661/file0" dev="sda1" ino=16916 res=1 [ 2703.501289] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2703.508439] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:12 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000400000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2703.522954] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2703.543529] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2703.552905] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2703.560839] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:12 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001603e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2703.636432] binder: release 6148:6150 transaction 246 out, still active [ 2703.657949] binder: undelivered TRANSACTION_COMPLETE [ 2703.664706] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2703.675521] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2703.697618] binder: send failed reply for transaction 246, target dead 18:13:12 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001604e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:12 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) exit(0x0) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) [ 2703.742593] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2703.750979] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2703.773001] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2703.779457] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2703.819376] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2703.841921] binder: 6196:6199 ioctl c018620b 0 returned -14 [ 2703.846384] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:12 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001605e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2703.861383] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2703.872666] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2703.904650] Process accounting resumed [ 2703.912939] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env 18:13:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2703.926614] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2703.939792] binder: 6196:6208 BC_INCREFS_DONE node 251 has no pending increfs request [ 2703.949633] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2703.958230] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2703.980382] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2703.988790] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2704.002841] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2704.012609] net_ratelimit: 26 callbacks suppressed [ 2704.012617] protocol 88fb is buggy, dev hsr_slave_0 [ 2704.012677] protocol 88fb is buggy, dev hsr_slave_1 18:13:12 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001606e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2704.012788] protocol 88fb is buggy, dev hsr_slave_0 [ 2704.012840] protocol 88fb is buggy, dev hsr_slave_1 [ 2704.044038] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2704.052284] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2704.059725] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2704.067828] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2704.077603] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2704.089978] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2704.107019] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2704.132814] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2704.139350] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2704.150438] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2704.171754] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2704.183170] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2704.195354] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2704.218666] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2704.226285] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:12 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001607e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2704.245405] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2704.252533] protocol 88fb is buggy, dev hsr_slave_0 [ 2704.260016] protocol 88fb is buggy, dev hsr_slave_1 [ 2704.266824] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2704.285319] Process accounting resumed 18:13:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2704.296920] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2704.307062] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2704.315821] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2704.325731] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2704.335166] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2704.345556] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2704.358659] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2704.365650] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2704.386517] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env 18:13:12 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001608e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2704.395511] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:12 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000026470000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:12 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001609e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2704.503842] audit: type=1804 audit(1550254392.898:170): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2662/file0" dev="sda1" ino=17041 res=1 [ 2704.517869] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2704.537604] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2704.568824] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2704.578153] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2704.607861] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2704.615958] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2704.622071] binder: release 6196:6199 transaction 250 out, still active [ 2704.644152] binder: undelivered TRANSACTION_COMPLETE 18:13:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2704.676533] binder: send failed reply for transaction 250, target dead [ 2704.692146] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2704.719277] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2704.731365] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2704.738642] protocol 88fb is buggy, dev hsr_slave_0 [ 2704.738701] protocol 88fb is buggy, dev hsr_slave_1 [ 2704.738797] protocol 88fb is buggy, dev hsr_slave_0 [ 2704.738847] protocol 88fb is buggy, dev hsr_slave_1 18:13:13 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12000000160ae70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2704.765614] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2704.780433] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2704.798642] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2704.818682] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2704.827271] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2704.836118] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2704.847891] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2704.860851] binder: 6252:6254 ioctl c018620b 0 returned -14 18:13:13 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x190, r2, 0x210, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x14288bc3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b8}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x202000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1bd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x300000000}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r3, &(0x7f0000000500)=""/175, 0x5d) creat(&(0x7f0000000400)='./file0\x00', 0x42) exit(0x0) getdents64(r3, &(0x7f0000000080)=""/124, 0x7c) 18:13:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2704.870149] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2704.886471] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2704.903592] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2704.927468] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2704.959981] binder: 6252:6261 BC_INCREFS_DONE node 255 has no pending increfs request [ 2704.983442] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2704.990447] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2704.991104] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2705.009540] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2705.015281] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2705.023240] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2705.048592] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2705.058645] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2705.069403] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2705.083188] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2705.088573] kobject: 'loop3' (0000000077381589): kobject_uevent_env 18:13:13 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12000000160be70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2705.102842] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2705.117010] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2705.126351] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:13 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000480000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2705.207550] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2705.217032] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2705.231106] Process accounting resumed [ 2705.263912] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2705.270443] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2705.291572] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2705.304389] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2705.379321] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2705.386778] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2705.413313] audit: type=1804 audit(1550254393.808:171): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2663/file0" dev="sda1" ino=16833 res=1 [ 2705.431410] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2705.445490] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2705.463759] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:13 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12000000160ce70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2705.479821] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2705.488097] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2705.496107] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2705.504917] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2705.513891] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2705.552734] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2705.559346] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2705.579446] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2705.594286] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2705.604901] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2705.611541] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2705.628505] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2705.636070] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2705.644131] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2705.658892] binder: release 6252:6254 transaction 254 out, still active [ 2705.667080] binder: undelivered TRANSACTION_COMPLETE [ 2705.676161] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2705.693222] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2705.700264] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, &(0x7f0000000700)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:14 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12000000160de70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2705.703329] binder: send failed reply for transaction 254, target dead [ 2705.726286] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2705.734458] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:14 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000004c0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2705.786293] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2705.798467] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2705.816647] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2705.825703] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2705.836348] binder: 6293:6295 ioctl c018620b 0 returned -14 18:13:14 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) 18:13:14 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12000000160ee70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2705.895587] binder: 6293:6301 BC_INCREFS_DONE node 259 has no pending increfs request [ 2705.903973] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2705.910414] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2705.948607] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2705.972047] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2705.995439] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2706.001884] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2706.017964] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2706.026686] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2706.056449] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2706.063918] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:14 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12000000160fe70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2706.108411] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2706.130929] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2706.144691] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2706.151726] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2706.171601] Process accounting resumed [ 2706.177498] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2706.187435] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2706.199496] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:14 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001610e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2706.207792] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2706.252856] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2706.259511] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2706.282547] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2706.297962] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2706.305810] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2706.305880] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2706.345908] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2706.360544] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:14 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000600000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:14 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001611e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2706.456088] audit: type=1804 audit(1550254394.848:172): pid=6326 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2664/file0" dev="sda1" ino=17170 res=1 [ 2706.484107] audit: type=1804 audit(1550254394.868:173): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2664/file0" dev="sda1" ino=17170 res=1 [ 2706.512867] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2706.519557] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2706.533779] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2706.540355] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2706.582018] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2706.588623] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2706.617867] binder: release 6293:6295 transaction 258 out, still active [ 2706.623162] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, &(0x7f0000000700)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:15 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001612e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2706.627336] binder: undelivered TRANSACTION_COMPLETE [ 2706.639748] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2706.657045] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2706.671091] binder: send failed reply for transaction 258, target dead [ 2706.672807] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2706.690434] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2706.699445] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2706.702869] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2706.713180] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2706.717754] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:13:15 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r3, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getdents64(r3, &(0x7f0000000080)=""/124, 0x7c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000140)=0xfffffffffffffffc) [ 2706.724027] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2706.738782] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2706.749099] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2706.762621] binder: 6344:6346 ioctl c018620b 0 returned -14 18:13:15 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001613e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2706.823723] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2706.830520] binder: 6344:6352 BC_INCREFS_DONE node 263 has no pending increfs request [ 2706.838686] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2706.857744] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2706.872888] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2706.895174] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2706.907548] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:15 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001614e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2706.920380] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2706.927277] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2706.931790] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2706.947670] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2706.959801] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2706.966905] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2706.977367] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2706.977877] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2707.005465] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2707.016411] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2707.024821] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2707.032642] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:15 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000680000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:15 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001615e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2707.139431] Process accounting resumed [ 2707.192584] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2707.199113] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2707.212862] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2707.226149] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2707.268730] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2707.276794] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2707.294493] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2707.301383] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:15 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001616e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2707.335554] audit: type=1804 audit(1550254395.728:174): pid=6382 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2665/file0" dev="sda1" ino=16801 res=1 [ 2707.364845] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2707.379930] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2707.389714] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2707.397978] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2707.406204] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2707.413807] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2707.420268] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:15 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001617e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2707.430030] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2707.441151] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2707.448858] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2707.502822] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2707.509453] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2707.529947] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2707.542790] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, &(0x7f0000000700)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:16 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000006c0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:16 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001618e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2707.563372] binder: release 6344:6346 transaction 262 out, still active [ 2707.570144] binder: undelivered TRANSACTION_COMPLETE [ 2707.575735] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2707.583193] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2707.593876] binder: send failed reply for transaction 262, target dead [ 2707.656681] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2707.671185] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2707.687325] binder: 6395:6397 ioctl c018620b 0 returned -14 [ 2707.692499] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2707.699982] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2707.722621] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2707.729100] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2707.746726] binder: 6395:6403 BC_INCREFS_DONE node 267 has no pending increfs request 18:13:16 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x5, 0x10000) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f00000001c0)=0x1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') getdents64(r2, &(0x7f0000000240)=""/175, 0xaf) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000200)={0x9, "6398647cf7dc7371e853b64f1752af7381cb97c09b586266c83c80ac0639fd12", 0x2, 0x1}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) exit(0x0) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) 18:13:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:13:16 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001619e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2707.791244] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2707.815160] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2707.830426] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2707.847962] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2707.870280] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:16 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') exit(0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x102, 0x7, {0x0, 0xff, 0x81, 0xef92}}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r1, 0x2, 0x39, r1}) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) [ 2707.893841] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2707.896095] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2707.900293] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2707.935521] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2707.956792] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2707.965844] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2707.974787] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2707.982799] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2707.984584] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:16 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12000000161ae70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2708.000799] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2708.010039] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2708.083358] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2708.091778] Process accounting resumed [ 2708.096754] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2708.136162] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2708.159092] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2708.179451] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2708.191081] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:16 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000740000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:16 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12000000161be70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2708.330291] audit: type=1804 audit(1550254396.718:175): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2666/file0" dev="sda1" ino=16882 res=1 [ 2708.383197] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2708.390125] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2708.422768] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2708.429214] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2708.473614] binder: release 6395:6397 transaction 266 out, still active [ 2708.492085] binder: undelivered TRANSACTION_COMPLETE 18:13:16 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12000000161ce70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2708.551951] binder: send failed reply for transaction 266, target dead [ 2708.573486] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2708.595384] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2708.642888] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2708.649347] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2708.677455] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2708.693736] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2708.705973] binder: 6446:6449 ioctl c018620b 0 returned -14 [ 2708.721911] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2708.754913] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2708.792605] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:17 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12000000161de70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2708.800974] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2708.807856] binder: 6446:6452 transaction failed 29189/-22, size 24-8 line 2896 [ 2708.815931] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2708.821497] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2708.841599] binder: 6446:6452 BC_INCREFS_DONE u0000000000000000 no match [ 2708.864845] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2708.875722] binder: 6446:6452 Release 1 refcount change on invalid ref 1 ret -22 [ 2708.878745] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2708.895985] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:17 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$unix(r0, &(0x7f00000001c0)=@abs, &(0x7f0000000140)=0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'ip6gre0\x00', 0x6}) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e22, @local}}) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) [ 2708.920509] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:17 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12000000161ee70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2708.993326] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2709.001642] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2709.031809] Process accounting resumed [ 2709.053387] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2709.060015] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2709.078369] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2709.090654] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2709.115314] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2709.122169] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:17 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001621e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2709.168103] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2709.189245] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2709.197071] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2709.206234] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2709.215021] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2709.222135] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2709.230452] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2709.238422] audit: type=1804 audit(1550254397.628:176): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2667/file0" dev="sda1" ino=17265 res=1 18:13:17 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001622e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2709.239885] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2709.264383] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2709.275197] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:17 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000007a0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:17 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001623e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2709.376461] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2709.387790] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2709.463528] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2709.470515] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:17 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001624e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2709.545058] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2709.552795] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2709.570608] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2709.580026] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2709.586092] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2709.591221] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2709.598417] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2709.613827] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2709.642892] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2709.646295] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2709.675386] binder: 6497:6501 ioctl c018620b 0 returned -14 [ 2709.678506] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:13:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) acct(&(0x7f0000000140)='./file0\x00') 18:13:18 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001625e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2709.694701] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2709.710286] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2709.736690] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2709.745395] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2709.751861] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2709.758552] binder: 6497:6504 transaction failed 29189/-22, size 24-8 line 2896 [ 2709.771980] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2709.775585] binder: 6497:6504 BC_INCREFS_DONE u0000000000000000 no match 18:13:18 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001626e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2709.792733] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2709.801274] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2709.814380] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:18 executing program 1: socketpair$unix(0x1, 0x100000000007, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) 18:13:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2709.852601] binder: 6497:6504 Release 1 refcount change on invalid ref 1 ret -22 [ 2709.883096] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2709.889651] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2709.922625] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2709.932526] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:13:18 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001627e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:18 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000c0ed0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2709.987897] Process accounting resumed [ 2709.995987] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2710.011723] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2710.074913] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2710.085738] audit: type=1804 audit(1550254398.478:177): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1356/file0" dev="sda1" ino=16882 res=1 [ 2710.100576] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2710.134211] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2710.152130] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2710.172594] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2710.180410] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2710.182554] Process accounting resumed 18:13:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2710.222655] audit: type=1804 audit(1550254398.588:178): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2668/file0" dev="sda1" ino=16626 res=1 [ 2710.252474] net_ratelimit: 26 callbacks suppressed [ 2710.252482] protocol 88fb is buggy, dev hsr_slave_0 [ 2710.262593] protocol 88fb is buggy, dev hsr_slave_1 [ 2710.267719] protocol 88fb is buggy, dev hsr_slave_0 [ 2710.272845] protocol 88fb is buggy, dev hsr_slave_1 18:13:18 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001628e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2710.281582] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2710.288213] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2710.322911] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2710.323890] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2710.338791] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2710.349943] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2710.355869] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2710.366298] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2710.371072] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2710.384576] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2710.393872] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2710.423460] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:18 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001629e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2710.451879] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2710.462894] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000), 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2710.492481] protocol 88fb is buggy, dev hsr_slave_0 [ 2710.497630] protocol 88fb is buggy, dev hsr_slave_1 [ 2710.513085] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2710.520267] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2710.547825] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2710.565786] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2710.570792] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2710.577083] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2710.593609] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2710.606401] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2710.624107] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2710.631384] kobject: 'loop3' (0000000077381589): kobject_uevent_env 18:13:19 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="12000000162ae70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2710.643115] binder: 6552:6558 ioctl c018620b 0 returned -14 [ 2710.649111] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2710.677357] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2710.686234] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2710.698789] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2710.710453] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2710.712181] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2710.717844] binder: 6552:6563 transaction failed 29189/-22, size 24-8 line 2896 [ 2710.729875] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2710.732080] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2710.739369] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2710.752607] binder: 6552:6563 BC_INCREFS_DONE u0000000000000000 no match [ 2710.761691] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2710.777169] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2710.790502] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2710.803287] binder: 6552:6563 Release 1 refcount change on invalid ref 1 ret -22 18:13:19 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000fff0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:19 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x0, 0x80000001, 0x663, 0x9}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) 18:13:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2710.956860] Process accounting resumed [ 2710.973099] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2710.979574] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2710.989162] protocol 88fb is buggy, dev hsr_slave_0 [ 2710.994254] protocol 88fb is buggy, dev hsr_slave_1 [ 2710.999362] protocol 88fb is buggy, dev hsr_slave_0 18:13:19 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001660e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2711.004444] protocol 88fb is buggy, dev hsr_slave_1 [ 2711.018405] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2711.042809] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2711.063305] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2711.074254] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2711.084121] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2711.100149] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2711.122830] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2711.129457] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2711.131228] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2711.180113] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2711.193482] audit: type=1804 audit(1550254399.588:179): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2669/file0" dev="sda1" ino=17185 res=1 [ 2711.202475] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:19 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600ff0d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2711.224828] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2711.237687] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2711.246356] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2711.254752] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2711.262640] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2711.302844] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2711.309428] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2711.329742] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2711.338434] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2711.348625] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2711.355844] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000), 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2711.396880] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2711.432667] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2711.471619] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2711.487685] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2711.497826] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2711.499326] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2711.511624] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2711.518764] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2711.550968] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2711.567399] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2711.570063] binder: 6599:6601 ioctl c018620b 0 returned -14 [ 2711.599856] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:20 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d027b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2711.640382] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2711.655109] binder: 6599:6606 BC_INCREFS_DONE u0000000000000000 no match [ 2711.673978] binder: 6599:6606 Release 1 refcount change on invalid ref 1 ret -22 [ 2711.682665] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:20 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000400000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2711.691066] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:20 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d037b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2711.822703] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2711.829341] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2711.842548] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2711.865348] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:20 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x1, 0x0, 0xc, 0x100, 0x3}, 0x20) [ 2711.903377] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2711.922472] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2711.964280] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2711.972813] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2711.980577] Process accounting resumed [ 2711.980946] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2711.997792] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2712.006502] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env 18:13:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2712.021759] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2712.040487] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2712.062095] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2712.071820] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2712.090192] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2712.111377] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:20 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d117b00000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2712.142907] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2712.223247] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2712.229860] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2712.250843] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2712.258892] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2712.269580] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2712.276560] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2712.289648] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2712.297679] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2712.310644] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2712.318552] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2712.326937] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2712.343004] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2712.361455] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:20 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b02000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:20 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000001000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000), 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2712.369166] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2712.420412] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2712.429258] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2712.461456] binder: 6638:6642 ioctl c018620b 0 returned -14 [ 2712.480207] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2712.482606] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2712.499280] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2712.510273] binder: 6638:6642 BC_INCREFS_DONE u0000000000000000 no match [ 2712.517059] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2712.523100] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2712.538113] binder: 6638:6642 Release 1 refcount change on invalid ref 1 ret -22 [ 2712.547236] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2712.622943] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2712.632177] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2712.648980] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2712.661377] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:21 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b03000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2712.724357] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2712.734601] binder: 6656:6657 ioctl c018620b 0 returned -14 [ 2712.777875] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2712.788073] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2712.793057] binder: 6656:6660 BC_INCREFS_DONE u0000000000000000 no match [ 2712.794783] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2712.803445] binder: 6656:6660 Release 1 refcount change on invalid ref 1 ret -22 [ 2712.821174] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='Z\x1b\xef?a\xa1\xfb\xff\x82I\x8b\x17(V\xd7\xed\xea\xe5\x8f3\x85\xedG\x18+.\x9als\xa6\xc9\x10\xc1\xef\xef\xabw}\xe2\xac\xaa\x9e?j)\x9b\xd3X\b\x00\x00\x00\xfc\x17\x19\x17\xf43\x16\xcb\x95q\xf9\xfa\xa9\n\x9b\xa7\xb1\xd8\xce8\xa7~\x95=\xf9\xf1X<\x1f@Yl\x84\xd8n\xa9\xd4\xbd\xa48!\xfe\x9a\xaa\xfb\r+\xb3\xbb\xbcs\".\xb2\x9a\x18\x9d|\xdb\xc2\xff\x89x\x0f\xfb\xfd\x91>+r\'\x9b\r\x9dr\x82\xf1o\x1b\b]\"\xfe\'\a\xf4\xc3\xb3[\x1d\x94G\xca\xb5\xf1jf\xe3\xcf\x99Cm\x8f\xe9\xe0~F\xd1+R-\xb0t\bzK\x12\xcc\xb2\x88\xe5\x1c\xc4|w\v\x8b\xf9\xebj\x06\xcc\xcc\xf8CI\x10\x99\x8a\xc6,\xe0\xe4\xa5\x05m\x02\xd81V#\xfa\xec\xdd\xe7Jj/=\x80!\x1a\xb3I! \xf7\n\xea0x^\xfff\x031\xa1\x9c\\O}X\xdcT$t\xb0\x86\x02z\xb8o3\xfdh\xc5Wh\xa5\x02\xd3 \xe53B\xc8>!M\xbe\'\x92\xe4Q\x9fq\xad8\x14\x11\xeaU\xd0\xb5\xaf\x9a\xa3\a\xe3\x01\f\xae]n\x8a:gu\x87\x18\xac\xfe\aj\"WG\x91\xca\xed\x9f\xeb\xd3\xdd\xf5\xfc\xfbw;\xc2\xb1\x8ad\xfco\xf8\x8b!K\xcdZ\xfb\x9di\xab\x9cQ\xe0:Gl\xd9v[\xf5)\v_\x9b\v\xe2\xa2\x8d\xbd\"O\x9a\x1a\xa8\x82;!\x16\xb1`\xc8\xd2h\xb3\xc0\x999\x13\xfe=\x9b/&\x94BO\x84\x06\xe45Ld]\x00\x97-(R\xd09c\x87\x9c\xfa\xde\x93\xb9v\xc3n\x99\xb5\x88\xb3\"d:\xdc\xba\x98I\xb2\xdf|\x97\x99^iN\xf0B+\xb2\x84\x0e\x12\xd7\xf7\xc7]\xc1\xe6G\xa4\x02\x88\x87#\xfe\xde\xd2\xe4\x7fn@\x16\xb1\x8a(\xa6\xc0\xbf\xd4z\xeaE\xb3S ,\xc7\xe8\x90t\x13\xf7\x05\xf5\xfb\xb0\x92\xbe\xd5fi\x90L>\x17\xbb\x88Z\xc4\xd7\xc6e%\xc2|\xab\xc9\xb6\x91\xcb\xba\xaeV\xcawM\b+ \xb9\x9a\xffZ9~\x1cZ\xce\xa3f\xb7c\xeev\"\xd5+\xd0pL\xb1\'\xd8C\x16^\x13\xd2\x17\x1b\r\x9c\xcf\x81^\x86\xc0\xcd\x80\xe3\xafhB\x9dJ\x9e\x8d\xed\r>\xea8\ty^\xc9\x9b\b\xf3\xf9\x9a\xf5\x8a\xd7\xbd\x1e\xee\x89\x1c') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x10006) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000000)={[0x5000, 0x0, 0x3000, 0x5000], 0x10001, 0x10, 0x6}) getdents64(r1, &(0x7f0000000140)=""/124, 0x7c) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/244, 0xf4) [ 2712.832056] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2712.858195] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2712.899722] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2712.906557] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2712.922784] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:21 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b04000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2712.947788] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2712.971545] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2713.012973] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2713.019582] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2713.034558] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2713.052981] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2713.066600] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2713.069369] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2713.073524] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2713.106385] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:21 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000002000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:21 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b05000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2713.207999] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2713.215012] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(0x0) [ 2713.253813] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2713.260285] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:21 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b06000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2713.319853] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2713.329142] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2713.347386] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2713.354671] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2713.387248] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2713.391444] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2713.418689] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2713.425645] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2713.426795] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2713.443416] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2713.451555] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2713.460437] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2713.470382] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2713.478218] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:21 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b07000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2713.530752] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2713.537667] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2713.584623] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2713.592053] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2713.622124] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2713.634244] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2713.656644] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2713.674279] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:13:22 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000003000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:22 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b08000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2713.694661] binder: 6704:6708 ioctl c018620b 0 returned -14 [ 2713.762626] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2713.770257] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2713.780471] binder: 6704:6711 ioctl c0306201 0 returned -14 [ 2713.786935] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2713.799482] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:22 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000140)={'rose0\x00', {0x2, 0x4e24, @local}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') r3 = syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001c80)={'veth1_to_team\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001cc0)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000001dc0)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003d80)={'tunl0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004080)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) accept4(r2, &(0x7f0000005c80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000005d00)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000000a480)={'ip6gretap0\x00', 0x0}) getsockname$packet(r2, &(0x7f000000a4c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000a500)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000a780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000a740)={&(0x7f000000a540)=ANY=[@ANYBLOB="04000000", @ANYRES16=r3, @ANYBLOB="000328bd7000fddbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="b80002003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="d40002005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c000400000009080600000001008001030000000000360321ffffff000001810900000005004003070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="400002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10], 0x1f8}}, 0x40000) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) getsockopt(r1, 0x5, 0x6, &(0x7f00000001c0)=""/214, &(0x7f00000002c0)=0xd6) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) prctl$PR_GET_SECUREBITS(0x1b) restart_syscall() exit(0x0) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) [ 2713.819243] binder: 6704:6711 BC_INCREFS_DONE u0000000000000000 no match [ 2713.837950] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2713.845362] binder: 6704:6711 Release 1 refcount change on invalid ref 1 ret -22 [ 2713.846791] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2713.878250] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2713.885040] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:22 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b09000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2713.918989] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2713.937642] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:13:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2713.963011] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2713.971729] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2713.982893] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2713.990735] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2714.000090] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2714.015702] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2714.023919] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2714.038258] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2714.046156] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2714.053799] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:22 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0a000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2714.075978] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2714.091593] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2714.153157] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2714.159830] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2714.174581] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2714.199714] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2714.199722] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2714.199753] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2714.222597] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2714.244222] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2714.251551] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2714.256444] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2714.266243] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2714.283337] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2714.291203] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:22 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0b000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(0x0) [ 2714.309332] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2714.332548] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2714.344466] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2714.353345] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2714.359787] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2714.384518] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2714.396285] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:22 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000004000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:22 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0c000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2714.532585] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2714.539719] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2714.563055] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2714.585656] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2714.597097] binder: 6752:6753 ioctl c018620b 0 returned -14 [ 2714.605939] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2714.612282] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2714.617176] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2714.627314] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2714.653597] binder: 6752:6760 ioctl c0306201 0 returned -14 [ 2714.675178] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2714.685077] binder: 6752:6760 BC_INCREFS_DONE u0000000000000000 no match [ 2714.697897] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2714.713847] binder: 6752:6760 Release 1 refcount change on invalid ref 1 ret -22 [ 2714.725084] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:23 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x20, 0xe877, 0xe93ee3e3ec654965, 0x8, 0x1, [{0x7, 0xbea6, 0x2, 0x0, 0x0, 0x800}]}) r2 = socket(0x1, 0x80003, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r3) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6001, 0xffffffffffffffff) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 18:13:23 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0d000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2714.736982] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2714.746603] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2714.754671] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2714.762681] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2714.770104] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2714.802891] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2714.809667] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2714.829848] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2714.831040] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2714.844852] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2714.853682] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2714.871249] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2714.883327] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2714.889944] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2714.893938] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2714.908124] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2714.928647] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2714.957729] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2714.972111] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2714.985374] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:23 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0e000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2715.010574] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2715.028507] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2715.036453] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:23 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000005000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2715.083083] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2715.092940] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:23 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0f000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2715.202773] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2715.209384] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2715.222884] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2715.229334] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(0x0) 18:13:23 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b10000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2715.286308] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2715.298546] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2715.332128] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2715.343114] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2715.356267] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2715.358690] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2715.382112] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2715.389596] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2715.404493] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2715.416163] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2715.448260] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2715.460491] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2715.472106] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2715.481930] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:23 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b11000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2715.520423] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2715.535359] binder: 6802:6804 ioctl c018620b 0 returned -14 [ 2715.539764] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2715.603451] binder: 6802:6805 ioctl c0306201 0 returned -14 [ 2715.609850] binder: 6802:6805 BC_INCREFS_DONE u0000000000000000 no match [ 2715.617449] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2715.624205] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2715.632725] binder: 6802:6805 Release 1 refcount change on invalid ref 1 ret -22 [ 2715.656038] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2715.666094] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2715.672795] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2715.682658] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:24 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000300)='\xbe`\xda\xffp\xc8\x88\xd6\x92\xc4\xb01\xefy\xad`\xd1\xe0w:\xb2\x03\xed\x10]\xf4\xff\xdc\xd4-\t\x00\xde\x811\x04Z\x87\f\x9f\xd5\xd4\x8a\xda\xff\x1f\xa8pC\x1bzr\xe1\xef\x06\xf1\xde6\x9a|\xce#\xa9\x99M\x87=\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000380)={{0x3, 0x0, 0x18ffe40e, 0x1, 'syz0\x00', 0x5}, 0x2, 0x3, 0x80000001, r1, 0x3, 0x1ff000000, 'syz1\x00', &(0x7f0000000040)=['em0-self%$nodevmime_type[user\x00', '\x00', '/dev/admmidi#\x00'], 0x2d, [], [0x9, 0x8, 0x80, 0x21]}) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000080)) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x6, 0x10001, 0x2}) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x8b6, 0x800) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x100000001, 0x4, 0x5, 0x1, 0x12, 0x8, 0x400, 0xffffffff, 0xc2, 0x4, 0x7, 0x7f}) exit(0x8000007ffffffe) getdents64(r2, &(0x7f00000007c0)=""/124, 0xfffffffffffffe0d) [ 2715.702048] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:24 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b12000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2715.732582] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2715.750611] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2715.764822] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2715.767219] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2715.795675] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2715.815134] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2715.832515] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:24 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x40400) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r1, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r3, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r3, &(0x7f0000000080)=""/124, 0x7c) [ 2715.848548] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2715.855238] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2715.863106] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2715.888429] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2715.904783] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2715.911254] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2715.924916] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2715.931436] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:13:24 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000006000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:24 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b13000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2716.030063] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2716.037491] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:24 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b14000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2716.072769] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2716.079637] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2716.132179] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2716.132830] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2716.139002] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2716.157533] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2716.188823] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2716.211921] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:24 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b15000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:24 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, r0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000200)) seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2716.233068] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2716.254087] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2716.262466] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2716.263400] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2716.278257] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2716.287316] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2716.297191] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2716.309438] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2716.325134] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2716.349072] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2716.382977] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2716.406150] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2716.468700] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2716.490309] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2716.502264] net_ratelimit: 26 callbacks suppressed [ 2716.502272] protocol 88fb is buggy, dev hsr_slave_0 [ 2716.512408] protocol 88fb is buggy, dev hsr_slave_1 [ 2716.517513] protocol 88fb is buggy, dev hsr_slave_0 [ 2716.522630] protocol 88fb is buggy, dev hsr_slave_1 [ 2716.542905] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2716.551912] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:25 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000007000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2716.610086] binder: 6854:6856 ioctl c018620b 0 returned -14 18:13:25 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, r0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000200)) seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2716.668756] binder: 6854:6859 BC_INCREFS_DONE u0000000000000000 no match [ 2716.682706] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2716.690751] binder: 6854:6859 Release 1 refcount change on invalid ref 1 ret -22 [ 2716.701855] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:25 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b16000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2716.720313] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2716.727226] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2716.736930] protocol 88fb is buggy, dev hsr_slave_0 [ 2716.736996] protocol 88fb is buggy, dev hsr_slave_1 [ 2716.752288] kobject: 'loop3' (0000000077381589): kobject_uevent_env 18:13:25 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000100)={{0x2, 0x4e20, @empty}, {0x1, @dev={[], 0x27}}, 0x10, {0x2, 0x4e24, @broadcast}, 'bond_slave_0\x00'}) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) [ 2716.764622] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2716.781681] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2716.809065] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2716.826795] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2716.839488] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2716.850070] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2716.872703] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2716.893678] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2716.904334] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:25 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b17000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2716.918316] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2716.933421] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2716.953177] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2716.960844] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2716.966670] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env 18:13:25 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, r0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000200)) seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2716.992679] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2717.006636] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2717.016004] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2717.026305] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2717.037333] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2717.071387] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2717.079390] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2717.105912] kobject: 'loop3' (0000000077381589): kobject_uevent_env 18:13:25 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b18000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2717.126641] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2717.142210] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2717.155952] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2717.171995] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2717.181693] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2717.189486] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2717.204528] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2717.212433] protocol 88fb is buggy, dev hsr_slave_0 [ 2717.217662] protocol 88fb is buggy, dev hsr_slave_1 [ 2717.218686] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2717.222831] protocol 88fb is buggy, dev hsr_slave_0 [ 2717.235686] protocol 88fb is buggy, dev hsr_slave_1 [ 2717.241276] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2717.258832] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2717.270001] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:25 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, r0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000200)) seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:25 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b19000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:25 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000002607000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2717.339459] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2717.346193] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2717.379096] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:25 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, r0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000200)) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2717.393932] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:25 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b1a000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2717.452648] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2717.463903] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2717.491405] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2717.507539] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2717.529633] binder: 6905:6906 ioctl c018620b 0 returned -14 [ 2717.541621] audit: type=1326 audit(1550254405.928:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6907 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2717.547472] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2717.583653] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2717.590537] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2717.600507] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2717.616786] binder: 6905:6915 BC_INCREFS_DONE u0000000000000000 no match [ 2717.628760] binder: 6905:6915 Release 1 refcount change on invalid ref 1 ret -22 [ 2717.651823] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2717.673798] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2717.681780] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2717.689454] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2717.698042] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:26 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b1b000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2717.706008] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2717.714070] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2717.721445] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2717.762851] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2717.769436] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2717.799901] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2717.810830] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2717.816880] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:26 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f00000001c0)=""/175, 0xaf) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x1cc, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6b3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffffffffff77}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x14c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x907f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xede3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0x1cc}}, 0x8800) exit(0x80000001) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x80, 0x1) 18:13:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) acct(&(0x7f0000000140)='./file0\x00') 18:13:26 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b1c000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2717.857045] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2717.886127] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2717.901714] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:26 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000a000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2717.945752] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2717.954048] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:13:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) acct(&(0x7f0000000140)='./file0\x00') 18:13:26 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b1d000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2718.072933] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2718.079596] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2718.097575] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2718.108576] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2718.134288] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2718.147447] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:26 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b1e000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2718.206216] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2718.222510] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2718.262305] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2718.275459] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2718.282006] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2718.292996] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:26 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, r0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000200)) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2718.307327] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2718.318810] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) acct(&(0x7f0000000140)='./file0\x00') 18:13:26 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b21000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2718.365783] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2718.376292] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2718.389740] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2718.397046] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2718.442704] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2718.449176] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2718.466583] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2718.498062] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2718.515880] audit: type=1326 audit(1550254406.908:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6961 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2718.537486] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2718.539212] binder: 6965:6967 ioctl c018620b 0 returned -14 [ 2718.546950] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2718.558343] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2718.568790] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2718.584674] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env 18:13:27 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b22000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2718.598664] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2718.611901] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2718.619898] binder: 6965:6967 BC_INCREFS_DONE u0000000000000000 no match [ 2718.621403] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2718.693518] binder: 6965:6967 Release 1 refcount change on invalid ref 1 ret -22 [ 2718.714002] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2718.720452] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2718.795453] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2718.801900] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2718.819620] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2718.828090] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:13:27 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) execveat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000140)='-+eth1\x00', &(0x7f00000001c0)='task\x00', &(0x7f0000000200)='-{$selinux\x00', &(0x7f0000000240)='task\x00', &(0x7f0000000280)='task\x00'], &(0x7f0000000480)=[&(0x7f0000000300)='task\x00', &(0x7f0000000340)='task\x00', &(0x7f0000000380)=']-\x00', &(0x7f00000003c0)='task\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='/vmnet0ppp0ppp1%md5sum:-]keyring\x00'], 0x100) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) exit(0x0) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) 18:13:27 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000260c000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000), 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:13:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:27 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b23000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2718.845742] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2718.858354] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2718.923308] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2718.929777] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2718.960009] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2718.968020] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2718.978220] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2718.993504] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2719.011434] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2719.020486] binder: 6986:6995 ioctl c018620b 0 returned -14 [ 2719.037933] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2719.050860] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2719.058082] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:27 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b24000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2719.068928] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2719.078078] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2719.090198] binder: 6986:7001 BC_INCREFS_DONE u0000000000000000 no match [ 2719.100767] binder: 6986:7001 Release 1 refcount change on invalid ref 1 ret -22 [ 2719.132973] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2719.139464] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2719.161851] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2719.172816] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2719.184097] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:27 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b25000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2719.227311] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:27 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, r0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000200)) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:27 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000010000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2719.295163] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2719.301630] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:27 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b26000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2719.382544] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2719.389275] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2719.400443] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2719.411640] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2719.447825] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2719.465354] audit: type=1326 audit(1550254407.858:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7017 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2719.465966] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:27 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b27000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2719.498164] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2719.508261] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2719.518063] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2719.522618] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2719.573871] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2719.587619] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2719.596064] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2719.615512] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2719.622744] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2719.629436] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2719.629652] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2719.649099] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:28 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b28000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2719.673105] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2719.690098] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2719.732892] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2719.739870] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2719.776825] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2719.789283] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2719.806026] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2719.823834] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2719.850808] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2719.858707] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:28 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x180) getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) 18:13:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000), 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2719.871829] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2719.896544] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2719.903308] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2719.929756] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2719.948601] binder: 7042:7045 ioctl c018620b 0 returned -14 [ 2719.954859] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2719.968796] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env 18:13:28 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b29000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2719.989483] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2720.001552] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2720.012633] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2720.019883] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2720.029851] binder: 7042:7051 BC_INCREFS_DONE u0000000000000000 no match [ 2720.040762] binder: 7042:7051 Release 1 refcount change on invalid ref 1 ret -22 [ 2720.050492] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2720.062094] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2720.073473] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2720.076794] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:28 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b2a000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:28 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000f2f52010000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:28 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b60000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2720.165721] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2720.172454] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:28 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, r0) seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2720.232516] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2720.239286] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2720.263070] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2720.269522] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2720.337679] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2720.348465] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2720.375308] kobject: 'loop3' (0000000077381589): kobject_uevent_env 18:13:28 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017bf0000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2720.381879] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2720.395686] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2720.403823] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2720.419132] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:28 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pkey_alloc(0x0, 0x2) seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2720.442671] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2720.451507] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2720.458412] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2720.466500] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2720.467506] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2720.484774] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:28 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00030000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2720.493556] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2720.564011] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2720.572850] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2720.600784] kobject: 'loop3' (0000000077381589): kobject_uevent_env 18:13:29 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2720.620019] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2720.630141] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2720.637065] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2720.660156] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2720.688976] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2720.702852] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2720.716226] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2720.730720] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:29 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x3, 0x1, 0x9}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000100)=""/115, 0x73) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r3, &(0x7f0000000500)=""/175, 0x5d) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x521240, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f00000001c0)={0x7, 0x0, [], {0x0, @reserved}}) exit(0x0) getdents64(r3, &(0x7f0000000080)=""/124, 0x7c) 18:13:29 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00050000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000), 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:13:29 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x1, 0x0) seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2720.740873] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2720.755751] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2720.766210] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2720.825686] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2720.848654] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:29 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000014000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:29 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2720.899914] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2720.927555] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2720.940672] binder: 7095:7102 ioctl c018620b 0 returned -14 18:13:29 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00060000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2720.969527] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2720.977105] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2720.983402] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2720.993066] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2720.994380] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2720.999767] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2721.018928] binder: 7095:7105 BC_INCREFS_DONE u0000000000000000 no match [ 2721.019049] binder: 7095:7105 Release 1 refcount change on invalid ref 1 ret -22 [ 2721.036205] audit: type=1804 audit(1550254409.418:183): pid=7104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir692520500/syzkaller.XFfRYX/2681/file0" dev="sda1" ino=16615 res=1 18:13:29 executing program 3: seccomp(0x0, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2721.094751] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2721.099104] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2721.106651] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2721.117219] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:29 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00070000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2721.141482] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2721.149399] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2721.159847] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2721.166958] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2721.172270] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2721.196011] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2721.201146] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2721.207457] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2721.211964] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2721.229004] audit: type=1326 audit(1550254409.618:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7116 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2721.237812] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2721.259138] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2721.266906] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2721.271514] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2721.285998] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2721.287238] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2721.312077] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:29 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00090000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2721.363366] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2721.393856] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2721.433232] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2721.442712] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2721.458549] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2721.472638] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:29 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000002618000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2721.602502] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2721.609982] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2721.635418] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2721.645663] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2721.655974] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2721.663246] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:30 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x4, 0x203b}) 18:13:30 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b000a0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2721.713082] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2721.747951] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2721.753495] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env 18:13:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2721.760692] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2721.762271] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2721.776800] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(0x0) [ 2721.804167] Process accounting resumed [ 2721.840092] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2721.853962] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2721.860532] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2721.903983] binder: 7151:7153 ioctl c018620b 0 returned -14 [ 2721.908810] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2721.921608] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2721.930049] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2721.966117] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2721.977390] binder: 7151:7157 got transaction with invalid offset (0, min 0 max 0) or object. [ 2722.015546] binder: 7151:7157 transaction failed 29201/-22, size 0-8 line 3097 [ 2722.018823] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:30 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b000b0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2722.074016] binder: 7151:7161 BC_INCREFS_DONE u0000000000000000 no match [ 2722.082968] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2722.090271] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2722.090610] binder: 7151:7157 Release 1 refcount change on invalid ref 1 ret -22 [ 2722.115479] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:30 executing program 3: seccomp(0x0, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2722.122108] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2722.134777] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2722.148807] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2722.157866] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2722.168026] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2722.204220] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2722.219516] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2722.227691] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:30 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b000c0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2722.241175] audit: type=1326 audit(1550254410.628:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7170 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2722.262529] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2722.278779] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2722.289000] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2722.298227] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2722.305694] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:30 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000020000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2722.371683] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2722.382111] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:30 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b000d0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2722.452925] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2722.459561] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2722.503515] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2722.510382] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2722.533779] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:30 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b000e0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2722.551168] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2722.559273] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2722.571722] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2722.592604] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2722.601658] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2722.609677] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2722.617148] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2722.628242] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2722.635240] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:31 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000100)={0x44, 0x9, "c581b7f0b5c05f4c744af708cfdd72884b4aab17dad8e6dd347c315141835657", 0x706f, 0x3, 0x100, 0x6, 0x1}) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000000)) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) 18:13:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2722.663465] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2722.686889] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2722.699048] binder: undelivered TRANSACTION_ERROR: 29201 18:13:31 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017bc00e0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2722.732447] net_ratelimit: 26 callbacks suppressed [ 2722.732454] protocol 88fb is buggy, dev hsr_slave_0 [ 2722.742607] protocol 88fb is buggy, dev hsr_slave_1 [ 2722.747810] protocol 88fb is buggy, dev hsr_slave_0 [ 2722.752924] protocol 88fb is buggy, dev hsr_slave_1 [ 2722.757967] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2722.758006] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2722.777887] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2722.786139] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2722.794883] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2722.812802] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2722.819293] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:13:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(0x0) [ 2722.832555] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2722.863122] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2722.879771] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2722.887120] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2722.910912] binder: 7196:7200 ioctl c018620b 0 returned -14 [ 2722.922127] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2722.929625] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2722.946063] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2722.958533] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2722.972442] protocol 88fb is buggy, dev hsr_slave_0 [ 2722.977646] protocol 88fb is buggy, dev hsr_slave_1 18:13:31 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b000f0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2722.984172] binder: 7196:7207 got transaction with invalid offset (0, min 0 max 0) or object. [ 2722.997194] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2723.004439] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2723.011909] binder: 7196:7207 transaction failed 29201/-22, size 0-8 line 3097 [ 2723.023603] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:31 executing program 3: seccomp(0x0, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2723.050429] binder: 7196:7209 BC_INCREFS_DONE u0000000000000000 no match [ 2723.079311] binder: 7196:7207 Release 1 refcount change on invalid ref 1 ret -22 18:13:31 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000001020000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2723.111658] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2723.125558] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:31 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00110000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2723.163324] audit: type=1326 audit(1550254411.558:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7216 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2723.193000] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2723.199514] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2723.222816] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2723.244067] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2723.264440] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2723.273508] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2723.307803] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:31 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00120000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2723.322611] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2723.339413] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2723.347321] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2723.355505] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2723.362822] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2723.370508] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2723.378493] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2723.423440] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2723.429875] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2723.451333] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2723.462432] protocol 88fb is buggy, dev hsr_slave_0 [ 2723.467521] protocol 88fb is buggy, dev hsr_slave_1 [ 2723.470803] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2723.473156] protocol 88fb is buggy, dev hsr_slave_0 [ 2723.473205] protocol 88fb is buggy, dev hsr_slave_1 [ 2723.503423] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2723.512845] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:31 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00130000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:32 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000428000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2723.640817] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2723.647508] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2723.662789] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2723.679732] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:32 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00140000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2723.703875] binder: undelivered TRANSACTION_ERROR: 29201 18:13:32 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000280)) r1 = getpgrp(0x0) ptrace$getregs(0xffffffffffffffff, r1, 0xeb47, &(0x7f00000005c0)=""/4096) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff) delete_module(&(0x7f0000000240)='\x00', 0xa00) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xfffffffffffffffb, 0x30, 0x3f, 0x5}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYBLOB="4800000047a7ed92952dc33cb26c83bdd1dec0eca248360c9c9322e2f30699df88a39aeb550100009d8c91265edea4680bf014000000317f7ebe55ff17c52c"], &(0x7f0000000140)=0x50) exit(0x0) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) 18:13:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(0x0) [ 2723.767901] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2723.782923] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2723.795222] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2723.802138] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2723.821687] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2723.855690] binder: 7244:7248 ioctl c018620b 0 returned -14 [ 2723.859936] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2723.869337] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2723.897527] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2723.906276] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2723.926736] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2723.927813] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2723.944899] binder: 7244:7256 got transaction with invalid offset (0, min 0 max 0) or object. [ 2723.965352] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:13:32 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00150000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:32 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2723.968730] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2723.990518] binder: 7244:7259 BC_INCREFS_DONE u0000000000000000 no match [ 2723.998458] binder: 7244:7256 transaction failed 29201/-22, size 0-8 line 3097 [ 2724.014453] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2724.016624] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2724.021937] binder: 7244:7259 Release 1 refcount change on invalid ref 1 ret -22 [ 2724.042267] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2724.065642] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2724.078227] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2724.082552] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2724.101628] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2724.114949] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2724.122879] audit: type=1326 audit(1550254412.508:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7261 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2724.123793] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2724.158430] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2724.174313] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:32 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00160000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2724.246145] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2724.254637] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2724.271680] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2724.279824] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2724.289426] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2724.296890] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2724.304969] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2724.315860] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2724.316544] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2724.330311] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2724.330523] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:32 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00170000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2724.346364] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:32 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000429000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2724.410422] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2724.422721] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:32 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00180000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2724.492931] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2724.500212] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2724.511009] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2724.530477] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2724.572768] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2724.579540] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2724.610761] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:33 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00190000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2724.622934] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2724.631061] binder: undelivered TRANSACTION_ERROR: 29201 [ 2724.645099] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2724.661327] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2724.670028] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2724.681423] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2724.684592] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2724.690080] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2724.696306] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2724.718736] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2724.749855] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2724.751846] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:33 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) r2 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='task\x00', 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000001c0)={r2, 0x66426f0b, 0xf66}, &(0x7f0000000200)={'enc=', 'raw', ' hash=', {'sha512-avx2\x00'}}, &(0x7f00000005c0)="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", &(0x7f0000000280)="4ed9a4c1a02ab5dbcbe9858a6548879cd59d9793b16bf6ddcd8263f2df8f13") 18:13:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x60001, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2724.807621] binder: 7294:7297 ioctl c018620b 0 returned -14 [ 2724.833416] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2724.843080] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:33 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b001a0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2724.887609] binder: 7294:7303 got transaction with invalid offset (0, min 0 max 0) or object. [ 2724.896750] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2724.916160] binder: 7294:7303 transaction failed 29201/-22, size 0-8 line 3097 [ 2724.925050] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:33 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2724.930894] binder: 7294:7303 Release 1 refcount change on invalid ref 1 ret -22 [ 2724.947819] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2724.955869] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2724.964713] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2724.971157] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2724.980537] kobject: 'kvm' (0000000005486f68): kobject_uevent_env [ 2724.990981] kobject: 'kvm' (0000000005486f68): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2724.994364] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2725.014595] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2725.031179] kobject: 'kvm' (0000000005486f68): kobject_uevent_env 18:13:33 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000042a000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2725.057755] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2725.075208] kobject: 'kvm' (0000000005486f68): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2725.084706] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2725.113557] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2725.120609] kobject: 'kvm' (0000000005486f68): kobject_uevent_env [ 2725.121544] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2725.127052] audit: type=1326 audit(1550254413.508:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7315 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 18:13:33 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b001b0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2725.185731] kobject: 'kvm' (0000000005486f68): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2725.195193] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2725.202610] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2725.242804] kobject: 'kvm' (0000000005486f68): kobject_uevent_env [ 2725.252721] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2725.259174] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2725.271301] kobject: 'kvm' (0000000005486f68): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:13:33 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x1f5, 0x20007ffc) [ 2725.324248] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2725.331301] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2725.358433] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2725.373836] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2725.381531] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2725.389120] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2725.399267] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:33 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b001c0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2725.435716] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2725.463049] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2725.470371] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2725.478403] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2725.485392] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2725.527709] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2725.539389] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:34 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b001d0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/182, 0xb6) [ 2725.590832] binder: undelivered TRANSACTION_ERROR: 29201 [ 2725.622887] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2725.629366] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2725.648091] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2725.655429] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2725.666998] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2725.682093] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2725.702601] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2725.714671] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2725.729602] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2725.746105] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:34 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b001e0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2725.756603] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2725.767389] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2725.768895] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2725.777611] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:34 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept(r0, &(0x7f0000000100)=@llc, &(0x7f0000000000)=0x80) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x71f8}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e22, 0x2000000000000000, @empty, 0x1}}, 0x3ff, 0x100000001}, &(0x7f0000000300)=0x90) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r3, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r3, &(0x7f0000000080)=""/124, 0x7c) [ 2725.808238] binder: 7346:7350 ioctl c018620b 0 returned -14 [ 2725.810932] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2725.821870] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:34 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000042b000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2725.865443] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2725.872049] binder: 7346:7357 got transaction with invalid offset (0, min 0 max 0) or object. [ 2725.881590] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2725.907250] binder: 7346:7357 transaction failed 29201/-22, size 0-8 line 3097 18:13:34 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2725.931929] binder: 7346:7360 BC_INCREFS_DONE u0000000000000000 no match [ 2725.936449] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2725.962451] binder: 7346:7357 Release 1 refcount change on invalid ref 1 ret -22 18:13:34 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b001f0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2725.973058] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2726.042546] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2726.049098] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2726.068244] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2726.099694] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2726.127024] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2726.129963] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:34 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00200000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2726.141542] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2726.151582] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2726.188952] audit: type=1326 audit(1550254414.578:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7370 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2726.211980] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2726.221928] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2726.229814] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2726.237331] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2726.243838] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2726.258325] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2726.266598] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2726.274372] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2726.284435] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:34 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00210000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2726.293775] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2726.333059] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2726.340817] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2726.361401] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2726.368782] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2726.378741] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2726.385547] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2726.412024] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2726.441859] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2726.469723] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:34 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00220000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2726.486061] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2726.495724] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2726.506373] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2726.513138] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2726.514929] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2726.523639] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2726.531900] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2726.554085] binder: undelivered TRANSACTION_ERROR: 29201 18:13:35 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000042c000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:35 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00230000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2726.628009] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2726.635090] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:13:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) getpid() setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ab553fec947a1333177e24b5ebadf404", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0x2e}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840)) [ 2726.668549] binder: 7395:7397 ioctl c018620b 0 returned -14 [ 2726.692602] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2726.699660] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2726.712965] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2726.732777] binder: 7395:7400 got transaction with invalid offset (0, min 0 max 0) or object. [ 2726.744663] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:35 executing program 1: iopl(0x1ff) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="cc01082434030000730300000700000059000000fdffffff0000000000000000635c7291d07c38cc3a74a783f9401cc055d0468203459ed26f1f0b919c9b60beb576fe473f745840c6da799ee512499dcdfeea7b81f225446aed38dee99c7dc6ee529ceedc6bd3aae8e2d2efd47bcb9422d67b043e93dd3bec2cf5fbd28cce9aadf8769cd6063410b46fdfdc60254c9d9e086b957526519a88c16854893e92b70a30adcf049c7fe5e43437389b875b6d9770216464c9e0e52987740be45e26bf6b5965b5913a76194823c36da0a78b82362e6344abbe8f70981e4310385fa5041b80d1e274542b2720aaeccc3c51e67c46b02d2990ea10694caa0269f07a2f6dbcb3a7d3a8e4eec88d9ed78100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffaea8b6c65064ad5be116892eb8a2b9c6670f3eefe1c132f20b2fe107dcf019f24c20edebae9e93948867593c9ae5b7534575776432e8572dc3403f67180877b9c5f05d1031696ec572125f468dcd59d2c0f6d01a7b401055ba6eeb6d127979"], 0x904) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x20) getdents64(r2, &(0x7f0000000240)=""/175, 0x2c8) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x20, 0x200002) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r4}}, 0x18) exit(0x0) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) [ 2726.763623] binder: 7395:7400 transaction failed 29201/-22, size 0-8 line 3097 [ 2726.769715] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2726.779040] binder: 7395:7400 Release 1 refcount change on invalid ref 1 ret -22 [ 2726.796303] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2726.815904] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:35 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00240000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2726.848376] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2726.858419] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2726.865020] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2726.883151] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2726.885657] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2726.896752] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2726.905398] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2726.915005] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2726.922036] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2726.939760] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:35 executing program 3: seccomp(0x1, 0x9, 0x0) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2726.946966] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2726.954550] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2726.961681] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:35 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00250000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:35 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x181000, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}], r3, 0x1, 0x1, 0x400000}}, 0x20) getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) [ 2727.043172] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2727.051653] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2727.070494] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2727.070928] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2727.077803] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2727.100214] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2727.108395] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2727.110240] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2727.127216] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2727.135887] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2727.148776] audit: type=1326 audit(1550254415.538:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7423 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2727.162694] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2727.178701] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2727.187645] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2727.219371] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2727.227464] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2727.229907] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2727.236517] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2727.252611] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:35 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000042d000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:35 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00260000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2727.392766] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2727.399382] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2727.420949] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2727.427773] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2727.447261] binder: undelivered TRANSACTION_ERROR: 29201 [ 2727.479307] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:35 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00270000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2727.501323] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2727.543254] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2727.550071] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2727.557265] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2727.578581] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) set_mempolicy(0x0, 0x0, 0x80000000) [ 2727.588783] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2727.605942] binder: 7446:7449 ioctl c018620b 0 returned -14 [ 2727.609449] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2727.613002] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2727.672561] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2727.682592] binder: 7446:7454 got transaction with invalid offset (0, min 0 max 24) or object. [ 2727.688172] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2727.691416] binder: 7446:7454 transaction failed 29201/-22, size 24-8 line 3097 [ 2727.714776] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2727.722787] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2727.729233] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2727.743711] binder: 7446:7454 BC_INCREFS_DONE u0000000000000000 no match [ 2727.758661] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2727.761101] binder: 7446:7456 Release 1 refcount change on invalid ref 1 ret -22 [ 2727.777902] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:36 executing program 5: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b001f0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2727.828822] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2727.845274] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2727.858753] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:36 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00280000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2727.874745] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2727.889492] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2727.899204] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2727.912009] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2727.919622] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2727.927625] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2727.934961] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2727.942765] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2727.949982] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2727.957723] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2727.965207] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:36 executing program 3: seccomp(0x1, 0x9, 0x0) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:36 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2727.973351] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2727.983209] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:36 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000042e000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:36 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f00000001c0)=""/241) [ 2728.055767] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2728.062243] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2728.104548] audit: type=1326 audit(1550254416.498:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7473 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2728.106719] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env 18:13:36 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00290000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2728.150779] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2728.179993] audit: type=1326 audit(1550254416.548:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7475 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2728.192101] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2728.219247] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2728.232655] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2728.240885] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2728.244403] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:36 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b002a0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2728.282232] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2728.332010] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2728.339819] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2728.369518] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2728.377086] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2728.385505] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2728.393814] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2728.409118] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:36 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b65300000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2728.427645] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2728.447867] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2728.458131] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2728.502723] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2728.509279] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2728.540669] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2728.550457] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2728.562947] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2728.569808] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2728.581980] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2728.592621] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:37 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000042f000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2728.604741] binder: 7500:7503 ioctl c018620b 0 returned -14 18:13:37 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b65580000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2728.657628] binder: 7500:7508 got transaction with invalid offset (0, min 0 max 24) or object. [ 2728.681774] binder: 7500:7508 transaction failed 29201/-22, size 24-8 line 3097 [ 2728.692193] binder: 7500:7508 BC_INCREFS_DONE u0000000000000000 no match [ 2728.700251] binder: 7500:7508 Release 1 refcount change on invalid ref 1 ret -22 [ 2728.713684] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2728.720264] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2728.779388] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2728.788679] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:37 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00600000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2728.827982] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2728.839010] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2728.850954] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2728.858483] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2728.866318] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:37 executing program 3: seccomp(0x1, 0x9, 0x0) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2728.873483] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2728.881053] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2728.888230] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2728.932706] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2728.939602] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2728.962867] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2728.969470] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:37 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2728.979089] net_ratelimit: 26 callbacks suppressed [ 2728.979097] protocol 88fb is buggy, dev hsr_slave_0 [ 2728.979157] protocol 88fb is buggy, dev hsr_slave_1 [ 2728.979264] protocol 88fb is buggy, dev hsr_slave_0 [ 2728.979328] protocol 88fb is buggy, dev hsr_slave_1 [ 2729.010801] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2729.017652] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2729.031877] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2729.038814] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2729.039803] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2729.059611] audit: type=1326 audit(1550254417.448:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7522 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2729.060226] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2729.084985] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2729.097895] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2729.110666] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2729.120283] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:37 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) r3 = syz_open_procfs(r1, &(0x7f0000000000)='\xf7p\ax\x82') getdents64(r3, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r4, 0x120, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xfb}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x11}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x1) getdents64(r3, &(0x7f0000000080)=""/124, 0x7c) [ 2729.129995] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2729.139666] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2729.153588] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2729.160600] audit: type=1326 audit(1550254417.548:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7527 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 18:13:37 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b30650000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2729.179955] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2729.201644] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2729.208454] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2729.218047] protocol 88fb is buggy, dev hsr_slave_0 [ 2729.218089] protocol 88fb is buggy, dev hsr_slave_1 [ 2729.255323] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2729.267246] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:13:37 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000430000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:37 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b58650000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2729.462720] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2729.469461] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2729.499148] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2729.519270] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2729.534970] binder: 7545:7547 ioctl c018620b 0 returned -14 [ 2729.549418] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2729.558910] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:13:38 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00810000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2729.569387] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2729.595601] binder: 7545:7554 got transaction with invalid offset (0, min 0 max 24) or object. [ 2729.610106] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2729.626110] binder: 7545:7554 transaction failed 29201/-22, size 24-8 line 3097 [ 2729.647261] binder: 7545:7556 BC_INCREFS_DONE u0000000000000000 no match [ 2729.651634] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2729.657738] binder: 7545:7554 Release 1 refcount change on invalid ref 1 ret -22 [ 2729.661334] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2729.688004] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2729.695247] protocol 88fb is buggy, dev hsr_slave_0 [ 2729.695305] protocol 88fb is buggy, dev hsr_slave_1 [ 2729.695411] protocol 88fb is buggy, dev hsr_slave_0 [ 2729.695476] protocol 88fb is buggy, dev hsr_slave_1 [ 2729.722448] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2729.730753] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2729.740608] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2729.749869] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2729.763724] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:38 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0ec00000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2729.771707] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2729.787214] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2729.823152] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2729.829949] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2729.840899] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2729.851104] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:38 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x0, 0x0}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2729.868136] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2729.872242] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2729.901112] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2729.910548] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:38 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000043d000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2729.928425] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2729.937141] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:38 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2729.980092] audit: type=1326 audit(1550254418.368:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7566 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 18:13:38 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00f00000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2730.034531] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2730.041038] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2730.089135] audit: type=1326 audit(1550254418.478:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7572 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2730.103823] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2730.119738] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:38 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x40000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000380), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) prctl$PR_CAPBSET_READ(0x17, 0x2) recvmsg$kcm(r1, &(0x7f0000001a80)={&(0x7f00000007c0)=@l2, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000840)}, {&(0x7f0000000880)=""/107, 0x6b}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/241, 0xf1}], 0x4, &(0x7f0000001a40)}, 0x0) exit(0x0) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@dev, @in=@broadcast}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) connect$inet6(r2, &(0x7f0000000840)={0xa, 0x4e28, 0x3e, @local, 0x3}, 0xfffffe35) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000700)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000006c0)=0x4) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000480)={0x0}) ioctl$SIOCAX25ADDFWD(r4, 0x89ea, &(0x7f0000000780)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f00000004c0)={r5, 0x2d6cc1ad47f5096a}) getsockname$tipc(r2, &(0x7f00000003c0)=@name, &(0x7f0000000400)=0x10) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x4, {0xfffffffffffffff7, 0x8, "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", 0x8d, 0x1, 0x3, 0xff, 0x7, 0x8001, 0x4000, 0x1}, r3}}, 0x128) r6 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x100) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000740)={0x20000000}) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000001a40)={0xa, 0x4, 0xfa00, {r3}}, 0xc) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000100)=@req={0x6, 0x1000, 0x3ff, 0x7ff}, 0x10) [ 2730.140316] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2730.162149] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2730.210237] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2730.210366] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2730.224005] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2730.229902] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:13:38 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00ff0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2730.256848] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2730.278392] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2730.314729] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2730.332921] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2730.343754] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2730.345979] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2730.351361] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:38 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x8b300ddd095518a3) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) 18:13:38 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00400300008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2730.392242] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2730.402239] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2730.412860] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2730.462901] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2730.469522] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2730.492960] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2730.512816] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2730.531657] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2730.540972] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2730.548525] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2730.557501] binder: 7600:7603 ioctl c018620b 0 returned -14 18:13:39 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00034000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2730.559151] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2730.586148] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2730.596591] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2730.607118] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:39 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000003f000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2730.626656] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2730.655758] binder: 7600:7610 BC_INCREFS_DONE u0000000000000000 no match [ 2730.668780] binder: 7600:7610 Release 1 refcount change on invalid ref 1 ret -22 18:13:39 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x0, 0x0}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2730.767401] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2730.788338] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2730.845357] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2730.860712] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2730.872547] kobject: 'loop3' (0000000077381589): kobject_uevent_env 18:13:39 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017bfffff000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:39 executing program 5: seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2730.909891] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2730.923729] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2730.935833] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2730.949015] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2730.959001] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2730.968076] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2730.978684] audit: type=1326 audit(1550254419.368:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7621 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2730.992011] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2731.025807] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2731.036532] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2731.054669] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2731.065230] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2731.074078] audit: type=1326 audit(1550254419.468:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7627 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2731.074932] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2731.103508] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2731.154077] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2731.160918] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2731.177367] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2731.194347] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2731.229974] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2731.237512] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2731.261592] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:39 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000001008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2731.287232] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2731.302157] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2731.323675] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2731.331356] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2731.338962] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2731.347963] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2731.349953] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2731.356306] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2731.372838] binder: release 7600:7610 transaction 303 out, still active 18:13:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2731.379268] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2731.388707] binder: undelivered TRANSACTION_COMPLETE 18:13:39 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000040000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:39 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') r2 = getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x2, &(0x7f00000001c0)=""/134) getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) [ 2731.434561] binder: send failed reply for transaction 303, target dead [ 2731.470184] kobject: 'loop2' (000000004811331c): kobject_uevent_env 18:13:39 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000002008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2731.477759] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2731.499794] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2731.508636] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2731.522599] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2731.534488] binder: 7645:7646 ioctl c018620b 0 returned -14 [ 2731.535126] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2731.564041] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2731.587688] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2731.590032] binder: 7645:7652 BC_INCREFS_DONE u0000000000000000 no match [ 2731.626525] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:40 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000003008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2731.637069] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2731.646744] binder: 7645:7657 Release 1 refcount change on invalid ref 1 ret -22 [ 2731.656936] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2731.666439] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2731.703866] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2731.711763] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2731.720073] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2731.728902] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2731.737865] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:40 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x0, 0x0}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:40 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000004008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2731.747733] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2731.761165] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2731.773479] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2731.822830] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2731.829770] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2731.852909] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2731.863048] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2731.880966] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2731.891946] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2731.902741] audit: type=1326 audit(1550254420.288:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7667 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 18:13:40 executing program 5: seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2731.908152] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2731.933239] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:40 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000002647000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2731.987343] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2732.001411] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:40 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000005008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2732.040463] audit: type=1326 audit(1550254420.428:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7677 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2732.112815] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2732.119496] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2732.132798] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2732.139252] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:40 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000006008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2732.188029] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2732.210037] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2732.253875] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2732.261208] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2732.272984] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2732.276455] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2732.286163] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2732.288934] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2732.312242] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2732.320950] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2732.336902] binder: release 7645:7652 transaction 305 out, still active [ 2732.352468] binder: undelivered TRANSACTION_COMPLETE 18:13:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:40 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000007008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:40 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) r2 = getpgid(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r1, 0x50, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r2, r1, 0x0, 0x7, &(0x7f0000000000)=':eth0&\x00', r3}, 0x30) shutdown(r0, 0x1) timer_create(0x5, &(0x7f00000003c0)={0x0, 0x1a, 0x0, @thr={&(0x7f0000000240)="4e2813baa433c66dd5a285be8973d237b7c4cf9a29b71163707debfa1e57fbf90462c128c79f286ca0f2f1d6a1d56d1fffba259686a7fb6cd88077e507dbf1eeffe35d6d26e3", &(0x7f00000002c0)="64f15ad9155ac8b731fd307f53be71b57e8e80eb9265343da40314453a5df114abc4739bae2fd733fee0989d579377e3942b6b13360afb5a4736cf5d513273f0836a8110f1c3f1cbc81f954b02de0ecda558a9ab96e62ba95a8573d0e9c811128036be6e1a34984547eee9a67771b7441c26a4f8f26f380a330e4a44896a949c3d6a69ea24501a13bebe2ceab3db92c7a0b2845b5213b07635a60a6559d0ebf016dc774c8d4cee3a33d9dfc58d54213c36960f9066a25e5f82904c07678ddce81b7d21b3fb1b90a671efc0f90dd6f64952546667458a26b64fa03c000bdc9b922f8531e4bf"}}, &(0x7f0000000400)=0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000480)={{0x77359400}, {r5, r6+10000000}}, &(0x7f00000004c0)) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) [ 2732.357611] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2732.359641] binder: send failed reply for transaction 305, target dead [ 2732.372613] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2732.422970] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2732.429512] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2732.459133] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2732.459577] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2732.472220] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2732.479081] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2732.486626] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2732.506967] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2732.518637] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2732.531825] binder: 7698:7702 ioctl c018620b 0 returned -14 [ 2732.540924] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2732.549013] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2732.551666] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2732.561628] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2732.569875] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2732.588159] binder: 7698:7707 BC_INCREFS_DONE u0000000000000000 no match [ 2732.596268] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2732.607515] binder: 7698:7707 Release 1 refcount change on invalid ref 1 ret -22 [ 2732.607827] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:41 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000008008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2732.619201] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2732.629627] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:41 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:41 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000048000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2732.741538] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2732.750841] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:41 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000009008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2732.771121] audit: type=1326 audit(1550254421.158:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7718 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2732.792721] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2732.802810] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2732.821452] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:41 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0000000a008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:41 executing program 5: seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2732.850016] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2732.859879] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2732.867112] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2732.889252] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2732.912915] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2732.921538] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2732.928771] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2732.936856] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2732.944504] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2732.950991] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2732.961108] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2732.982851] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2732.998279] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:41 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0000000b008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2733.052928] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2733.059776] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2733.072199] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2733.081461] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2733.086037] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2733.088755] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2733.109718] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2733.118107] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2733.127088] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2733.147580] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2733.150253] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2733.162010] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2733.168059] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2733.172612] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:41 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0000000c008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2733.210464] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2733.240263] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:41 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000004c000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2733.326279] binder: release 7698:7707 transaction 307 out, still active [ 2733.333974] binder: undelivered TRANSACTION_COMPLETE [ 2733.340400] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2733.354540] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:41 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0xffffffffffffff01) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) [ 2733.370448] binder: send failed reply for transaction 307, target dead 18:13:41 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0000000d008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2733.412758] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2733.423660] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2733.447410] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2733.465062] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2733.485530] binder: 7754:7759 ioctl c018620b 0 returned -14 [ 2733.504012] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2733.512815] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2733.521453] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2733.540038] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2733.550751] binder: 7754:7766 BC_INCREFS_DONE u0000000000000000 no match [ 2733.556660] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:42 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2733.565091] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2733.568334] binder: 7754:7766 Release 1 refcount change on invalid ref 1 ret -22 [ 2733.599470] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:42 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0000000e008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2733.609609] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2733.630724] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2733.642664] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2733.650757] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2733.670100] kauditd_printk_skb: 1 callbacks suppressed [ 2733.670113] audit: type=1326 audit(1550254422.058:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7771 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2733.702998] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2733.711220] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2733.717400] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2733.736585] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:42 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0000000f008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2733.762659] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2733.792794] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2733.801609] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2733.818197] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2733.831084] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2733.838862] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2733.850159] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:42 executing program 5: seccomp(0x0, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:42 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000010008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2733.874503] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2733.889621] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2733.912766] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2733.936478] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2733.942729] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2733.950670] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2733.958178] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2733.967129] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2733.977481] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:42 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000060000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:42 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000011008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2733.990146] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2734.000085] audit: type=1326 audit(1550254422.388:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7785 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2734.122559] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2734.129248] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2734.142873] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2734.156243] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:42 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000012008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2734.218968] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2734.225859] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2734.265548] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2734.273097] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2734.278091] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2734.280828] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2734.301117] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2734.302739] binder: release 7754:7766 transaction 309 out, still active [ 2734.322287] binder: undelivered TRANSACTION_COMPLETE [ 2734.334221] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2734.349618] binder: send failed reply for transaction 309, target dead [ 2734.356705] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:42 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000000)) getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) [ 2734.364040] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2734.368078] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2734.382499] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2734.389626] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2734.422773] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2734.443601] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2734.464026] binder: 7815:7816 ioctl c018620b 0 returned -14 18:13:42 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2734.464972] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2734.542930] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2734.549409] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2734.558208] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2734.561106] binder: 7815:7820 BC_INCREFS_DONE u0000000000000000 no match [ 2734.573767] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2734.579626] binder: 7815:7820 Release 1 refcount change on invalid ref 1 ret -22 18:13:43 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000013008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:43 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000068000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2734.620334] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2734.637048] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2734.648365] audit: type=1326 audit(1550254423.038:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7822 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2734.742131] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2734.748786] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2734.773215] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2734.779862] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:43 executing program 5: seccomp(0x0, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2734.790977] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2734.811237] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:43 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000014008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2734.867956] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2734.889407] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2734.909051] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2734.918446] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2734.932760] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2734.939919] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2734.954195] audit: type=1326 audit(1550254423.348:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7848 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2734.968544] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2734.983148] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2734.985827] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2734.991077] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2735.006108] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2735.010104] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2735.026234] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2735.034774] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:43 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000015008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2735.103215] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2735.110075] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2735.120986] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2735.134683] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2735.137865] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2735.141927] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2735.163718] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:43 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000016008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2735.203939] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2735.212470] net_ratelimit: 26 callbacks suppressed [ 2735.212478] protocol 88fb is buggy, dev hsr_slave_0 [ 2735.222596] protocol 88fb is buggy, dev hsr_slave_1 [ 2735.227719] protocol 88fb is buggy, dev hsr_slave_0 [ 2735.230208] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2735.232848] protocol 88fb is buggy, dev hsr_slave_1 [ 2735.249438] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2735.262549] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2735.262682] binder: release 7815:7820 transaction 311 out, still active [ 2735.270515] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2735.284947] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2735.290557] binder: undelivered TRANSACTION_COMPLETE [ 2735.297922] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2735.301612] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2735.311528] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2735.329146] binder: send failed reply for transaction 311, target dead 18:13:43 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000017008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:43 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000006c000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2735.366794] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2735.392855] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:13:43 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2735.414383] binder: 7869:7870 ioctl c018620b 0 returned -14 [ 2735.420712] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2735.440853] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2735.452452] protocol 88fb is buggy, dev hsr_slave_0 [ 2735.457608] protocol 88fb is buggy, dev hsr_slave_1 18:13:43 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x242000, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @initdev, @multicast2}, &(0x7f0000000600)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@bridge_delneigh={0x64, 0x1d, 0x10, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x0, r2, 0x8, 0x1, 0xe}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_LLADDR={0xc, 0x2, @local}, @NDA_IFINDEX={0x8, 0x8, r3}, @NDA_PORT={0x8, 0x6, 0x4e22}, @NDA_MASTER={0x8, 0x9, 0x6}, @NDA_PORT={0x8, 0x6, 0x4e24}, @NDA_VNI={0x8, 0x7, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x800, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="10010000", @ANYRES16=r5, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r6, &(0x7f0000000500)=""/175, 0x5d) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @empty}, 0x50, 0x0, 0x0, 0x0, 0x100000000, &(0x7f00000004c0)='bond0\x00', 0x8, 0x3, 0xa8}) exit(0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000480)={'sit0\x00', 0x1820}) setsockopt$inet_tcp_int(r6, 0x6, 0x1, &(0x7f0000000000)=0x1, 0x4) getdents64(r6, &(0x7f0000000080)=""/124, 0x7c) 18:13:43 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000018008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2735.490904] binder: 7869:7876 BC_INCREFS_DONE u0000000000000000 no match [ 2735.508372] binder: 7869:7876 Release 1 refcount change on invalid ref 1 ret -22 [ 2735.542646] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2735.549611] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2735.583062] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2735.589539] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2735.620022] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2735.627862] audit: type=1326 audit(1550254424.018:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7879 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2735.634708] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:13:44 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000019008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2735.673511] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2735.686282] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2735.697516] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2735.708381] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2735.720932] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2735.730565] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2735.759329] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2735.766906] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:44 executing program 5: seccomp(0x0, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2735.779154] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2735.789986] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2735.820564] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2735.828160] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2735.840316] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2735.864188] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:44 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0000001a008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2735.904674] audit: type=1326 audit(1550254424.298:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7898 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2735.911735] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2735.942432] protocol 88fb is buggy, dev hsr_slave_0 [ 2735.947676] protocol 88fb is buggy, dev hsr_slave_1 [ 2735.952856] protocol 88fb is buggy, dev hsr_slave_0 [ 2735.955462] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2735.957916] protocol 88fb is buggy, dev hsr_slave_1 [ 2735.965466] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2735.977741] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2736.022644] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2736.029260] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2736.047748] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2736.048112] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2736.060621] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2736.066139] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2736.072434] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2736.094228] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2736.097383] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2736.102435] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2736.118272] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2736.122274] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2736.162624] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2736.198428] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2736.207711] binder: release 7869:7876 transaction 313 out, still active [ 2736.217473] binder: undelivered TRANSACTION_COMPLETE [ 2736.237204] binder: send failed reply for transaction 313, target dead 18:13:44 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0000001b008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2736.247484] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2736.254867] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:44 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000074000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2736.296459] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2736.314782] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2736.337272] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:44 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2736.349227] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2736.357682] binder: 7912:7914 ioctl c018620b 0 returned -14 18:13:44 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0000001c008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2736.412724] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2736.419291] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2736.429850] binder: 7912:7918 BC_INCREFS_DONE node 316 has no pending increfs request [ 2736.469041] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2736.480923] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2736.497530] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:44 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0xffffffff, 0x12200) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f00000013c0)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000001400)=r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.opaque\x00', &(0x7f0000000280)=""/69, 0x45) r4 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x2, 0x1874b3e5, 0x70, 0x36e0, 0x0, 0x9, 0x200, 0x4, 0x5, 0x9, 0x9, 0x2, 0x6, 0x1, 0x1, 0x892f, 0x5, 0x9, 0x9, 0x8, 0x80000001, 0xf09, 0x100000001, 0x7, 0xfffffffffffff000, 0x101, 0x8, 0xbef1, 0x7037, 0x80000000, 0x12b01d06, 0x10000, 0xffffffff9e00fe85, 0x6bea, 0x7fffffff, 0x8ff, 0x0, 0xfffffffffffeffff, 0x4, @perf_config_ext={0xffffffffffffff0f, 0x7ff}, 0x2, 0xffffffffffffffff, 0x1ff, 0x3, 0x2, 0x8, 0x10001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80000, 0x0) r6 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x7, 0x208181) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x2000000000000004) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000400)=0x0) getpgrp(r9) gettid() gettid() ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000004c0)=0x0) r11 = syz_open_procfs(r10, &(0x7f00000007c0)='net/ip_vs_stats\x00') r12 = accept$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) ioctl$sock_inet6_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f00000003c0)={@empty, 0x1, r13}) getdents64(r11, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r11, &(0x7f0000000080)=""/124, 0x7c) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x100, 0x6, 0x0, 0x0, 0x0, 0x80, 0x20, 0xb, 0x6, 0x8000, 0x22, 0x0, 0x101, 0xffffffffffffff81, 0x46, 0x2, 0x1, 0x2, 0x200, 0x7fffffff, 0x5b1, 0x1, 0x2, 0x8, 0x400, 0x7, 0x3c, 0x4, 0x5, 0xff0, 0x3, 0x5, 0x5, 0x200, 0x0, 0x3f, 0x0, 0x20, 0x1, @perf_config_ext={0x30000000, 0x4}, 0xc000, 0x4, 0x100, 0x0, 0x9, 0xf4, 0x8a}, r9, 0x2, r6, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$netlink(r6, &(0x7f0000000780)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbff, 0x800000}, 0xc, &(0x7f0000000700)=[{&(0x7f0000000800)={0x1b4, 0x1a, 0x312, 0x70bd28, 0x25dfdbff, "", [@generic="2b0187f56a595061f75f1851411ed18288af5ebc9e43be2c1b10349e981cb0b99f2d1f318366456b996fb17626ca365bf22d5959a8f69b98f651b8ba3fea1d018178e984b461db38efda5e4366c1e15d2198204461e33b4f01aeb3cda743b7680f20842bfa8781d963f1d018613d022d8c28aa52005df313e6ea57f1d39bc532f77eef1b2d4b58c450c824e2fa8b77729a40ecd423eebfe8026b9ff15f22b7cf4866ddc6c15e5b6fe220db1eea0fb4fbf0f8dfdf9e68b57f3291", @generic="c1a60c53c986ebd06e9239e4731da07d34aa8519635aad125a9769675bef11fb56bd7cd3e4779782300f59c6419cb197ab15606c42f6e9114dda94fb1c771bffcae87ea8bd0c2b7afe12aa7f5cd13d74b87884152074016a1931ba0ad22a1547e65f7cc53ced7e6733a6cde9d9c4734979e7551305a9c5210bd5c388668b8d0a8cbdf49a48ddb41016f45fefc2b680c52692440d52285cc316a887a8a4038394a3e9636fc869254f22856db1378c8dfaf3ba522f9ab4537fca18549dcd33d955c1e8afa5f87ce4bd4ebdda584ba6dd0fb9d2abadba39c0dbf5b4bae6884897e8d24f", @typed={0x8, 0x4d, @str='\'\x00'}]}, 0x1b4}, {&(0x7f00000009c0)={0x220, 0x36, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x4, 0x68}, @nested={0x154, 0x9, [@generic="94124f8780a523e3c658946f6d687c725bebf32f15cfbf62ec2deae45384e316d4be669f3628506458965231ccefc33a383964b64428e29d7b6eb220f1eb75405d20389baf502d3edbba4cf1fb28b095fe5a31ed2d692a1a853523f18dd941401dba9f5cc6f8efadbce1d1c02e39dec9437207050ff1dc57cc31cff5adb5e0bd46954892b614779fe6c0f645a265267213ce8508690d4fa07de6d624a9abad5a804ecb37bac435b2c34e435aa38b1ddbdcff5225da59e6b32b1006e6c72dba5424973fee21b62ea39444cbae58ca2f", @generic="829356bce83f08c840b5505218c359058248bcee5b6815a143ca9f5d35e9d5a12a51708bac3b053995170c5e9f787fa787404092b80f95b23b0b1b0929b70f81e77375", @generic="4f6649f3912437c4d838b1b48e713fa182c74bd5f4077fd30fb39e0508eca783f6151634f3", @typed={0x4, 0x43}, @typed={0x8, 0x17, @pid=r9}, @typed={0xc, 0x7b, @u64}]}, @generic="3aae8214a3b0aaa18cebca34fcd18b17b787864f9e8203219c5bb49e6e43ae263af6deba96b2abe7cf827210d63d2b01e2ecae004cec3b0fdb397a415a1f9e9100c05f2913ed439087be194fdb4de76180b723b9b4623ccfb9d675e191cc0c5a71c8a64cf30204c93dd64897c86052422e9f38f169d1b6dc299a7795553ba80ba4475e0d590213d543f835497a998b870cdbe15185e89f2d650487ac16a5d1de0a4d33", @typed={0x14, 0x12, @str='/dev/ubi_ctrl\x00'}]}, 0x220}, {&(0x7f0000000c00)={0x468, 0x28, 0x2, 0x70bd26, 0x25dfdbfe, "", [@generic="2aa5dd50b476ab60c6369e5d0689273a86afa17474b28316b35e29e4a4f0202228a0e6726b06a2f23f4eef182a81ed2d3b39afc32a006e6da50783de9eae1d46063a3f7fb90f6de9b4dad8fa06e4811c66c9c04e51efc1eb06e3aae6be17c966bf602f2367981716564503d826ab3cbf02d266db96e046dfee7956652a606e9d33e8f9e0d11e7bfe86dae5323e449fea0f0a87c62ac32a2bbfc3531827850744d73e82ec18b75defdea9177b6924973fdc6ac578b4416dbdfad3df067ca6804eb9fee6566624962a4413c64888074778a41d25a963e8da3377604286e091158d92ded28b322ee472a68819", @generic="e4648ca2ee0cda839077d44b24f4f3a26bd911c536bc09b6be9e6f2a0c91faabb110b5c90313398918d6b136c14a990bc2bd52930d40ecf3590b57f3f1e1f43aa25b2d44aa102a7b878966b58e7e3e79e83721cc5de78803391f223378c2802176691cfa41be53c9c20ceebcc6807dfdfa9851593cbb6555aee6202aba0cadd0b0d89614fca0b20a50e6604b8cbe6dc0760807498a0b5f105638930db6185686825559cf8b348e53331eaf307b721e08789cbc9a213e4db113c8adc3e5ef74db2376888565bce3f672f3a28a91e6fddc346d7d086ca8646342b9aa35e3bb3ff6", @generic="578fe617c54ea91787a34e07a15622c68b7ea56086a28f95b32ffb5d5672a65a9e384354d97bd875ab52573ae178acc4dfe41dab1375f9498b274d8e6b37c015bad0db0467c317a083ff508a30f42ba941510fef1bdb9ebe5163274f20b7d8622372188d1facc06e8ce83d818c", @nested={0x220, 0x7e, [@generic="72692821d7d65c1cc412baa0a42aa73d58c60dd24d0da00ef94bf635ff2988428c1acd0aa5378047f2cdb06de96c6145490e5efccdf2d9787d8667a754fd90345063b63f5bedb241b70db50bcd7efc3f16eb55c773cd888f984f4543fc3de7f8872b8257a024de667ce9722e0f9c19ac58a9a3073e42e2d6b7a9cc55fa0dc839a663b8913a9b363fe3e40289ab423033009a0d1cae941bc36638600592c4d583fdbae192a68c662c4d52a9698bb16252e9cb5681659b4ae5dc8a51fbb2c85a818c26bc7bd12155178957995e18d06fcc2991a4f40fb9f1befb1137009a91082b66cb8757d1a89949cfebb4f8ca4e52fe01", @generic="65ae4ab735afa5477192524988f0811e65f0a58f6e178927ec9791c815675dcb8cb1e82152811b715e429ad14aeac1b8835ec36a110d85804dd5dbbf04d7b3d9cc6289145532baa4c7f4c354362b03989f291f1d228db0e22ede6346c3cea23027920f7f9e9e96b845eda02fb8d86c773edde983d157a20e05082ba4bf08a97f51387638a3384fc8dcf5bc4466655674b816d8f6d3585cd7a5e06e13c564d1780842a280caee4313dfe4d53dea19f0939e03edeb4f9ac7b4", @generic="06ff6fd8ea0a4348014e8c9f5a7c545f2537d93f32a4db23d04b986e486da66ae413732498af3f9e5d8332bcfca0d27ba4b0e4d19bddea26494ee228fc4e43a990cfb5d329aef46f25c8744c3a9a59e4052efc359b2b0c08e8f079037fc24908fd9cdf2b639611b584738bc39c9ce6e01cf062"]}]}, 0x468}, {&(0x7f0000001080)={0x248, 0x15, 0x220, 0x70bd28, 0x7f, "", [@generic="866dc0da508763503d74ac8fb18ca92accc7e9d09fabcfd6b0ecf07a0683aed391593f3ae3ec2bf9f5c5abb984dfebe3cec78ca1388e4ab8be8c124fb7d27f680554a539343e3a0653c5622466928f567d3affb1d43615be777ca32c66ba83598e7ffa1192db24ec293fe064602792853a94dec3f21fa9fb3181c6780ee8a9c5eac1baaef69600b8cedbe07d7487b2da7917ed695535df1047cb055e34e67f814186bb673fd1067b3fbd007f2f", @typed={0x8, 0x7b, @ipv4=@multicast2}, @typed={0x4, 0x82}, @nested={0x14, 0x7d, [@typed={0x8, 0x13, @uid=r8}, @typed={0x8, 0x53, @fd=r11}]}, @nested={0x168, 0x32, [@generic="3da14ae859f2469a47f7d6f07019c6eeaeea9505", @typed={0x4, 0x82}, @typed={0x8, 0x1, @fd=r5}, @typed={0x8, 0x61, @pid=r7}, @generic="7e2e174849fdf05348da77134e4e907265dfb141e6d59bc0f86c2ef8927132565e024d86afb1e32e1d2e8f387cd98d1aaccabf753a22f824383ffe320bdcc495b61f414aab63dddda3e3cc1dc46804db0118b185204dfd3a8997a4b3da661d255099944c7e8533d5ef934ac349a57518430da1d7664970859a9b4c140ef0942f509f821ce4fd284863206b352ac615239b52bdfd156f4817cb5a2b4b22e4a710b722765a463c7de189e25bb301df0849f10b3c2348ac", @typed={0x84, 0x11, @binary="2f33f0a93e59a4dc267d62bece70ffbb82a13a096cbf4b3cabb420d3b419923b020f988bc34d735faa777c74a16dcb6c22282335da8fa306f28bbc484d634733d6bbc8f291982fd92f0014609a8f1157a82cdd1f4d051eedf4a4c60b40717ab746f68477ee6d425c9a48f49148d0e5dfe60f8ef6b17c78cdfebdd95f0e2dc5"}]}]}, 0x248}, {&(0x7f0000000640)={0xa8, 0x2b, 0x204, 0x70bd25, 0x25dfdbfc, "", [@nested={0x98, 0x1b, [@typed={0xc, 0x79, @u64=0x3}, @generic="c4ca5f82c1221845a9c82430f5c96a962c76700037307594b1c714a21e92060c554015305c48dc9caa3b67c3003003c6c2f02c03f0c0888e2ba92934bf546b4ade183bc349ab0da826f1bba58a322cff485db564ef20effe5e2c9e36c0088c97e8a129641822463537b55bc5e331291397b1cca1859e0fd639858a6f368ee815f2944809c5c626"]}]}, 0xa8}, {&(0x7f0000000480)={0x10, 0x2b, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}], 0x6, &(0x7f0000001300)=[@rights={0x18, 0x1, 0x1, [r4, r6]}, @rights={0x20, 0x1, 0x1, [r5, r12, r2, r4]}, @rights={0x20, 0x1, 0x1, [r11, r5, r5]}], 0x58, 0x40000}, 0x4000000) [ 2736.508358] audit: type=1326 audit(1550254424.898:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7923 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2736.522650] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2736.552869] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2736.577158] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2736.590013] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2736.608118] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2736.620990] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2736.628174] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2736.646179] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:13:45 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0000001d008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2736.680786] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2736.696655] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2736.716969] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:45 executing program 5: seccomp(0x1, 0x0, 0x0) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2736.725104] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2736.732130] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2736.732164] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2736.767824] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2736.776783] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:45 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0000001e008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2736.813215] audit: type=1326 audit(1550254425.208:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7941 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2736.816198] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2736.893218] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2736.899870] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2736.912925] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2736.931618] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2736.947371] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2736.955019] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2736.972162] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2736.989189] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:45 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0000001f008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2737.005999] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2737.016703] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2737.026141] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2737.034556] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2737.042193] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2737.054135] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:45 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000007a000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2737.098159] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2737.107402] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:45 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000020008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2737.151087] binder: release 7912:7918 transaction 315 out, still active [ 2737.160800] binder: undelivered TRANSACTION_COMPLETE [ 2737.181049] binder: send failed reply for transaction 315, target dead [ 2737.193741] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2737.200253] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2737.238049] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2737.248312] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2737.264547] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2737.280739] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2737.297647] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:45 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:45 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000021008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2737.321968] binder: 7963:7965 ioctl c018620b 0 returned -14 [ 2737.354474] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2737.368439] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2737.382202] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2737.390216] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2737.396950] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2737.407111] binder: 7963:7967 BC_INCREFS_DONE node 320 has no pending increfs request [ 2737.415901] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2737.427081] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2737.435522] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2737.446244] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:45 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000022008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:45 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) write$tun(r1, &(0x7f00000001c0)={@val={0x0, 0x15}, @val={0x2, 0x5, 0x5, 0xcd, 0x82, 0x42d7}, @ipv4={{0xb, 0x4, 0xff2, 0x6, 0xad, 0x68, 0x101, 0x3, 0x2f, 0x0, @loopback, @multicast2, {[@generic={0x1, 0xe, "843fe3d3b0489656314d93cb"}, @noop, @lsrr={0x83, 0x7, 0x2, [@dev={0xac, 0x14, 0x14, 0x12}]}]}}, @igmp={0x11, 0x8, 0x0, @remote, "27d22801ef2d5a23e9db5b020c26aa3f6aa5d84bdf95427a20ecd3b607ca3380dc6edd54952ee6aa436e0a7b8c3349f6b29f149c413ab2fac4f25faf3bb08b7f1139c3b3348c9f78a848e93d337ab167604d7c87d14e4a0bc2170a022f32e01f3c517a53e83e48e581e20432ff3836cc6999118eed564e5328"}}}, 0xbb) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) exit(0xfffffffffffffff7) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) [ 2737.460427] audit: type=1326 audit(1550254425.848:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7969 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2737.461927] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2737.496730] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2737.552747] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2737.559502] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2737.577449] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2737.589619] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2737.596513] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2737.597609] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2737.619857] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:46 executing program 5: seccomp(0x1, 0x0, 0x0) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2737.643891] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2737.650634] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2737.655479] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2737.666864] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:46 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000023008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2737.689522] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2737.691982] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2737.710112] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2737.714944] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2737.728687] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2737.736974] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2737.746006] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2737.756238] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2737.770755] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2737.797966] audit: type=1326 audit(1550254426.188:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7986 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 18:13:46 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000ffffff8c000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:46 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000024008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2737.922747] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2737.929393] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2737.940250] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2737.953798] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:46 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000025008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2737.990176] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2738.002746] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2738.050674] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2738.058811] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2738.067458] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2738.075310] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2738.083504] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2738.091397] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2738.098256] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2738.100508] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2738.109024] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2738.133100] binder: release 7963:7967 transaction 319 out, still active [ 2738.140604] binder: undelivered TRANSACTION_COMPLETE 18:13:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:46 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000026008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2738.149841] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2738.164639] binder: send failed reply for transaction 319, target dead [ 2738.223088] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2738.229687] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2738.240629] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2738.254729] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:13:46 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:46 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000edc0000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2738.290022] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2738.302500] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2738.305497] binder: 8010:8016 ioctl c018620b 0 returned -14 [ 2738.314882] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2738.326507] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:46 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000027008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2738.377123] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2738.395065] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2738.419001] binder: 8010:8023 BC_INCREFS_DONE node 324 has no pending increfs request 18:13:46 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2738.442729] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2738.449243] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2738.466660] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2738.484781] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:46 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) [ 2738.526057] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2738.527263] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2738.541667] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2738.548006] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:47 executing program 5: seccomp(0x1, 0x0, 0x0) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:47 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000028008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2738.607219] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2738.627698] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:47 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2738.652619] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2738.659503] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2738.665310] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2738.679253] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2738.688239] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2738.696699] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2738.705350] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2738.714625] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2738.729114] kauditd_printk_skb: 4 callbacks suppressed [ 2738.729127] audit: type=1326 audit(1550254427.118:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8036 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2738.739223] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2738.768378] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2738.786702] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2738.792104] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2738.799130] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2738.801931] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2738.838354] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2738.845318] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2738.857949] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2738.859210] audit: type=1326 audit(1550254427.248:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8047 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2738.874722] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2738.894420] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2738.901833] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:47 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000029008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:47 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x0, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2738.909348] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2738.918631] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2738.921221] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2738.926102] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2738.943300] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2738.947942] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2738.952782] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2738.960694] audit: type=1326 audit(1550254427.288:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8047 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2738.985864] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2739.003098] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2739.010351] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:47 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0000002a008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:47 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000001020f5f2000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2739.106645] binder: release 8010:8023 transaction 323 out, still active 18:13:47 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x0, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2739.152937] binder: undelivered TRANSACTION_COMPLETE [ 2739.160039] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2739.163392] binder: send failed reply for transaction 323, target dead [ 2739.175595] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2739.203083] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2739.209716] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2739.222779] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2739.229236] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:13:47 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000060008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2739.278115] binder: 8066:8068 ioctl c018620b 0 returned -14 [ 2739.280867] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2739.301042] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:47 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x0, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2739.348386] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2739.358515] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2739.380401] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2739.390235] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2739.398204] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2739.417614] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2739.433240] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2739.467493] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2739.488312] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2739.498154] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2739.510458] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:47 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:47 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x1000000000000) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) 18:13:47 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00003065008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:47 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2739.520331] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2739.535210] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2739.547661] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2739.602927] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2739.609409] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2739.633075] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2739.649254] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2739.662937] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2739.670014] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2739.682801] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2739.691516] audit: type=1326 audit(1550254428.078:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8087 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2739.691557] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2739.728205] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2739.735367] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2739.737025] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2739.745762] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2739.757947] audit: type=1326 audit(1550254428.128:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8090 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2739.779888] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:48 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00005865008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2739.801061] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2739.807803] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2739.811540] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2739.914622] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2739.921838] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2739.936132] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2739.946876] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2739.957536] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:48 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000081008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2739.968050] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2740.023184] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2740.032321] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:48 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000fffffff6000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:48 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017bffffa888008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2740.073076] binder: release 8066:8076 transaction 327 out, still active [ 2740.101063] binder: send failed reply for transaction 327, target dead [ 2740.142546] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2740.149370] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2740.164188] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2740.181096] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2740.212205] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2740.215028] binder: 8113:8116 ioctl c018620b 0 returned -14 [ 2740.227735] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2740.231150] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2740.240131] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2740.271056] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2740.272854] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2740.280545] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2740.292916] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2740.300045] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2740.310616] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:48 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017bffffff9e008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2740.322670] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2740.343475] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2740.365018] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2740.379293] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2740.385899] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2740.395002] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:48 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000ec0008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2740.423865] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2740.442517] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2740.466959] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:48 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2740.474326] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2740.497808] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2740.513214] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2740.522129] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2740.546020] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:48 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2740.571433] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2740.581769] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2740.587961] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2740.600848] audit: type=1326 audit(1550254428.988:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8134 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2740.607072] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2740.629798] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2740.638300] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2740.645865] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2740.649006] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:49 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) write$capi20_data(r1, &(0x7f0000000100)={{0x10, 0x175a, 0x8, 0x80, 0x7, 0xffffffffffffffff}, 0xbf, "746be7c470d02581db76c88b1b5862f6e2ac69dfd21fb7de23616fe62a114eef7746ad36f3317886ffc738af36e6bad17c85672549f075a25b3311c3c76c8eb89ea0578d68435715f367c4cbbdcec03602528552f96f6059b36111f7d740dd2489cf0236a829b869ea97687a4ffd71ec869fe8b763b605a2c1527d0fc482bfa46abba3750b3f6305235cc533d73f7488cecab089c8adbdd0ffbc9ce128b5f68e8987ba58af7c88302426e206460a3656b8c160993b10d583a6dd2e48ba162d"}, 0xd1) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) 18:13:49 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017bfffffff0008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2740.692989] audit: type=1326 audit(1550254429.088:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8139 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2740.713141] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2740.720783] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:13:49 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000fff000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2740.748203] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2740.780502] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2740.798157] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2740.812836] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:13:49 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b000000ff008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2740.882953] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2740.889737] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2740.900984] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2740.908742] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2740.936115] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2740.947418] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2740.957303] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2740.964023] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2741.012522] binder: release 8113:8121 transaction 331 out, still active [ 2741.023555] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2741.030619] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:49 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b88a8ffff008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2741.062120] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2741.070900] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2741.071052] binder: send failed reply for transaction 331, target dead [ 2741.084331] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2741.095992] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2741.107471] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2741.117702] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2741.125742] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2741.132193] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2741.153109] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2741.159701] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2741.177439] binder: 8163:8167 ioctl c018620b 0 returned -14 [ 2741.184923] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2741.192500] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:49 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00f0ffff008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2741.252112] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2741.260501] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2741.286531] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2741.294091] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2741.294888] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2741.322152] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2741.335932] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:49 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:49 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b9effffff008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2741.352649] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2741.360447] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2741.368032] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2741.377149] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2741.392929] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:49 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007fffffff000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2741.452191] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2741.458774] net_ratelimit: 26 callbacks suppressed [ 2741.458783] protocol 88fb is buggy, dev hsr_slave_0 [ 2741.458843] protocol 88fb is buggy, dev hsr_slave_1 [ 2741.458950] protocol 88fb is buggy, dev hsr_slave_0 [ 2741.459001] protocol 88fb is buggy, dev hsr_slave_1 [ 2741.485049] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:49 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2741.496477] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2741.509011] audit: type=1326 audit(1550254429.898:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8178 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2741.534524] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:49 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017bf0ffffff008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2741.572597] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2741.579098] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2741.606168] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2741.637020] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2741.647370] audit: type=1326 audit(1550254430.038:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8185 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 18:13:50 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000100)=""/77, 0x4d) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) [ 2741.690293] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2741.692461] protocol 88fb is buggy, dev hsr_slave_0 [ 2741.699909] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2741.701890] protocol 88fb is buggy, dev hsr_slave_1 [ 2741.744290] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2741.752782] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2741.759397] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2741.765473] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2741.799842] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2741.807643] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2741.836283] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2741.855599] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2741.863873] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2741.871907] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2741.893470] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:50 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00020000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2741.902147] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2741.928514] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2741.935383] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2741.958108] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2741.965242] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2741.969122] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2741.982856] binder: release 8163:8171 transaction 335 out, still active [ 2742.004069] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:50 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00030000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2742.035497] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2742.044119] binder: send failed reply for transaction 335, target dead [ 2742.058284] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2742.072591] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2742.081462] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2742.089604] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2742.097485] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2742.105857] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2742.112320] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:13:50 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000008cffffff000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2742.148489] binder: 8210:8212 ioctl c018620b 0 returned -14 [ 2742.165202] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2742.171666] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2742.181269] protocol 88fb is buggy, dev hsr_slave_0 [ 2742.181329] protocol 88fb is buggy, dev hsr_slave_1 [ 2742.181441] protocol 88fb is buggy, dev hsr_slave_0 [ 2742.181498] protocol 88fb is buggy, dev hsr_slave_1 18:13:50 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00040000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2742.223598] binder: 8210:8216 ioctl c0306201 0 returned -14 18:13:50 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, 0x0) [ 2742.273421] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2742.279878] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2742.290886] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2742.305613] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:50 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00050000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2742.367789] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2742.377974] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2742.401009] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2742.418293] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2742.435331] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:50 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:50 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00060000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:50 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, 0x0) [ 2742.488353] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2742.495180] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2742.511968] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2742.529583] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2742.538999] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2742.553620] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2742.569862] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2742.579499] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2742.593354] audit: type=1326 audit(1550254430.978:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8234 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2742.605149] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2742.623848] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:51 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') keyctl$set_reqkey_keyring(0xe, 0x7) getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) 18:13:51 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, 0x0) 18:13:51 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00070000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2742.635888] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2742.655807] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2742.675065] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2742.733240] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2742.740748] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2742.770292] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2742.793674] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2742.808094] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2742.815854] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2742.826812] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2742.846673] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2742.865400] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2742.873335] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2742.903147] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2742.922420] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:51 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x0, 0x0}) 18:13:51 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000f6ffffff000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:51 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00080000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2742.948736] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2742.952613] binder: release 8210:8216 transaction 339 out, still active [ 2742.957321] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2742.989120] binder: send failed reply for transaction 339, target dead [ 2743.005048] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2743.011581] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:51 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x0, 0x0}) [ 2743.054647] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2743.064869] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2743.114446] binder: 8264:8267 ioctl c018620b 0 returned -14 [ 2743.128110] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2743.148338] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2743.152238] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2743.164934] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2743.175753] binder: 8264:8275 ioctl c0306201 0 returned -14 [ 2743.199000] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:51 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x0, 0x0}) [ 2743.221881] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2743.243087] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2743.251944] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2743.261257] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2743.267081] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2743.276037] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2743.284160] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2743.287964] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2743.291967] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2743.353852] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2743.360319] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2743.378446] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2743.392508] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:51 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:51 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00090000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:51 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) [ 2743.408877] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2743.419659] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2743.494657] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2743.507703] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2743.547041] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2743.557092] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2743.571834] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2743.584058] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2743.594680] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2743.601672] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2743.630240] kobject: 'loop3' (0000000077381589): kobject_uevent_env 18:13:52 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getdents64(0xffffffffffffffff, &(0x7f0000000500)=""/175, 0x5d) exit(0x20000008) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/124, 0x7c) 18:13:52 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000020000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:52 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b000a0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2743.640942] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2743.699103] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2743.706603] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2743.732746] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2743.739193] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2743.766051] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2743.788279] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2743.798158] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2743.805598] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2743.813691] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2743.817961] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2743.820129] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2743.837137] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2743.845068] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2743.852690] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:52 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) 18:13:52 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b000b0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2743.892693] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2743.899408] binder: release 8264:8275 transaction 343 out, still active [ 2743.903282] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2743.918088] binder: send failed reply for transaction 343, target dead 18:13:52 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) [ 2743.952856] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2743.982833] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2743.998395] kobject: 'loop2' (000000004811331c): kobject_uevent_env 18:13:52 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000030000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2744.024698] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2744.062058] kobject: 'loop3' (0000000077381589): kobject_uevent_env 18:13:52 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b000c0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2744.072510] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2744.075992] binder: 8318:8320 ioctl c018620b 0 returned -14 [ 2744.162773] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2744.170425] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2744.181386] binder: 8318:8326 ioctl c0306201 0 returned -14 [ 2744.183253] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2744.194013] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2744.206757] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2744.224879] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2744.230179] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2744.245871] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2744.264909] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2744.288802] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2744.313541] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2744.322005] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2744.330641] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:52 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{}]}) 18:13:52 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:52 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b000d0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2744.338659] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2744.382809] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2744.389602] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2744.406751] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2744.423688] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2744.435454] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2744.442212] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2744.442300] kauditd_printk_skb: 1 callbacks suppressed [ 2744.442321] audit: type=1326 audit(1550254432.828:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8339 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2744.457775] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2744.488404] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2744.525595] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2744.545895] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2744.594685] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2744.601258] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2744.633295] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:53 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{}]}) 18:13:53 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000040000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:53 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b000e0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:53 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$dupfd(r0, 0x406, r0) getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) [ 2744.640171] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:53 executing program 3: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{}]}) [ 2744.712139] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2744.724160] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2744.747766] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2744.763867] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2744.802763] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2744.809652] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2744.821070] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2744.837246] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2744.842324] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2744.851437] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2744.856326] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2744.870759] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2744.874332] binder: release 8318:8320 transaction 347 out, still active [ 2744.900364] binder: undelivered TRANSACTION_COMPLETE [ 2744.904253] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2744.919142] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2744.929094] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2744.946246] binder: send failed reply for transaction 347, target dead [ 2744.949487] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2744.963012] kobject: 'loop3' (0000000077381589): kobject_uevent_env 18:13:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:53 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b000f0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:53 executing program 3: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00070000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2744.972727] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:13:53 executing program 3: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00070000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2745.032959] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2745.040324] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:53 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00100000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2745.076307] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2745.091288] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2745.091302] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2745.120401] binder: 8378:8382 ioctl c018620b 0 returned -14 [ 2745.123484] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2745.141318] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2745.178641] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2745.201146] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:53 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:53 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00110000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:53 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000050000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:53 executing program 3: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000060008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2745.236824] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2745.267246] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2745.277885] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2745.321040] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2745.336189] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2745.356922] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2745.361697] audit: type=1326 audit(1550254433.748:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8393 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2745.372274] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2745.414090] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:53 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00120000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2745.461023] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2745.521416] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2745.529453] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2745.537475] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2745.544133] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2745.553882] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2745.561001] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2745.574397] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2745.581947] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2745.600530] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:54 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000000)={0xb64f, 0x1f, 0xfffffffffffffffd, 0x0, 0x1, 0x3f}) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) 18:13:54 executing program 3: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000023008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2745.631081] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2745.662557] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2745.674551] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2745.684358] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2745.691233] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2745.762694] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2745.773232] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2745.792014] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2745.798987] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2745.811919] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2745.822615] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2745.834709] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2745.849738] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2745.858687] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2745.866513] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2745.878601] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2745.892513] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2745.900122] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:54 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00130000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2745.915605] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2745.917808] binder: release 8378:8387 transaction 351 out, still active [ 2745.932627] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2745.939942] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2745.941899] binder: send failed reply for transaction 351, target dead 18:13:54 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000060000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:54 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00140000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2745.991860] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2746.005115] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2746.025651] binder: 8425:8429 ioctl c018620b 0 returned -14 [ 2746.034596] binder: 8427:8431 ioctl c018620b 0 returned -14 [ 2746.082531] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2746.088752] binder: 8425:8433 BC_INCREFS_DONE node 356 has no pending increfs request [ 2746.089245] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2746.103398] binder: BINDER_SET_CONTEXT_MGR already set [ 2746.112312] binder: 8427:8434 ioctl 40046207 0 returned -16 18:13:54 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2746.121566] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2746.142771] binder: 8427:8434 Release 1 refcount change on invalid ref 1 ret -22 [ 2746.163340] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:54 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00150000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2746.212594] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2746.220527] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2746.243511] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2746.256866] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2746.269205] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2746.277152] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2746.286630] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2746.292601] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2746.295787] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2746.307738] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2746.319424] audit: type=1326 audit(1550254434.708:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8445 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2746.340763] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2746.340774] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2746.340787] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2746.340797] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2746.403175] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:13:54 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00160000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2746.415365] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2746.458043] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2746.466882] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2746.487653] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2746.501030] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2746.511627] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2746.522159] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2746.532622] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2746.548900] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:54 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') getsockname$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x100000001) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) exit(0x200000000000002) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x4000800) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) [ 2746.557509] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:55 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00170000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2746.592409] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2746.600033] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2746.618431] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:55 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000070000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2746.702898] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2746.709346] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2746.726818] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2746.734677] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:55 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00180000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2746.804420] binder: release 8425:8433 transaction 355 out, still active [ 2746.811496] binder: undelivered TRANSACTION_COMPLETE [ 2746.822105] binder: send failed reply for transaction 355, target dead [ 2746.822662] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2746.830474] binder: send failed reply for transaction 358 to 8427:8434 [ 2746.838095] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2746.854451] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2746.862650] binder: undelivered TRANSACTION_ERROR: 29189 [ 2746.873091] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2746.885756] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2746.897500] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2746.921937] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2746.931511] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2746.963059] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2746.979749] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2746.998161] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:55 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00190000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2747.009620] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2747.021623] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2747.036414] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2747.049895] binder: 8478:8480 ioctl c018620b 0 returned -14 [ 2747.050656] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2747.067079] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2747.079212] binder: 8479:8483 ioctl c018620b 0 returned -14 [ 2747.090927] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2747.097791] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2747.105132] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:55 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2747.123358] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2747.146162] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2747.153546] binder: BINDER_SET_CONTEXT_MGR already set [ 2747.171298] binder: 8478:8488 ioctl 40046207 0 returned -16 [ 2747.191221] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2747.199614] binder: 8478:8488 BC_INCREFS_DONE node 366 has no pending increfs request [ 2747.208743] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2747.211422] binder: 8478:8488 Release 1 refcount change on invalid ref 1 ret -22 18:13:55 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b001a0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2747.225261] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2747.235423] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2747.245035] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2747.283567] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2747.290193] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2747.301220] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2747.325382] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2747.339850] audit: type=1326 audit(1550254435.728:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8493 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2747.343651] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2747.368657] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:55 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b001b0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2747.403228] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2747.424534] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2747.432121] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2747.440105] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2747.447804] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2747.455204] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:55 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000000a0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2747.518074] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2747.526617] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:55 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b001c0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8001) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) write$eventfd(r1, &(0x7f0000000000)=0x6, 0x8) exit(0x0) getdents64(r1, &(0x7f0000000080)=""/124, 0x7c) [ 2747.642586] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2747.649068] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2747.669821] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2747.683878] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2747.702436] net_ratelimit: 26 callbacks suppressed [ 2747.702444] protocol 88fb is buggy, dev hsr_slave_0 [ 2747.712589] protocol 88fb is buggy, dev hsr_slave_1 [ 2747.714596] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2747.717706] protocol 88fb is buggy, dev hsr_slave_0 [ 2747.729207] protocol 88fb is buggy, dev hsr_slave_1 [ 2747.734464] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2747.746897] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2747.753951] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2747.809490] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2747.820922] binder: release 8478:8488 transaction 365 out, still active [ 2747.845815] binder: unexpected work type, 4, not freed [ 2747.850732] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:13:56 executing program 3: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00400300008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2747.862533] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2747.873838] binder: undelivered TRANSACTION_COMPLETE [ 2747.887279] binder: release 8479:8486 transaction 362 out, still active 18:13:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2747.915402] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2747.916436] binder: send failed reply for transaction 362, target dead [ 2747.932435] protocol 88fb is buggy, dev hsr_slave_0 [ 2747.937629] protocol 88fb is buggy, dev hsr_slave_1 [ 2747.951441] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2747.953658] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2747.965061] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2747.981733] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2747.990083] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2748.006247] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:56 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b001d0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:56 executing program 3: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00ff0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2748.009984] binder: send failed reply for transaction 365, target dead [ 2748.062757] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2748.069248] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2748.095869] kobject: 'loop2' (000000004811331c): kobject_uevent_env 18:13:56 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2748.125910] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2748.127655] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2748.145936] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2748.153844] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:13:56 executing program 3: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00140000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2748.172605] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2748.196783] binder: 8527:8531 ioctl c018620b 0 returned -14 18:13:56 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000100000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2748.226601] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2748.235830] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2748.246283] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2748.254254] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2748.265912] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env 18:13:56 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b001e0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2748.291477] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2748.304133] audit: type=1326 audit(1550254436.698:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8536 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2748.321086] kobject: 'loop3' (0000000077381589): kobject_uevent_env 18:13:56 executing program 3: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00060000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2748.336162] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2748.383897] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2748.385224] audit: type=1326 audit(1550254436.738:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8536 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2748.412478] protocol 88fb is buggy, dev hsr_slave_0 [ 2748.417625] protocol 88fb is buggy, dev hsr_slave_1 [ 2748.419898] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2748.422791] protocol 88fb is buggy, dev hsr_slave_0 [ 2748.437295] protocol 88fb is buggy, dev hsr_slave_1 [ 2748.497792] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2748.506640] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:56 executing program 3: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b29000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:56 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00210000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2748.573940] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2748.580976] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2748.601084] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2748.613467] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:57 executing program 1: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b18000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2748.624692] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2748.634289] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2748.642962] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2748.650627] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2748.662906] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2748.669342] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2748.692808] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2748.710534] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:57 executing program 3: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b03000000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2748.735877] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2748.755814] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2748.768945] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2748.775812] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2748.782268] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2748.791864] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2748.831306] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2748.853875] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2748.858638] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2748.881794] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2748.890621] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2748.905702] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2748.919687] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2748.930142] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2748.940697] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2748.942111] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2748.963170] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2748.969020] binder: release 8527:8535 transaction 369 out, still active 18:13:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:13:57 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00220000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2748.982953] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2748.988211] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2749.011859] binder: send failed reply for transaction 369, target dead [ 2749.012807] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2749.062488] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2749.077481] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2749.078705] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:57 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2749.128591] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2749.176985] binder: 8582:8587 ioctl c018620b 0 returned -14 [ 2749.200413] audit: type=1804 audit(1550254437.588:234): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir848323752/syzkaller.GiCb5H/1124/file0" dev="sda1" ino=17441 res=1 18:13:57 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000140000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:57 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00230000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2749.232103] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2749.249763] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2749.298649] audit: type=1326 audit(1550254437.668:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8591 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2749.303993] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2749.336791] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2749.341218] audit: type=1326 audit(1550254437.718:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8591 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2749.370401] audit: type=1804 audit(1550254437.728:237): pid=8586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1427/file0" dev="sda1" ino=17473 res=1 18:13:57 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00240000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2749.423174] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2749.429947] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2749.469133] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2749.477806] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2749.501375] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2749.510493] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2749.541303] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2749.555067] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2749.563092] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2749.570646] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2749.579193] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:58 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00250000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2749.587207] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2749.602198] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2749.615229] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2749.672815] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2749.679454] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2749.692657] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2749.711396] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2749.726655] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2749.749883] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2749.817910] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2749.838683] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2749.856284] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2749.868183] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2749.888953] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:13:58 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00260000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2749.912104] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2749.922198] Process accounting resumed [ 2749.937419] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2749.950127] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2749.972806] binder: release 8582:8592 transaction 373 out, still active [ 2749.993187] binder: send failed reply for transaction 373, target dead [ 2749.998973] Process accounting resumed [ 2750.011097] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env 18:13:58 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000480000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2750.022884] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2750.045782] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2750.068360] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:58 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:58 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00270000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2750.098949] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2750.109090] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2750.122446] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2750.128905] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2750.136299] binder: 8620:8623 ioctl c018620b 0 returned -14 [ 2750.162011] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2750.186912] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2750.237630] audit: type=1804 audit(1550254438.628:238): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir848323752/syzkaller.GiCb5H/1125/file0" dev="sda1" ino=17482 res=1 [ 2750.268308] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2750.301216] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2750.317826] audit: type=1326 audit(1550254438.688:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8633 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 18:13:58 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00280000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2750.353526] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2750.373683] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2750.387071] audit: type=1326 audit(1550254438.688:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8633 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2750.422971] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2750.433362] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2750.435310] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2750.440592] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2750.442228] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2750.465506] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2750.478623] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2750.490052] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2750.500317] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2750.508480] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2750.553235] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2750.569055] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2750.584746] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2750.595988] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2750.605338] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2750.642010] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:59 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00290000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:13:59 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000004c0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2750.705916] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2750.728105] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:13:59 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b002a0000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2750.812553] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2750.819297] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2750.887331] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2750.902460] binder: release 8620:8632 transaction 377 out, still active [ 2750.904097] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2750.927678] Process accounting resumed 18:13:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:13:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:13:59 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00600000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2750.938887] binder: send failed reply for transaction 377, target dead [ 2750.970068] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2750.977967] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2750.986235] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2750.993147] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2750.993491] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2750.999732] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2751.013527] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2751.024179] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2751.040597] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2751.050530] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:13:59 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x0, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2751.088671] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2751.118217] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:13:59 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00f00000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2751.138495] binder: 8669:8674 ioctl c018620b 0 returned -14 [ 2751.140320] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2751.159835] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2751.171270] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2751.193937] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2751.200411] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2751.207126] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2751.230973] binder: 8669:8679 BC_INCREFS_DONE node 382 has no pending increfs request [ 2751.248228] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2751.257966] audit: type=1804 audit(1550254439.648:241): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir848323752/syzkaller.GiCb5H/1126/file0" dev="sda1" ino=16914 res=1 [ 2751.259735] kobject: 'loop3' (0000000077381589): kobject_uevent_env 18:13:59 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x0, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2751.297125] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2751.320371] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2751.350889] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2751.358828] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:13:59 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000600000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:13:59 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x0, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:13:59 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000300008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2751.553011] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2751.559459] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2751.572756] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2751.584793] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:14:00 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000500008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2751.619878] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2751.644593] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2751.656049] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:14:00 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2751.676129] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2751.711808] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2751.717302] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2751.729333] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2751.749644] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2751.764980] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2751.772794] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2751.782233] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2751.790210] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2751.800296] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2751.813985] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2751.830039] audit: type=1326 audit(1550254440.218:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8712 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2751.862778] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2751.869492] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2751.888962] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2751.896657] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2751.901521] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2751.921276] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2751.922651] binder: release 8669:8674 transaction 381 out, still active 18:14:00 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000600008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2751.963461] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2751.963932] binder: unexpected work type, 4, not freed [ 2751.979816] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2751.992049] Process accounting resumed [ 2751.998527] binder: undelivered TRANSACTION_COMPLETE [ 2752.004566] binder: send failed reply for transaction 381, target dead 18:14:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') 18:14:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2752.005795] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2752.019990] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2752.029362] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2752.041202] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2752.049002] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:14:00 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000700008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2752.057363] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2752.130315] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2752.141597] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:14:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:14:00 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000680000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:14:00 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000900008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2752.183816] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2752.196308] binder: 8727:8730 ioctl c018620b 0 returned -14 [ 2752.203096] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2752.214564] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2752.221360] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2752.272672] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2752.284883] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2752.301121] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2752.340213] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:14:00 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000a00008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2752.386225] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2752.404493] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2752.452194] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2752.462565] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2752.469219] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2752.496796] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2752.509938] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2752.533423] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2752.544459] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:14:00 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000b00008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2752.551965] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2752.562888] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2752.568136] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2752.569349] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2752.591021] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2752.613070] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2752.619528] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:14:01 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2752.663201] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2752.683931] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:01 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000c00008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2752.722905] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2752.732000] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2752.748824] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2752.758454] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2752.778977] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2752.800875] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:14:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2752.808841] audit: type=1326 audit(1550254441.198:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8764 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2752.820965] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2752.832136] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2752.849645] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2752.867029] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:14:01 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000d00008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2752.894701] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2752.898089] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2752.912023] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2752.928306] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2752.946431] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2752.962238] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2752.977610] audit: type=1804 audit(1550254441.368:244): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir848323752/syzkaller.GiCb5H/1129/file0" dev="sda1" ino=16916 res=1 [ 2752.980428] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2753.007676] binder: release 8727:8735 transaction 385 out, still active [ 2753.018508] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:14:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2753.042848] binder: send failed reply for transaction 385, target dead 18:14:01 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000006c0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2753.073135] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2753.094558] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2753.108234] Process accounting resumed [ 2753.134203] binder: 8780:8782 ioctl c018620b 0 returned -14 [ 2753.202480] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2753.208996] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2753.223381] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2753.229901] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') 18:14:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) acct(&(0x7f0000000140)='./file0\x00') 18:14:01 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000e00008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2753.270788] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2753.293155] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2753.294268] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2753.303710] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2753.323160] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2753.324979] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2753.366518] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2753.378442] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2753.406237] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:14:01 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00c00e00008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2753.422523] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2753.445987] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2753.461191] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:14:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2753.493287] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2753.501396] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2753.509486] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2753.516844] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2753.530480] audit: type=1804 audit(1550254441.918:245): pid=8800 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1431/file0" dev="sda1" ino=16918 res=1 [ 2753.582814] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:14:02 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2753.589472] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2753.613164] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2753.623276] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2753.629938] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2753.646277] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2753.648069] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2753.685932] Process accounting resumed [ 2753.718722] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2753.725490] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2753.740328] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2753.747692] audit: type=1326 audit(1550254442.138:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8805 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2753.748834] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2753.794810] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2753.803162] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:14:02 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000f00008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2753.814551] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2753.825178] audit: type=1804 audit(1550254442.218:247): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir848323752/syzkaller.GiCb5H/1131/file0" dev="sda1" ino=17476 res=1 [ 2753.828677] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2753.857876] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2753.860494] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2753.867385] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2753.877940] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2753.889877] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2753.902982] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2753.912169] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2753.932501] net_ratelimit: 26 callbacks suppressed [ 2753.932509] protocol 88fb is buggy, dev hsr_slave_0 [ 2753.942606] protocol 88fb is buggy, dev hsr_slave_1 [ 2753.944925] binder: release 8780:8783 transaction 389 out, still active [ 2753.947788] protocol 88fb is buggy, dev hsr_slave_0 [ 2753.959536] protocol 88fb is buggy, dev hsr_slave_1 18:14:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 18:14:02 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000740000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2754.001072] binder: send failed reply for transaction 389, target dead [ 2754.071232] Process accounting resumed 18:14:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') 18:14:02 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00001100008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2754.096048] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2754.106045] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2754.143602] binder: 8823:8825 ioctl c018620b 0 returned -14 [ 2754.172456] protocol 88fb is buggy, dev hsr_slave_0 [ 2754.177951] protocol 88fb is buggy, dev hsr_slave_1 [ 2754.183487] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2754.189933] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2754.200845] binder: 8823:8826 ioctl c0306201 0 returned -14 [ 2754.207344] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2754.216274] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2754.270800] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2754.280534] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2754.287434] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2754.320759] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2754.325538] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2754.338185] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2754.346841] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2754.354920] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:14:02 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00001200008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2754.369171] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2754.398474] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2754.410212] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2754.430978] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:14:02 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00001300008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:14:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') [ 2754.444178] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2754.457555] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:14:02 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, 0x0) [ 2754.523323] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2754.529943] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2754.570263] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2754.583038] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2754.595119] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2754.601745] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2754.624962] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2754.631644] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2754.636984] Process accounting resumed [ 2754.662411] protocol 88fb is buggy, dev hsr_slave_0 [ 2754.667760] protocol 88fb is buggy, dev hsr_slave_1 18:14:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:14:03 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, 0x0) [ 2754.672928] protocol 88fb is buggy, dev hsr_slave_0 [ 2754.677999] protocol 88fb is buggy, dev hsr_slave_1 18:14:03 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00001400008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:14:03 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000007a0000000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2754.821730] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2754.837437] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2754.857415] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2754.866410] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2754.872506] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2754.894768] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2754.899068] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2754.940242] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2754.942626] binder: release 8823:8826 transaction 393 out, still active 18:14:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 18:14:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') 18:14:03 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, 0x0) 18:14:03 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00001500008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2754.995904] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2755.010018] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2755.011931] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2755.017397] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2755.029119] binder: send failed reply for transaction 393, target dead [ 2755.059828] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2755.070794] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2755.081539] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2755.082513] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:14:03 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x0, 0x0}) [ 2755.136213] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2755.140473] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2755.171451] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2755.182833] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2755.200864] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:14:03 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00001600008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2755.234167] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2755.242234] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2755.255544] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2755.255854] binder: 8879:8884 ioctl c018620b 0 returned -14 [ 2755.267294] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2755.326738] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2755.348407] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2755.361009] binder: 8879:8887 BC_INCREFS_DONE node 398 has no pending increfs request 18:14:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) semget(0x1, 0x0, 0x120) acct(&(0x7f0000000140)='./file0\x00') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)=ANY=[], 0x0) 18:14:03 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x0, 0x0}) [ 2755.362434] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2755.371000] Process accounting resumed [ 2755.394370] binder: 8879:8887 ioctl c0306201 0 returned -14 [ 2755.424378] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2755.430999] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2755.451202] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2755.463407] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2755.476871] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2755.487044] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2755.510985] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2755.524901] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2755.584629] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2755.608721] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2755.661057] kauditd_printk_skb: 3 callbacks suppressed [ 2755.661073] audit: type=1804 audit(1550254444.048:251): pid=8902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1436/file0" dev="sda1" ino=17298 res=1 [ 2755.669852] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2755.702736] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:14:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) semget(0x1, 0x0, 0x120) acct(&(0x7f0000000140)='./file0\x00') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)=ANY=[], 0x0) socket$xdp(0x2c, 0x3, 0x0) 18:14:04 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00001700008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:14:04 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x0, 0x0}) 18:14:04 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000300000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2755.732617] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2755.739422] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2755.751718] Process accounting resumed [ 2755.830941] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2755.837817] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2755.862915] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2755.870722] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2755.878329] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2755.882676] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2755.897527] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2755.905510] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2755.916465] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2755.930644] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2755.941424] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2755.951366] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2755.961604] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2755.964651] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2755.986022] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2755.992960] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2756.010721] audit: type=1804 audit(1550254444.398:252): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir848323752/syzkaller.GiCb5H/1133/file0" dev="sda1" ino=16539 res=1 18:14:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 18:14:04 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) 18:14:04 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00001800008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2756.036183] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2756.036764] binder: release 8879:8884 transaction 397 out, still active [ 2756.047377] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2756.055883] binder: unexpected work type, 4, not freed [ 2756.072914] binder: undelivered TRANSACTION_COMPLETE [ 2756.091321] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2756.099324] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2756.099702] binder: send failed reply for transaction 397, target dead [ 2756.127757] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2756.143915] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2756.153068] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2756.160359] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2756.168431] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:14:04 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) 18:14:04 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00001900008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2756.190752] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2756.204095] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2756.211138] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2756.220914] binder: 8932:8934 ioctl c018620b 0 returned -14 [ 2756.239424] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2756.247530] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2756.284918] binder: 8932:8936 ioctl c0306201 0 returned -14 [ 2756.311790] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:14:04 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000280400000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2756.326933] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2756.356771] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2756.363954] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:14:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) semget(0x1, 0x0, 0x120) acct(&(0x7f0000000140)='./file0\x00') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)=ANY=[], 0x0) 18:14:04 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) [ 2756.413724] Process accounting resumed [ 2756.462686] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2756.469406] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2756.500307] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2756.512468] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2756.531417] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2756.540828] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2756.560135] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2756.568169] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2756.618499] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2756.619238] audit: type=1804 audit(1550254445.008:253): pid=8956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1437/file0" dev="sda1" ino=16632 res=1 [ 2756.644758] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2756.662139] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2756.670049] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2756.679056] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2756.685061] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2756.687691] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2756.693464] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2756.706284] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2756.717391] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:14:05 executing program 1 (fault-call:1 fault-nth:0): seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:05 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00001a00008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:14:05 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{}]}) [ 2756.782615] Process accounting resumed [ 2756.796046] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2756.802982] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2756.842520] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2756.849215] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:05 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{}]}) [ 2756.889273] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2756.891769] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2756.918206] FAULT_INJECTION: forcing a failure. [ 2756.918206] name failslab, interval 1, probability 0, space 0, times 0 [ 2756.920538] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2756.933443] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2756.939408] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2756.954451] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2756.963030] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2756.972088] CPU: 0 PID: 8968 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #73 [ 2756.976096] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2756.979352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2756.979362] Call Trace: [ 2756.979390] dump_stack+0x172/0x1f0 [ 2756.979416] should_fail.cold+0xa/0x1b [ 2756.979437] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2756.979457] ? lock_downgrade+0x810/0x810 [ 2756.979478] ? ___might_sleep+0x163/0x280 [ 2756.979505] __should_failslab+0x121/0x190 [ 2756.988644] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2756.996481] should_failslab+0x9/0x14 [ 2756.996498] kmem_cache_alloc_trace+0x2d1/0x760 [ 2756.996517] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2756.996533] ? security_capable_noaudit+0x95/0xc0 [ 2756.996552] do_seccomp+0x73e/0x2250 [ 2756.996570] ? __secure_computing+0x109/0x360 [ 2756.996608] ? __seccomp_filter+0x12a0/0x12a0 [ 2756.996625] ? syscall_trace_enter+0x40c/0xe10 [ 2756.996646] ? trace_event_raw_event_sys_exit+0x290/0x290 [ 2756.996671] __x64_sys_seccomp+0x73/0xb0 [ 2757.004687] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2757.006780] do_syscall_64+0x103/0x610 [ 2757.088790] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2757.093989] RIP: 0033:0x457e29 [ 2757.097188] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2757.116095] RSP: 002b:00007ff640fe7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2757.123862] RAX: ffffffffffffffda RBX: 00007ff640fe7c90 RCX: 0000000000457e29 [ 2757.131182] RDX: 0000000020000140 RSI: 000000000000000a RDI: 0000000000000001 18:14:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:14:05 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00001b00008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2757.138459] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2757.145732] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff640fe86d4 [ 2757.153009] R13: 00000000004c4cd6 R14: 00000000004d8890 R15: 0000000000000004 [ 2757.161762] binder: release 8932:8936 transaction 401 out, still active [ 2757.176768] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2757.186945] binder: send failed reply for transaction 401, target dead [ 2757.198497] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:14:05 executing program 1 (fault-call:1 fault-nth:1): seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:05 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{}]}) [ 2757.236516] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2757.247273] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2757.272303] binder: 8974:8975 ioctl c018620b 0 returned -14 18:14:05 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000290400000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2757.285921] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2757.295625] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:14:05 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00001c00008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2757.338677] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2757.350783] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2757.374894] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2757.381725] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2757.413624] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2757.424004] FAULT_INJECTION: forcing a failure. [ 2757.424004] name failslab, interval 1, probability 0, space 0, times 0 [ 2757.432248] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2757.437319] CPU: 0 PID: 8986 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #73 [ 2757.450655] Process accounting resumed [ 2757.452112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2757.452118] Call Trace: [ 2757.452141] dump_stack+0x172/0x1f0 [ 2757.452161] should_fail.cold+0xa/0x1b [ 2757.475617] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2757.480745] ? lock_downgrade+0x810/0x810 [ 2757.484920] ? ___might_sleep+0x163/0x280 [ 2757.489093] __should_failslab+0x121/0x190 [ 2757.493346] should_failslab+0x9/0x14 [ 2757.496462] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2757.497166] kmem_cache_alloc_node_trace+0x270/0x720 [ 2757.497185] ? mark_held_locks+0x100/0x100 [ 2757.497207] __get_vm_area_node+0x12b/0x3a0 [ 2757.497228] __vmalloc_node_range+0xd4/0x790 [ 2757.497245] ? bpf_prog_alloc+0x6b/0x2b0 [ 2757.505417] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2757.508775] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2757.508796] __vmalloc+0x44/0x50 [ 2757.508811] ? bpf_prog_alloc+0x6b/0x2b0 [ 2757.508830] bpf_prog_alloc+0x6b/0x2b0 [ 2757.529456] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2757.535333] bpf_prog_create_from_user+0xb1/0x2e0 [ 2757.535350] ? hardlockup_detector_perf_enable.cold+0x1e/0x1e [ 2757.535370] do_seccomp+0x77f/0x2250 [ 2757.543098] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2757.544285] ? __secure_computing+0x109/0x360 [ 2757.544308] ? __seccomp_filter+0x12a0/0x12a0 [ 2757.544324] ? syscall_trace_enter+0x40c/0xe10 [ 2757.544346] ? trace_event_raw_event_sys_exit+0x290/0x290 [ 2757.544370] __x64_sys_seccomp+0x73/0xb0 [ 2757.584614] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:14:06 executing program 3 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:14:06 executing program 5 (fault-call:1 fault-nth:0): seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2757.587129] do_syscall_64+0x103/0x610 [ 2757.587151] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2757.587163] RIP: 0033:0x457e29 [ 2757.587179] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2757.587187] RSP: 002b:00007ff640fe7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2757.591954] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2757.596331] RAX: ffffffffffffffda RBX: 00007ff640fe7c90 RCX: 0000000000457e29 [ 2757.596341] RDX: 0000000020000140 RSI: 000000000000000a RDI: 0000000000000001 [ 2757.596349] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2757.596358] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff640fe86d4 [ 2757.596367] R13: 00000000004c4cd6 R14: 00000000004d8890 R15: 0000000000000004 [ 2757.607864] syz-executor.1: vmalloc: allocation failure: 4096 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 2757.718785] FAULT_INJECTION: forcing a failure. [ 2757.718785] name failslab, interval 1, probability 0, space 0, times 0 [ 2757.720947] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2757.740755] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2757.744622] CPU: 0 PID: 8996 Comm: syz-executor.5 Not tainted 5.0.0-rc6+ #73 [ 2757.755149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2757.759411] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2757.764510] Call Trace: [ 2757.764533] dump_stack+0x172/0x1f0 [ 2757.764554] should_fail.cold+0xa/0x1b [ 2757.764573] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2757.764610] ? lock_downgrade+0x810/0x810 [ 2757.764629] ? ___might_sleep+0x163/0x280 [ 2757.764651] __should_failslab+0x121/0x190 [ 2757.764668] should_failslab+0x9/0x14 [ 2757.764683] kmem_cache_alloc_trace+0x2d1/0x760 [ 2757.764701] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2757.764718] ? security_capable_noaudit+0x95/0xc0 [ 2757.764736] do_seccomp+0x73e/0x2250 [ 2757.764754] ? __secure_computing+0x109/0x360 [ 2757.779967] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2757.782304] ? __seccomp_filter+0x12a0/0x12a0 [ 2757.782321] ? syscall_trace_enter+0x40c/0xe10 [ 2757.782343] ? trace_event_raw_event_sys_exit+0x290/0x290 [ 2757.782369] __x64_sys_seccomp+0x73/0xb0 [ 2757.782387] do_syscall_64+0x103/0x610 [ 2757.782406] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2757.782423] RIP: 0033:0x457e29 [ 2757.797859] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2757.800079] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2757.800088] RSP: 002b:00007f7aa00bec78 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2757.800103] RAX: ffffffffffffffda RBX: 00007f7aa00bec90 RCX: 0000000000457e29 [ 2757.800113] RDX: 0000000020000140 RSI: 000000000000000a RDI: 0000000000000001 18:14:06 executing program 5 (fault-call:1 fault-nth:1): seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2757.800122] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2757.800132] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7aa00bf6d4 [ 2757.800141] R13: 00000000004c4cd6 R14: 00000000004d8890 R15: 0000000000000003 [ 2757.836646] CPU: 0 PID: 8986 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #73 [ 2757.855782] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2757.859463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2757.859469] Call Trace: [ 2757.859492] dump_stack+0x172/0x1f0 18:14:06 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00001d00008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2757.859513] warn_alloc.cold+0x87/0x17f [ 2757.859531] ? zone_watermark_ok_safe+0x260/0x260 [ 2757.859547] ? rcu_read_lock_sched_held+0x110/0x130 [ 2757.859566] ? mark_held_locks+0x100/0x100 [ 2757.868199] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2757.874978] ? __get_vm_area_node+0x2df/0x3a0 [ 2757.875002] __vmalloc_node_range+0x48a/0x790 [ 2757.875022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2757.875042] __vmalloc+0x44/0x50 [ 2757.875059] ? bpf_prog_alloc+0x6b/0x2b0 [ 2757.875074] bpf_prog_alloc+0x6b/0x2b0 [ 2757.896213] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2757.901695] bpf_prog_create_from_user+0xb1/0x2e0 [ 2757.901711] ? hardlockup_detector_perf_enable.cold+0x1e/0x1e [ 2757.901731] do_seccomp+0x77f/0x2250 [ 2757.901751] ? __secure_computing+0x109/0x360 [ 2757.901768] ? __seccomp_filter+0x12a0/0x12a0 [ 2757.901786] ? syscall_trace_enter+0x40c/0xe10 [ 2757.909409] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2757.916334] ? trace_event_raw_event_sys_exit+0x290/0x290 [ 2757.916362] __x64_sys_seccomp+0x73/0xb0 [ 2757.916380] do_syscall_64+0x103/0x610 [ 2757.916401] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2757.916412] RIP: 0033:0x457e29 [ 2757.916428] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2757.916436] RSP: 002b:00007ff640fe7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2757.916453] RAX: ffffffffffffffda RBX: 00007ff640fe7c90 RCX: 0000000000457e29 [ 2757.924100] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2757.930992] RDX: 0000000020000140 RSI: 000000000000000a RDI: 0000000000000001 [ 2757.931002] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2757.931011] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff640fe86d4 [ 2757.931020] R13: 00000000004c4cd6 R14: 00000000004d8890 R15: 0000000000000004 [ 2757.952054] Mem-Info: [ 2758.006914] FAULT_INJECTION: forcing a failure. [ 2758.006914] name failslab, interval 1, probability 0, space 0, times 0 [ 2758.008992] active_anon:163916 inactive_anon:18979 isolated_anon:0 [ 2758.008992] active_file:22232 inactive_file:41103 isolated_file:0 [ 2758.008992] unevictable:3584 dirty:110 writeback:0 unstable:0 [ 2758.008992] slab_reclaimable:15572 slab_unreclaimable:113977 [ 2758.008992] mapped:58716 shmem:4368 pagetables:3320 bounce:0 [ 2758.008992] free:1014809 free_pcp:460 free_cma:0 [ 2758.009026] Node 0 active_anon:655664kB inactive_anon:75916kB active_file:88764kB inactive_file:163388kB unevictable:14336kB isolated(anon):0kB isolated(file):0kB mapped:234864kB dirty:440kB writeback:0kB shmem:17472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 346112kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2758.009057] Node 1 active_anon:0kB inactive_anon:0kB active_file:164kB inactive_file:1024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2758.009063] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2758.009099] lowmem_reserve[]: 0 2553 2555 2555 18:14:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2758.009118] Node 0 DMA32 free:258128kB min:36232kB low:45288kB high:54344kB active_anon:655664kB inactive_anon:75916kB active_file:88764kB inactive_file:163388kB unevictable:14336kB writepending:440kB present:3129332kB managed:2617972kB mlocked:14336kB kernel_stack:10144kB pagetables:13280kB bounce:0kB free_pcp:1840kB local_pcp:424kB free_cma:0kB [ 2758.009157] lowmem_reserve[]: 0 0 2 2 [ 2758.009175] Node 0 Normal free:1828kB min:2076kB low:2080kB high:2084kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2758.009210] lowmem_reserve[]: 0 0 0 0 [ 2758.009228] Node 1 Normal free:3783372kB min:53624kB low:67028kB high:80432kB active_anon:0kB inactive_anon:0kB active_file:164kB inactive_file:1024kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2758.009265] lowmem_reserve[]: 0 0 0 0 [ 2758.009282] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 2758.032798] CPU: 1 PID: 8998 Comm: syz-executor.3 Not tainted 5.0.0-rc6+ #73 [ 2758.033617] Node 0 DMA32: 1650*4kB (UME) 547*8kB (UME) 246*16kB (UME) 249*32kB (UME) 105*64kB (UME) 51*128kB (UME) 29*256kB (UME) 18*512kB (UME) 3*1024kB (UM) 1*2048kB (M) 49*4096kB (UM) = 258592kB [ 2758.039459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2758.043219] Node 0 Normal: 1*4kB (M) 4*8kB (ME) 2*16kB (ME) 3*32kB (ME) 0*64kB 1*128kB (M) 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 1828kB [ 2758.047655] Call Trace: [ 2758.052143] Node 1 Normal: 69*4kB (UME) 195*8kB (UE) 260*16kB (U) 67*32kB (UE) 14*64kB (UM) 11*128kB (UE) 6*256kB (UME) 6*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 919*4096kB (M) = 3783372kB [ 2758.056745] dump_stack+0x172/0x1f0 [ 2758.056765] should_fail.cold+0xa/0x1b [ 2758.056782] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2758.056795] ? lock_downgrade+0x810/0x810 [ 2758.056811] ? ___might_sleep+0x163/0x280 [ 2758.056833] __should_failslab+0x121/0x190 [ 2758.056850] should_failslab+0x9/0x14 [ 2758.065105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2758.069408] kmem_cache_alloc+0x2be/0x710 [ 2758.073518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 18:14:06 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2758.077500] ? retint_kernel+0x2d/0x2d [ 2758.082734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2758.085881] getname_flags+0xd6/0x5b0 [ 2758.105613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2758.112487] getname+0x1a/0x20 [ 2758.112571] __x64_sys_acct+0x74/0x200 [ 2758.112613] do_syscall_64+0x103/0x610 [ 2758.119922] 67702 total pagecache pages [ 2758.127334] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2758.127347] RIP: 0033:0x457e29 18:14:07 executing program 3 (fault-call:3 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2758.127369] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2758.127377] RSP: 002b:00007fbeee1f6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 2758.127390] RAX: ffffffffffffffda RBX: 00007fbeee1f6c90 RCX: 0000000000457e29 [ 2758.127397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 2758.127404] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2758.127412] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbeee1f76d4 [ 2758.127420] R13: 00000000004bdd46 R14: 00000000004ce0f0 R15: 0000000000000005 [ 2758.146031] binder: release 8974:8981 transaction 405 out, still active [ 2758.150032] 0 pages in swap cache [ 2758.159927] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2758.171372] Swap cache stats: add 0, delete 0, find 0/0 [ 2758.207147] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2758.240173] binder: send failed reply for transaction 405, target dead [ 2758.274076] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2758.326481] Free swap = 0kB [ 2758.355552] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2758.357718] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2758.399015] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2758.409828] Total swap = 0kB [ 2758.410113] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2758.434784] 1965979 pages RAM [ 2758.480475] FAULT_INJECTION: forcing a failure. [ 2758.480475] name failslab, interval 1, probability 0, space 0, times 0 [ 2758.496072] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2758.496292] 0 pages HighMem/MovableOnly [ 2758.507780] CPU: 1 PID: 9010 Comm: syz-executor.5 Not tainted 5.0.0-rc6+ #73 [ 2758.516315] 339412 pages reserved [ 2758.521554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2758.521560] Call Trace: [ 2758.521601] dump_stack+0x172/0x1f0 [ 2758.521623] should_fail.cold+0xa/0x1b [ 2758.521640] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2758.521660] ? lock_downgrade+0x810/0x810 [ 2758.528040] 0 pages cma reserved [ 2758.534387] ? ___might_sleep+0x163/0x280 [ 2758.534411] __should_failslab+0x121/0x190 [ 2758.534430] should_failslab+0x9/0x14 [ 2758.534446] kmem_cache_alloc_node_trace+0x270/0x720 [ 2758.534464] ? mark_held_locks+0x100/0x100 [ 2758.534485] __get_vm_area_node+0x12b/0x3a0 [ 2758.534506] __vmalloc_node_range+0xd4/0x790 [ 2758.534520] ? bpf_prog_alloc+0x6b/0x2b0 [ 2758.534538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2758.825825] __vmalloc+0x44/0x50 [ 2758.829199] ? bpf_prog_alloc+0x6b/0x2b0 [ 2758.833269] bpf_prog_alloc+0x6b/0x2b0 [ 2758.837168] bpf_prog_create_from_user+0xb1/0x2e0 [ 2758.842049] ? hardlockup_detector_perf_enable.cold+0x1e/0x1e [ 2758.847930] do_seccomp+0x77f/0x2250 [ 2758.851645] ? __secure_computing+0x109/0x360 [ 2758.856141] ? __seccomp_filter+0x12a0/0x12a0 [ 2758.860633] ? syscall_trace_enter+0x40c/0xe10 [ 2758.865229] ? trace_event_raw_event_sys_exit+0x290/0x290 [ 2758.870777] __x64_sys_seccomp+0x73/0xb0 [ 2758.874845] do_syscall_64+0x103/0x610 [ 2758.878741] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2758.883930] RIP: 0033:0x457e29 [ 2758.887127] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2758.906025] RSP: 002b:00007f7aa00bec78 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2758.913734] RAX: ffffffffffffffda RBX: 00007f7aa00bec90 RCX: 0000000000457e29 [ 2758.921006] RDX: 0000000020000140 RSI: 000000000000000a RDI: 0000000000000001 [ 2758.928403] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2758.935689] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7aa00bf6d4 [ 2758.942962] R13: 00000000004c4cd6 R14: 00000000004d8890 R15: 0000000000000003 [ 2758.950518] net_ratelimit: 20 callbacks suppressed [ 2758.950526] protocol 88fb is buggy, dev hsr_slave_0 [ 2758.960554] protocol 88fb is buggy, dev hsr_slave_1 [ 2758.965760] protocol 88fb is buggy, dev hsr_slave_0 [ 2758.970810] protocol 88fb is buggy, dev hsr_slave_1 [ 2758.975963] protocol 88fb is buggy, dev hsr_slave_0 [ 2758.981088] protocol 88fb is buggy, dev hsr_slave_1 [ 2758.986711] syz-executor.5: vmalloc: allocation failure: 4096 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 2759.008617] CPU: 0 PID: 9010 Comm: syz-executor.5 Not tainted 5.0.0-rc6+ #73 [ 2759.015833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2759.016507] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2759.025198] Call Trace: [ 2759.025222] dump_stack+0x172/0x1f0 [ 2759.025243] warn_alloc.cold+0x87/0x17f [ 2759.025261] ? zone_watermark_ok_safe+0x260/0x260 [ 2759.046816] ? rcu_read_lock_sched_held+0x110/0x130 [ 2759.051872] ? mark_held_locks+0x100/0x100 [ 2759.056135] ? __get_vm_area_node+0x2df/0x3a0 [ 2759.060651] __vmalloc_node_range+0x48a/0x790 [ 2759.065212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2759.070765] __vmalloc+0x44/0x50 [ 2759.074193] ? bpf_prog_alloc+0x6b/0x2b0 [ 2759.078269] bpf_prog_alloc+0x6b/0x2b0 [ 2759.082172] bpf_prog_create_from_user+0xb1/0x2e0 [ 2759.087024] ? hardlockup_detector_perf_enable.cold+0x1e/0x1e [ 2759.092924] do_seccomp+0x77f/0x2250 [ 2759.096652] ? __secure_computing+0x109/0x360 [ 2759.101208] ? __seccomp_filter+0x12a0/0x12a0 [ 2759.105719] ? syscall_trace_enter+0x40c/0xe10 [ 2759.110321] ? trace_event_raw_event_sys_exit+0x290/0x290 [ 2759.115884] __x64_sys_seccomp+0x73/0xb0 [ 2759.119960] do_syscall_64+0x103/0x610 [ 2759.123866] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2759.129063] RIP: 0033:0x457e29 [ 2759.132265] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2759.151218] RSP: 002b:00007f7aa00bec78 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2759.158979] RAX: ffffffffffffffda RBX: 00007f7aa00bec90 RCX: 0000000000457e29 [ 2759.166285] RDX: 0000000020000140 RSI: 000000000000000a RDI: 0000000000000001 [ 2759.173620] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2759.180899] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7aa00bf6d4 [ 2759.188177] R13: 00000000004c4cd6 R14: 00000000004d8890 R15: 0000000000000003 [ 2759.203368] Mem-Info: [ 2759.206929] active_anon:161851 inactive_anon:18979 isolated_anon:0 [ 2759.206929] active_file:22232 inactive_file:41106 isolated_file:0 [ 2759.206929] unevictable:3584 dirty:118 writeback:0 unstable:0 18:14:07 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000002a0400000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2759.206929] slab_reclaimable:15576 slab_unreclaimable:113917 [ 2759.206929] mapped:58740 shmem:4366 pagetables:3348 bounce:0 [ 2759.206929] free:1016959 free_pcp:394 free_cma:0 [ 2759.260231] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2759.266943] binder: 9012:9017 ioctl c018620b 0 returned -14 18:14:07 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x2, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2759.304972] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2759.332961] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2759.337525] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:14:07 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00001e00008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2759.344529] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2759.360841] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2759.365733] Node 0 active_anon:653696kB inactive_anon:75916kB active_file:88764kB inactive_file:163400kB unevictable:14336kB isolated(anon):0kB isolated(file):0kB mapped:234860kB dirty:472kB writeback:0kB shmem:17464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 354304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2759.405202] binder: 9012:9024 BC_INCREFS_DONE node 410 has no pending increfs request [ 2759.409536] FAULT_INJECTION: forcing a failure. [ 2759.409536] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2759.425155] CPU: 0 PID: 9019 Comm: syz-executor.3 Not tainted 5.0.0-rc6+ #73 [ 2759.432394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2759.433574] Node 1 active_anon:0kB inactive_anon:0kB active_file:164kB inactive_file:1024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2759.441807] Call Trace: [ 2759.441831] dump_stack+0x172/0x1f0 [ 2759.441858] should_fail.cold+0xa/0x1b [ 2759.441876] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2759.441896] ? mark_held_locks+0x100/0x100 [ 2759.441915] should_fail_alloc_page+0x50/0x60 [ 2759.441930] __alloc_pages_nodemask+0x1a1/0x710 [ 2759.441949] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2759.441962] ? find_held_lock+0x35/0x130 [ 2759.441991] cache_grow_begin+0x9c/0x8c0 [ 2759.442007] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2759.442028] kmem_cache_alloc+0x645/0x710 [ 2759.442043] ? apparmor_capable+0x2bb/0x5d0 [ 2759.442066] getname_flags+0xd6/0x5b0 [ 2759.469911] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2759.471231] getname+0x1a/0x20 [ 2759.471249] __x64_sys_acct+0x74/0x200 [ 2759.471269] do_syscall_64+0x103/0x610 [ 2759.471288] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2759.471299] RIP: 0033:0x457e29 [ 2759.471314] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2759.471321] RSP: 002b:00007fbeee1f6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 2759.471335] RAX: ffffffffffffffda RBX: 00007fbeee1f6c90 RCX: 0000000000457e29 [ 2759.471344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 2759.471352] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2759.471360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbeee1f76d4 [ 2759.471372] R13: 00000000004bdd46 R14: 00000000004ce0f0 R15: 0000000000000005 [ 2759.476696] lowmem_reserve[]: 0 2553 2555 2555 [ 2759.482306] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2759.491481] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2759.499768] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2759.503933] Node 0 DMA32 free:256972kB min:36232kB low:45288kB high:54344kB active_anon:657828kB inactive_anon:75916kB active_file:88764kB inactive_file:163412kB unevictable:14336kB writepending:468kB present:3129332kB managed:2617972kB mlocked:14336kB kernel_stack:10144kB pagetables:13296kB bounce:0kB free_pcp:1916kB local_pcp:1032kB free_cma:0kB [ 2759.507462] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2759.511527] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2759.566713] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2759.600657] lowmem_reserve[]: 0 0 2 2 [ 2759.603013] audit: type=1804 audit(1550254447.968:254): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1439/file0" dev="sda1" ino=16753 res=1 18:14:08 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x3, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2759.611271] Node 0 Normal free:1828kB min:2076kB low:2080kB high:2084kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2759.631195] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2759.659288] lowmem_reserve[]: 0 0 0 0 [ 2759.709229] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2759.746938] Node 1 Normal free:3783372kB min:53624kB low:67028kB high:80432kB active_anon:0kB inactive_anon:0kB active_file:164kB inactive_file:1024kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2759.799478] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2759.827726] lowmem_reserve[]: 0 0 0 0 [ 2759.839796] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2759.851927] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 2759.900123] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2759.909980] Node 0 DMA32: 1524*4kB (UME) 461*8kB (UME) 272*16kB (UME) 244*32kB (UME) 105*64kB (UME) 52*128kB (UME) 29*256kB (UME) 18*512kB (UME) 3*1024kB (UM) 1*2048kB (M) 48*4096kB (UM) = 253688kB 18:14:08 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x5, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2759.949256] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2759.965466] Node 0 Normal: 1*4kB (M) 4*8kB (ME) 2*16kB (ME) 3*32kB (ME) 0*64kB 1*128kB (M) 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 1828kB [ 2759.968504] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2759.988224] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:14:08 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00001f00008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2759.991081] Node 1 Normal: 69*4kB (UME) 195*8kB (UE) 260*16kB (U) 67*32kB (UE) 14*64kB (UM) 11*128kB (UE) 6*256kB (UME) 6*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 919*4096kB (M) = 3783372kB [ 2759.996518] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2760.021931] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2760.026839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2760.038765] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2760.046457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2760.056878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2760.059076] binder: release 9012:9017 transaction 409 out, still active [ 2760.069395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2760.086725] 67705 total pagecache pages [ 2760.090762] 0 pages in swap cache [ 2760.092868] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:14:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2760.095300] Swap cache stats: add 0, delete 0, find 0/0 [ 2760.110926] Free swap = 0kB [ 2760.115118] Total swap = 0kB [ 2760.115168] binder: unexpected work type, 4, not freed [ 2760.118256] 1965979 pages RAM [ 2760.131330] 0 pages HighMem/MovableOnly [ 2760.132164] Process accounting resumed [ 2760.137946] 339412 pages reserved [ 2760.139968] binder: undelivered TRANSACTION_COMPLETE [ 2760.147575] 0 pages cma reserved [ 2760.149133] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2760.161762] binder: send failed reply for transaction 409, target dead [ 2760.172462] protocol 88fb is buggy, dev hsr_slave_0 [ 2760.177616] protocol 88fb is buggy, dev hsr_slave_1 [ 2760.182783] protocol 88fb is buggy, dev hsr_slave_0 [ 2760.187873] protocol 88fb is buggy, dev hsr_slave_1 18:14:08 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:08 executing program 3 (fault-call:3 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2760.203368] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2760.213485] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2760.220402] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2760.228200] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2760.231119] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2760.252149] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2760.287648] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:14:08 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x6, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2760.298866] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2760.322534] audit: type=1326 audit(1550254448.708:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9053 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2760.324087] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:14:08 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00002000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2760.352965] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2760.356111] binder: 9051:9055 ioctl c018620b 0 returned -14 [ 2760.360850] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2760.379761] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2760.399689] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2760.407313] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2760.408556] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2760.425607] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2760.436860] FAULT_INJECTION: forcing a failure. [ 2760.436860] name failslab, interval 1, probability 0, space 0, times 0 [ 2760.449802] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2760.458992] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2760.478364] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2760.488496] CPU: 0 PID: 9056 Comm: syz-executor.3 Not tainted 5.0.0-rc6+ #73 [ 2760.491094] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2760.495714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2760.495752] Call Trace: [ 2760.495779] dump_stack+0x172/0x1f0 [ 2760.495805] should_fail.cold+0xa/0x1b [ 2760.495828] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2760.495846] ? lock_downgrade+0x810/0x810 [ 2760.495874] ? ___might_sleep+0x163/0x280 [ 2760.495899] __should_failslab+0x121/0x190 [ 2760.495919] should_failslab+0x9/0x14 [ 2760.495941] kmem_cache_alloc_trace+0x2d1/0x760 [ 2760.548974] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2760.554521] ? strncpy_from_user+0x2a8/0x380 [ 2760.558945] acct_on+0x5f/0x790 [ 2760.562243] __x64_sys_acct+0xae/0x200 [ 2760.566142] do_syscall_64+0x103/0x610 [ 2760.570041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2760.575237] RIP: 0033:0x457e29 [ 2760.578437] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2760.597345] RSP: 002b:00007fbeee1f6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 18:14:09 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x13, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2760.605061] RAX: ffffffffffffffda RBX: 00007fbeee1f6c90 RCX: 0000000000457e29 [ 2760.612334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 2760.619682] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2760.626961] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbeee1f76d4 [ 2760.634236] R13: 00000000004bdd46 R14: 00000000004ce0f0 R15: 0000000000000005 [ 2760.653610] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2760.661067] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2760.674019] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2760.680731] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2760.696841] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env 18:14:09 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000002b0400000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:14:09 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00002100008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2760.712239] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2760.728892] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2760.738031] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:14:09 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x21, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2760.770733] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2760.779270] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:14:09 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00002200008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2760.862729] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2760.871918] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:09 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x18d1c7, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2760.988356] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2760.995331] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2761.013388] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2761.025496] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:14:09 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00002300008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2761.040654] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2761.076028] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2761.097267] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2761.106815] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2761.119574] binder: release 9051:9061 transaction 413 out, still active [ 2761.139046] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:14:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 18:14:09 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x2, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:09 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0xffffff1f, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:09 executing program 3 (fault-call:3 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2761.150095] binder: send failed reply for transaction 413, target dead [ 2761.191289] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2761.199441] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2761.211898] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2761.228274] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2761.237907] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2761.250064] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2761.259054] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2761.261505] binder: 9098:9102 ioctl c018620b 0 returned -14 [ 2761.274265] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:14:09 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00002400008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2761.286728] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env 18:14:09 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x3, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2761.322094] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2761.342600] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2761.361118] binder: 9098:9102 BC_INCREFS_DONE node 418 has no pending increfs request [ 2761.364536] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2761.386179] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2761.403256] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2761.410448] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2761.411749] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2761.427497] FAULT_INJECTION: forcing a failure. [ 2761.427497] name failslab, interval 1, probability 0, space 0, times 0 [ 2761.459755] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2761.470068] CPU: 0 PID: 9111 Comm: syz-executor.3 Not tainted 5.0.0-rc6+ #73 [ 2761.477280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2761.486655] Call Trace: [ 2761.489262] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2761.489284] dump_stack+0x172/0x1f0 [ 2761.489310] should_fail.cold+0xa/0x1b [ 2761.496542] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2761.499352] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2761.499369] ? lock_downgrade+0x810/0x810 [ 2761.499388] ? ___might_sleep+0x163/0x280 [ 2761.499411] __should_failslab+0x121/0x190 [ 2761.499430] should_failslab+0x9/0x14 [ 2761.499444] kmem_cache_alloc+0x2be/0x710 [ 2761.499469] __alloc_file+0x27/0x300 [ 2761.516108] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2761.517891] alloc_empty_file+0x72/0x170 [ 2761.517912] path_openat+0xef/0x4690 [ 2761.517928] ? kernel_text_address+0x73/0xf0 [ 2761.517943] ? __kernel_text_address+0xd/0x40 [ 2761.518014] ? unwind_get_return_address+0x61/0xa0 [ 2761.518041] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2761.530112] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2761.530567] ? save_stack+0xa9/0xd0 [ 2761.538895] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2761.542252] ? save_stack+0x45/0xd0 [ 2761.542268] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2761.542282] ? kasan_kmalloc+0x9/0x10 [ 2761.542296] ? kmem_cache_alloc_trace+0x151/0x760 [ 2761.542311] ? acct_on+0x5f/0x790 [ 2761.542325] ? __x64_sys_acct+0xae/0x200 [ 2761.542345] do_filp_open+0x1a1/0x280 [ 2761.542362] ? may_open_dev+0x100/0x100 [ 2761.542377] ? mark_held_locks+0x100/0x100 [ 2761.549449] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2761.552858] ? __x64_sys_acct+0xa6/0x200 [ 2761.552879] ? fs_reclaim_acquire+0x20/0x20 [ 2761.552898] ? __lock_is_held+0xb6/0x140 [ 2761.552920] ? __lock_is_held+0xb6/0x140 [ 2761.552939] ? check_preemption_disabled+0x48/0x290 [ 2761.552956] file_open_name+0x2c5/0x3b0 [ 2761.552972] ? vfs_open+0xd0/0xd0 [ 2761.669862] ? rcu_read_lock_sched_held+0x110/0x130 [ 2761.674894] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2761.680441] ? strncpy_from_user+0x2a8/0x380 [ 2761.684889] acct_on+0x7f/0x790 [ 2761.688196] __x64_sys_acct+0xae/0x200 [ 2761.692096] do_syscall_64+0x103/0x610 [ 2761.695998] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2761.701212] RIP: 0033:0x457e29 [ 2761.704420] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:14:10 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000002c0400000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:14:10 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x6}]}) [ 2761.723328] RSP: 002b:00007fbeee1d5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 2761.731043] RAX: ffffffffffffffda RBX: 00007fbeee1d5c90 RCX: 0000000000457e29 [ 2761.738320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 2761.745616] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2761.752893] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbeee1d66d4 [ 2761.760211] R13: 00000000004bdd46 R14: 00000000004ce0f0 R15: 0000000000000005 18:14:10 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00002500008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2761.772298] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2761.805567] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:10 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x6}]}) 18:14:10 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x5, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2761.860599] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2761.888871] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2761.937635] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2761.945872] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2761.956537] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2761.960957] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:14:10 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00002600008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2761.983709] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2761.999101] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2761.999998] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2762.014845] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2762.023480] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2762.033201] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2762.056983] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2762.063269] binder: release 9098:9106 transaction 417 out, still active [ 2762.074115] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:14:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 18:14:10 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x5, &(0x7f0000000080)=[{0x6}]}) 18:14:10 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x6, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2762.093164] binder: unexpected work type, 4, not freed [ 2762.109429] binder: undelivered TRANSACTION_COMPLETE [ 2762.115063] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2762.121308] binder: send failed reply for transaction 417, target dead [ 2762.121518] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2762.153508] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2762.159983] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:14:10 executing program 3 (fault-call:3 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:14:10 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00002700008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2762.199195] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2762.210837] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2762.222727] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2762.228510] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2762.246121] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2762.257338] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2762.271892] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2762.280418] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2762.287109] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2762.290177] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2762.305270] binder: 9146:9147 ioctl c018620b 0 returned -14 [ 2762.311534] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2762.321034] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2762.338159] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2762.362455] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2762.370090] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:14:10 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x6, &(0x7f0000000080)=[{0x6}]}) [ 2762.432189] FAULT_INJECTION: forcing a failure. [ 2762.432189] name failslab, interval 1, probability 0, space 0, times 0 [ 2762.497535] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2762.511168] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2762.522539] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2762.524606] CPU: 1 PID: 9163 Comm: syz-executor.3 Not tainted 5.0.0-rc6+ #73 [ 2762.538433] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2762.539188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2762.539194] Call Trace: [ 2762.539216] dump_stack+0x172/0x1f0 [ 2762.539237] should_fail.cold+0xa/0x1b [ 2762.551778] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2762.554990] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2762.555007] ? lock_downgrade+0x810/0x810 [ 2762.555026] ? ___might_sleep+0x163/0x280 [ 2762.555049] __should_failslab+0x121/0x190 [ 2762.555067] should_failslab+0x9/0x14 [ 2762.555083] kmem_cache_alloc_trace+0x2d1/0x760 [ 2762.555098] ? ___might_sleep+0x163/0x280 [ 2762.567928] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2762.572160] ? __might_sleep+0x95/0x190 [ 2762.572182] apparmor_file_alloc_security+0x112/0x940 [ 2762.572203] security_file_alloc+0x69/0xb0 [ 2762.577497] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2762.581432] __alloc_file+0xac/0x300 [ 2762.581450] alloc_empty_file+0x72/0x170 [ 2762.581469] path_openat+0xef/0x4690 [ 2762.644437] ? kernel_text_address+0x73/0xf0 [ 2762.648847] ? __kernel_text_address+0xd/0x40 [ 2762.653375] ? unwind_get_return_address+0x61/0xa0 [ 2762.658315] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2762.662986] ? save_stack+0xa9/0xd0 [ 2762.666621] ? save_stack+0x45/0xd0 [ 2762.670251] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2762.675360] ? kasan_kmalloc+0x9/0x10 [ 2762.679160] ? kmem_cache_alloc_trace+0x151/0x760 [ 2762.684050] ? acct_on+0x5f/0x790 [ 2762.687499] ? __x64_sys_acct+0xae/0x200 [ 2762.691565] do_filp_open+0x1a1/0x280 [ 2762.695379] ? may_open_dev+0x100/0x100 [ 2762.699355] ? mark_held_locks+0x100/0x100 [ 2762.703600] ? __x64_sys_acct+0xa6/0x200 [ 2762.707672] ? fs_reclaim_acquire+0x20/0x20 [ 2762.712034] ? __lock_is_held+0xb6/0x140 [ 2762.716101] ? __lock_is_held+0xb6/0x140 [ 2762.720164] ? check_preemption_disabled+0x48/0x290 [ 2762.725187] file_open_name+0x2c5/0x3b0 [ 2762.729179] ? vfs_open+0xd0/0xd0 [ 2762.732634] ? rcu_read_lock_sched_held+0x110/0x130 [ 2762.737654] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2762.743195] ? strncpy_from_user+0x2a8/0x380 [ 2762.747639] acct_on+0x7f/0x790 [ 2762.750922] __x64_sys_acct+0xae/0x200 [ 2762.754814] do_syscall_64+0x103/0x610 [ 2762.758737] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2762.763941] RIP: 0033:0x457e29 [ 2762.767168] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2762.786067] RSP: 002b:00007fbeee1b4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 2762.793773] RAX: ffffffffffffffda RBX: 00007fbeee1b4c90 RCX: 0000000000457e29 [ 2762.801041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 2762.808394] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2762.815681] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbeee1b56d4 [ 2762.822954] R13: 00000000004bdd46 R14: 00000000004ce0f0 R15: 0000000000000005 18:14:11 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000002d0400000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:14:11 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0xc, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:11 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00002800008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:14:11 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x13, &(0x7f0000000080)=[{0x6}]}) [ 2762.870470] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2762.883366] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:14:11 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x13, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:11 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00002900008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2762.972531] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2762.979401] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2762.990804] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2763.010040] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2763.049125] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2763.062565] binder: release 9146:9158 transaction 421 out, still active [ 2763.063019] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:14:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 18:14:11 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x21, &(0x7f0000000080)=[{0x6}]}) [ 2763.095652] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2763.111375] binder: send failed reply for transaction 421, target dead [ 2763.113344] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:11 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x21, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:11 executing program 3 (fault-call:3 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:14:11 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00002a00008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2763.152722] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2763.174319] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2763.177838] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2763.194572] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2763.208750] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2763.209882] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2763.231250] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2763.240733] binder: 9188:9191 ioctl c018620b 0 returned -14 18:14:11 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x18d1c7, &(0x7f0000000080)=[{0x6}]}) [ 2763.253109] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2763.260325] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2763.273741] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2763.276721] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2763.303535] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2763.318368] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2763.328778] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2763.366212] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2763.377053] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2763.387072] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2763.393869] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2763.399879] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2763.404680] FAULT_INJECTION: forcing a failure. [ 2763.404680] name failslab, interval 1, probability 0, space 0, times 0 [ 2763.415259] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2763.438599] CPU: 0 PID: 9202 Comm: syz-executor.3 Not tainted 5.0.0-rc6+ #73 [ 2763.444547] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2763.445841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2763.453516] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2763.462010] Call Trace: [ 2763.462035] dump_stack+0x172/0x1f0 [ 2763.462056] should_fail.cold+0xa/0x1b [ 2763.462074] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2763.462090] ? lock_downgrade+0x810/0x810 [ 2763.462109] ? ___might_sleep+0x163/0x280 [ 2763.462132] __should_failslab+0x121/0x190 [ 2763.462155] should_failslab+0x9/0x14 [ 2763.474570] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2763.474651] kmem_cache_alloc+0x2be/0x710 [ 2763.478280] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2763.482156] ? lock_acquire+0x16f/0x3f0 [ 2763.527638] ima_d_path+0x52/0x1ee [ 2763.531184] process_measurement+0x1070/0x1570 [ 2763.535794] ? ima_add_template_entry.cold+0x48/0x48 [ 2763.540900] ? refcount_inc_checked+0x70/0x70 [ 2763.545455] ? aa_get_task_label+0x344/0x680 [ 2763.549893] ? find_held_lock+0x35/0x130 [ 2763.553992] ? aa_get_task_label+0x344/0x680 [ 2763.558429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2763.563984] ? refcount_sub_and_test_checked+0x161/0x1f0 [ 2763.569434] ? refcount_inc_checked+0x70/0x70 [ 2763.573972] ? refcount_dec_and_test_checked+0x1b/0x20 [ 2763.579267] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2763.584806] ? apparmor_task_getsecid+0x94/0xd0 [ 2763.589479] ima_file_check+0xc5/0x110 [ 2763.593381] ? process_measurement+0x1570/0x1570 [ 2763.598153] ? inode_permission+0xb4/0x570 [ 2763.602428] path_openat+0x1130/0x4690 [ 2763.606315] ? kernel_text_address+0x73/0xf0 [ 2763.610724] ? __kernel_text_address+0xd/0x40 [ 2763.615245] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2763.619917] ? save_stack+0xa9/0xd0 [ 2763.623552] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2763.628676] ? kasan_kmalloc+0x9/0x10 [ 2763.632476] ? kmem_cache_alloc_trace+0x151/0x760 [ 2763.637318] ? acct_on+0x5f/0x790 [ 2763.640770] ? __x64_sys_acct+0xae/0x200 [ 2763.644884] do_filp_open+0x1a1/0x280 [ 2763.648700] ? may_open_dev+0x100/0x100 [ 2763.652687] ? fs_reclaim_acquire+0x20/0x20 [ 2763.657017] ? __lock_is_held+0xb6/0x140 [ 2763.661097] ? __lock_is_held+0xb6/0x140 [ 2763.665160] ? check_preemption_disabled+0x48/0x290 [ 2763.670181] file_open_name+0x2c5/0x3b0 [ 2763.674156] ? vfs_open+0xd0/0xd0 [ 2763.677619] ? rcu_read_lock_sched_held+0x110/0x130 [ 2763.682637] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2763.688182] ? strncpy_from_user+0x2a8/0x380 [ 2763.692612] acct_on+0x7f/0x790 [ 2763.695897] __x64_sys_acct+0xae/0x200 [ 2763.699791] do_syscall_64+0x103/0x610 [ 2763.703691] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2763.708881] RIP: 0033:0x457e29 [ 2763.712076] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2763.730974] RSP: 002b:00007fbeee1d5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 2763.738699] RAX: ffffffffffffffda RBX: 00007fbeee1d5c90 RCX: 0000000000457e29 [ 2763.745967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 2763.753237] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2763.760502] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbeee1d66d4 [ 2763.767770] R13: 00000000004bdd46 R14: 00000000004ce0f0 R15: 0000000000000005 [ 2763.810461] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2763.831518] audit: type=1804 audit(1550254452.218:256): pid=9202 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="file0" dev="sda1" ino=16589 res=1 [ 2763.831564] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:12 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000002e0400000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:14:12 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x300, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:12 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00653000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:14:12 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0xffffff1f, &(0x7f0000000080)=[{0x6}]}) 18:14:12 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x69c, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2763.923344] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2763.941608] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2763.972795] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2763.979326] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:12 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2764.034591] binder: release 9188:9200 transaction 425 out, still active 18:14:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, 0x0}) 18:14:12 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00655800008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:14:12 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x6a0, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:12 executing program 3 (fault-call:3 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2764.098787] binder: send failed reply for transaction 425, target dead [ 2764.108097] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2764.122979] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2764.137381] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2764.140799] Process accounting resumed [ 2764.159523] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2764.182114] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2764.194051] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2764.203128] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2764.209590] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2764.231881] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2764.265258] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2764.303703] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2764.309058] binder: 9236:9242 ioctl c018620b 0 returned -14 [ 2764.310160] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2764.310741] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2764.332545] net_ratelimit: 20 callbacks suppressed [ 2764.332552] protocol 88fb is buggy, dev hsr_slave_0 [ 2764.342614] protocol 88fb is buggy, dev hsr_slave_1 [ 2764.347803] protocol 88fb is buggy, dev hsr_slave_0 [ 2764.352249] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2764.352907] protocol 88fb is buggy, dev hsr_slave_1 18:14:12 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:12 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x18d1c7, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2764.360285] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2764.378470] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2764.389536] FAULT_INJECTION: forcing a failure. [ 2764.389536] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2764.401360] CPU: 0 PID: 9246 Comm: syz-executor.3 Not tainted 5.0.0-rc6+ #73 [ 2764.408590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2764.417946] Call Trace: [ 2764.420555] dump_stack+0x172/0x1f0 [ 2764.424216] should_fail.cold+0xa/0x1b [ 2764.428112] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2764.432077] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2764.433216] ? mark_held_locks+0x100/0x100 [ 2764.433236] should_fail_alloc_page+0x50/0x60 [ 2764.433251] __alloc_pages_nodemask+0x1a1/0x710 [ 2764.433271] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2764.433302] cache_grow_begin+0x9c/0x8c0 [ 2764.433318] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2764.433347] kmem_cache_alloc+0x645/0x710 [ 2764.444644] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2764.449110] ? lock_acquire+0x16f/0x3f0 [ 2764.449134] ima_d_path+0x52/0x1ee [ 2764.449152] process_measurement+0x1070/0x1570 [ 2764.449178] ? ima_add_template_entry.cold+0x48/0x48 [ 2764.449199] ? refcount_inc_checked+0x70/0x70 [ 2764.449233] ? aa_get_task_label+0x344/0x680 [ 2764.456733] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2764.458924] ? find_held_lock+0x35/0x130 [ 2764.458942] ? aa_get_task_label+0x344/0x680 [ 2764.458966] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2764.458983] ? refcount_sub_and_test_checked+0x161/0x1f0 [ 2764.458999] ? refcount_inc_checked+0x70/0x70 [ 2764.459026] ? refcount_dec_and_test_checked+0x1b/0x20 [ 2764.459040] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2764.459055] ? apparmor_task_getsecid+0x94/0xd0 [ 2764.459077] ima_file_check+0xc5/0x110 [ 2764.555901] ? process_measurement+0x1570/0x1570 [ 2764.560662] ? inode_permission+0xb4/0x570 [ 2764.564925] path_openat+0x1130/0x4690 [ 2764.568835] ? kernel_text_address+0x73/0xf0 [ 2764.573252] ? __kernel_text_address+0xd/0x40 [ 2764.577765] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2764.582438] ? save_stack+0xa9/0xd0 [ 2764.586072] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2764.591181] ? kasan_kmalloc+0x9/0x10 [ 2764.594980] ? kmem_cache_alloc_trace+0x151/0x760 [ 2764.599821] ? acct_on+0x5f/0x790 [ 2764.603277] ? __x64_sys_acct+0xae/0x200 [ 2764.607343] do_filp_open+0x1a1/0x280 [ 2764.611148] ? may_open_dev+0x100/0x100 [ 2764.615147] ? fs_reclaim_acquire+0x20/0x20 [ 2764.619478] ? __lock_is_held+0xb6/0x140 [ 2764.623545] ? __lock_is_held+0xb6/0x140 [ 2764.627629] ? check_preemption_disabled+0x48/0x290 [ 2764.632679] file_open_name+0x2c5/0x3b0 [ 2764.636659] ? vfs_open+0xd0/0xd0 [ 2764.640113] ? rcu_read_lock_sched_held+0x110/0x130 [ 2764.645132] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2764.650683] ? strncpy_from_user+0x2a8/0x380 [ 2764.655112] acct_on+0x7f/0x790 [ 2764.658397] __x64_sys_acct+0xae/0x200 [ 2764.662308] do_syscall_64+0x103/0x610 [ 2764.666203] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2764.671393] RIP: 0033:0x457e29 [ 2764.674624] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2764.693525] RSP: 002b:00007fbeee1b4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 2764.701228] RAX: ffffffffffffffda RBX: 00007fbeee1b4c90 RCX: 0000000000457e29 [ 2764.708495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 2764.715784] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2764.723054] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbeee1b56d4 [ 2764.730322] R13: 00000000004bdd46 R14: 00000000004ce0f0 R15: 0000000000000005 [ 2764.738074] binder: 9236:9247 BC_INCREFS_DONE node 430 has no pending increfs request [ 2764.738845] protocol 88fb is buggy, dev hsr_slave_0 [ 2764.751178] protocol 88fb is buggy, dev hsr_slave_1 [ 2764.755144] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2764.763372] audit: type=1804 audit(1550254453.158:257): pid=9246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1444/file0" dev="sda1" ino=17202 res=1 [ 2764.773409] binder: 9236:9247 Release 1 refcount change on invalid ref 0 ret -22 [ 2764.803868] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2764.819076] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2764.820059] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2764.839347] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2764.850865] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2764.858405] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2764.865215] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2764.878109] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2764.883893] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2764.888044] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2764.903878] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2764.905182] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2764.929516] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2764.930018] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2764.946037] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2764.953492] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2764.963323] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2764.968466] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2764.971826] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2764.980325] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2764.985518] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2765.001972] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2765.088115] binder: release 9236:9242 transaction 429 out, still active [ 2765.096287] binder: unexpected work type, 4, not freed [ 2765.104919] Process accounting resumed [ 2765.107721] binder: undelivered TRANSACTION_COMPLETE [ 2765.123233] binder: send failed reply for transaction 429, target dead [ 2765.132479] protocol 88fb is buggy, dev hsr_slave_0 18:14:13 executing program 3 (fault-call:3 fault-nth:7): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:14:13 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0xffffff1f, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:13 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000002f0400000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:14:13 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00006000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:14:13 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, 0x0}) [ 2765.137569] protocol 88fb is buggy, dev hsr_slave_1 18:14:13 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2765.175273] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2765.181738] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2765.212474] protocol 88fb is buggy, dev hsr_slave_0 [ 2765.217670] protocol 88fb is buggy, dev hsr_slave_1 18:14:13 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2765.236120] binder: 9268:9272 ioctl c018620b 0 returned -14 [ 2765.240106] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2765.252533] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2765.259017] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:13 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00306500008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2765.317979] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2765.336959] binder: 9268:9276 BC_INCREFS_DONE node 434 has no pending increfs request [ 2765.353238] FAULT_INJECTION: forcing a failure. [ 2765.353238] name failslab, interval 1, probability 0, space 0, times 0 [ 2765.361249] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2765.370654] binder: 9268:9276 Release 1 refcount change on invalid ref 0 ret -22 [ 2765.379960] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2765.392020] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2765.403082] CPU: 1 PID: 9281 Comm: syz-executor.3 Not tainted 5.0.0-rc6+ #73 [ 2765.410290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2765.413547] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2765.419642] Call Trace: [ 2765.419670] dump_stack+0x172/0x1f0 [ 2765.419694] should_fail.cold+0xa/0x1b [ 2765.419717] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2765.437629] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2765.439235] ? ___might_sleep+0x163/0x280 [ 2765.439260] __should_failslab+0x121/0x190 [ 2765.439278] should_failslab+0x9/0x14 [ 2765.447490] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2765.450774] __kmalloc+0x2dc/0x740 [ 2765.450797] ? ima_alloc_init_template+0x65/0x3b0 [ 2765.450818] ima_alloc_init_template+0x65/0x3b0 [ 2765.485913] ? memcpy+0x46/0x50 [ 2765.489242] ima_add_violation+0x113/0x1f0 [ 2765.493491] ? ima_store_template+0x2a0/0x2a0 [ 2765.498002] ? kmem_cache_alloc+0x341/0x710 [ 2765.502342] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2765.507898] ? ima_d_path+0xbf/0x1ee [ 2765.511634] process_measurement+0x1093/0x1570 [ 2765.516238] ? ima_add_template_entry.cold+0x48/0x48 [ 2765.521374] ? refcount_inc_checked+0x70/0x70 [ 2765.525903] ? aa_get_task_label+0x344/0x680 [ 2765.530321] ? find_held_lock+0x35/0x130 [ 2765.534398] ? aa_get_task_label+0x344/0x680 [ 2765.538826] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2765.544384] ? refcount_sub_and_test_checked+0x161/0x1f0 [ 2765.549848] ? refcount_inc_checked+0x70/0x70 [ 2765.554372] ? refcount_dec_and_test_checked+0x1b/0x20 [ 2765.559661] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2765.565208] ? apparmor_task_getsecid+0x94/0xd0 [ 2765.569895] ima_file_check+0xc5/0x110 [ 2765.573795] ? process_measurement+0x1570/0x1570 [ 2765.578555] ? inode_permission+0xb4/0x570 [ 2765.582823] path_openat+0x1130/0x4690 [ 2765.586726] ? kernel_text_address+0x73/0xf0 [ 2765.591143] ? __kernel_text_address+0xd/0x40 [ 2765.595665] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2765.600344] ? save_stack+0xa9/0xd0 [ 2765.604000] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2765.609112] ? kasan_kmalloc+0x9/0x10 [ 2765.612921] ? kmem_cache_alloc_trace+0x151/0x760 18:14:13 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2765.617776] ? acct_on+0x5f/0x790 [ 2765.621238] ? __x64_sys_acct+0xae/0x200 [ 2765.625323] do_filp_open+0x1a1/0x280 [ 2765.629139] ? may_open_dev+0x100/0x100 [ 2765.633140] ? fs_reclaim_acquire+0x20/0x20 [ 2765.637494] ? __lock_is_held+0xb6/0x140 [ 2765.641616] ? __lock_is_held+0xb6/0x140 [ 2765.645686] ? check_preemption_disabled+0x48/0x290 [ 2765.650724] file_open_name+0x2c5/0x3b0 [ 2765.654714] ? vfs_open+0xd0/0xd0 [ 2765.658177] ? rcu_read_lock_sched_held+0x110/0x130 [ 2765.663204] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2765.668741] ? strncpy_from_user+0x2a8/0x380 [ 2765.673155] acct_on+0x7f/0x790 [ 2765.676447] __x64_sys_acct+0xae/0x200 [ 2765.680335] do_syscall_64+0x103/0x610 [ 2765.684229] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2765.689424] RIP: 0033:0x457e29 [ 2765.692618] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2765.711526] RSP: 002b:00007fbeee1b4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 2765.719276] RAX: ffffffffffffffda RBX: 00007fbeee1b4c90 RCX: 0000000000457e29 [ 2765.726591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 2765.733875] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2765.741142] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbeee1b56d4 [ 2765.748408] R13: 00000000004bdd46 R14: 00000000004ce0f0 R15: 0000000000000005 [ 2765.757161] audit: type=1804 audit(1550254454.148:258): pid=9281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1445/file0" dev="sda1" ino=17185 res=0 [ 2765.781359] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2765.790372] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2765.808540] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2765.814253] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2765.822669] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2765.834127] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2765.846400] audit: type=1326 audit(1550254454.188:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9284 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2765.856984] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:14:14 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00586500008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:14:14 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2765.892577] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2765.901573] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2765.930103] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2765.939845] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2765.947497] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2766.003559] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2766.017738] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2766.040052] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2766.042485] binder: release 9268:9272 transaction 433 out, still active [ 2766.053469] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2766.075175] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2766.091052] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:14:14 executing program 3 (fault-call:3 fault-nth:8): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:14:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, 0x0}) [ 2766.099568] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2766.100019] binder: unexpected work type, 4, not freed [ 2766.110127] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2766.130219] Process accounting resumed [ 2766.175630] binder: undelivered TRANSACTION_COMPLETE [ 2766.190941] binder: send failed reply for transaction 433, target dead [ 2766.211228] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2766.226573] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2766.241009] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2766.248193] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:14:14 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:14 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000300400000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:14:14 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00008100008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2766.276198] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2766.287860] binder: 9310:9312 ioctl c018620b 0 returned -14 [ 2766.333456] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2766.365706] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2766.372166] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:14 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2766.387124] binder: 9310:9321 BC_INCREFS_DONE node 438 has no pending increfs request [ 2766.393632] FAULT_INJECTION: forcing a failure. [ 2766.393632] name failslab, interval 1, probability 0, space 0, times 0 [ 2766.399010] binder: 9310:9321 Release 1 refcount change on invalid ref 0 ret -22 [ 2766.451984] CPU: 0 PID: 9316 Comm: syz-executor.3 Not tainted 5.0.0-rc6+ #73 [ 2766.459198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2766.460187] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2766.468551] Call Trace: [ 2766.468575] dump_stack+0x172/0x1f0 [ 2766.468608] should_fail.cold+0xa/0x1b [ 2766.485208] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2766.490328] ? __should_failslab+0x99/0x190 [ 2766.494194] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2766.494685] __should_failslab+0x121/0x190 [ 2766.508354] should_failslab+0x9/0x14 [ 2766.512166] __kmalloc+0x2dc/0x740 [ 2766.515718] ? vsprintf+0x40/0x40 [ 2766.519230] ? mark_held_locks+0xb1/0x100 [ 2766.523390] ? ima_write_template_field_data.isra.0+0x56/0x210 [ 2766.529372] ima_write_template_field_data.isra.0+0x56/0x210 [ 2766.535208] ima_eventdigest_init_common+0x126/0x250 [ 2766.540342] ? ima_write_template_field_data.isra.0+0x210/0x210 [ 2766.546437] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2766.551904] ? rcu_read_lock_sched_held+0x110/0x130 [ 2766.556938] ? __kmalloc+0x5d5/0x740 [ 2766.560670] ima_eventdigest_ng_init+0x60/0x150 [ 2766.565353] ima_alloc_init_template+0x255/0x3b0 [ 2766.570119] ima_add_violation+0x113/0x1f0 [ 2766.574365] ? ima_store_template+0x2a0/0x2a0 [ 2766.578877] ? kmem_cache_alloc+0x341/0x710 [ 2766.583218] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2766.588762] ? ima_d_path+0xbf/0x1ee [ 2766.592483] process_measurement+0x1093/0x1570 [ 2766.597077] ? ima_add_template_entry.cold+0x48/0x48 [ 2766.602186] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2766.606780] ? retint_kernel+0x2d/0x2d [ 2766.610670] ? trace_hardirqs_on_caller+0x6a/0x220 [ 2766.615613] ? aa_get_task_label+0x344/0x680 [ 2766.620022] ? find_held_lock+0x35/0x130 [ 2766.624091] ? aa_get_task_label+0x344/0x680 [ 2766.628504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2766.634046] ? refcount_sub_and_test_checked+0x161/0x1f0 [ 2766.639496] ? refcount_inc_checked+0x70/0x70 [ 2766.644005] ? refcount_dec_and_test_checked+0x1b/0x20 [ 2766.649285] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2766.654822] ? apparmor_task_getsecid+0x94/0xd0 [ 2766.659499] ima_file_check+0xc5/0x110 [ 2766.663398] ? process_measurement+0x1570/0x1570 [ 2766.668149] ? inode_permission+0xb4/0x570 [ 2766.672411] path_openat+0x1130/0x4690 [ 2766.676299] ? kernel_text_address+0x73/0xf0 [ 2766.680709] ? __kernel_text_address+0xd/0x40 [ 2766.685222] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2766.689910] ? save_stack+0xa9/0xd0 [ 2766.693558] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2766.698682] ? kasan_kmalloc+0x9/0x10 [ 2766.702482] ? kmem_cache_alloc_trace+0x151/0x760 [ 2766.707332] ? acct_on+0x5f/0x790 [ 2766.710799] ? __x64_sys_acct+0xae/0x200 [ 2766.714871] do_filp_open+0x1a1/0x280 [ 2766.718683] ? may_open_dev+0x100/0x100 [ 2766.722668] ? trace_hardirqs_on_caller+0x6a/0x220 [ 2766.727613] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2766.732386] ? __lock_is_held+0xb6/0x140 [ 2766.736451] ? check_preemption_disabled+0x48/0x290 [ 2766.741471] file_open_name+0x2c5/0x3b0 [ 2766.745445] ? vfs_open+0xd0/0xd0 [ 2766.748900] ? rcu_read_lock_sched_held+0x110/0x130 [ 2766.753916] ? retint_kernel+0x2d/0x2d [ 2766.757819] acct_on+0x7f/0x790 [ 2766.761105] __x64_sys_acct+0xae/0x200 [ 2766.765003] do_syscall_64+0x103/0x610 [ 2766.768895] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2766.774091] RIP: 0033:0x457e29 [ 2766.777296] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:14:14 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b000ec000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2766.796193] RSP: 002b:00007fbeee1f6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 2766.803903] RAX: ffffffffffffffda RBX: 00007fbeee1f6c90 RCX: 0000000000457e29 [ 2766.811171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 2766.818439] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2766.825753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbeee1f76d4 [ 2766.833046] R13: 00000000004bdd46 R14: 00000000004ce0f0 R15: 0000000000000005 [ 2766.841970] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2766.855870] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2766.865827] audit: type=1804 audit(1550254455.248:260): pid=9316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1446/file0" dev="sda1" ino=16691 res=0 [ 2766.871645] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:14:15 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x3, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2766.905060] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:15 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0000f000008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:14:15 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2766.965385] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2766.977605] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2766.985645] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2767.013721] audit: type=1326 audit(1550254455.408:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9340 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2767.019995] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2767.062646] binder: release 9310:9312 transaction 437 out, still active [ 2767.069460] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2767.077775] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2767.089293] audit: type=1326 audit(1550254455.448:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9340 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2767.098606] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2767.124178] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2767.147661] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2767.150540] binder: unexpected work type, 4, not freed 18:14:15 executing program 2 (fault-call:10 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:14:15 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x4, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2767.165904] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2767.178948] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2767.195810] binder: undelivered TRANSACTION_COMPLETE [ 2767.206535] Process accounting resumed 18:14:15 executing program 3 (fault-call:3 fault-nth:9): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2767.209940] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2767.225491] binder: send failed reply for transaction 437, target dead [ 2767.241006] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2767.249156] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:14:15 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b0000ff00008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:14:15 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2767.272062] binder: 9350:9352 ioctl c018620b 0 returned -14 [ 2767.286726] audit: type=1326 audit(1550254455.678:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9351 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2767.310909] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2767.318148] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2767.324793] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2767.335986] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2767.336745] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2767.342813] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2767.379591] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2767.409664] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2767.414734] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2767.432628] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:15 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00004003008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:14:15 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000003d0400000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:14:15 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2767.545276] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2767.556395] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2767.566622] FAULT_INJECTION: forcing a failure. [ 2767.566622] name failslab, interval 1, probability 0, space 0, times 0 [ 2767.579600] CPU: 0 PID: 9370 Comm: syz-executor.3 Not tainted 5.0.0-rc6+ #73 [ 2767.586835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2767.588104] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2767.596199] Call Trace: [ 2767.596227] dump_stack+0x172/0x1f0 [ 2767.596251] should_fail.cold+0xa/0x1b [ 2767.596274] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2767.596296] ? lock_downgrade+0x810/0x810 [ 2767.596323] ? ___might_sleep+0x163/0x280 [ 2767.596352] __should_failslab+0x121/0x190 [ 2767.605738] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2767.608981] should_failslab+0x9/0x14 [ 2767.608997] __kmalloc+0x2dc/0x740 [ 2767.609020] ? ima_write_template_field_data.isra.0+0x123/0x210 [ 2767.609040] ima_write_template_field_data.isra.0+0x123/0x210 [ 2767.609061] ima_eventname_init_common+0x13b/0x1b0 [ 2767.609080] ima_eventname_ng_init+0x20/0x30 [ 2767.609097] ima_alloc_init_template+0x255/0x3b0 [ 2767.609120] ima_add_violation+0x113/0x1f0 [ 2767.609137] ? ima_store_template+0x2a0/0x2a0 [ 2767.682107] ? kmem_cache_alloc+0x341/0x710 [ 2767.686467] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2767.692017] ? ima_d_path+0xbf/0x1ee [ 2767.695737] process_measurement+0x1093/0x1570 [ 2767.700329] ? ima_add_template_entry.cold+0x48/0x48 [ 2767.705468] ? refcount_inc_checked+0x70/0x70 [ 2767.710010] ? aa_get_task_label+0x344/0x680 [ 2767.714447] ? find_held_lock+0x35/0x130 [ 2767.718538] ? aa_get_task_label+0x344/0x680 [ 2767.722962] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2767.728502] ? refcount_sub_and_test_checked+0x161/0x1f0 [ 2767.733959] ? refcount_inc_checked+0x70/0x70 [ 2767.738469] ? refcount_dec_and_test_checked+0x1b/0x20 [ 2767.743760] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2767.749296] ? apparmor_task_getsecid+0x94/0xd0 [ 2767.753974] ima_file_check+0xc5/0x110 [ 2767.757899] ? process_measurement+0x1570/0x1570 [ 2767.762674] ? inode_permission+0xb4/0x570 [ 2767.766926] path_openat+0x1130/0x4690 [ 2767.770821] ? kernel_text_address+0x73/0xf0 [ 2767.775235] ? __kernel_text_address+0xd/0x40 [ 2767.779757] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2767.784486] ? save_stack+0xa9/0xd0 [ 2767.788116] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2767.793219] ? kasan_kmalloc+0x9/0x10 [ 2767.797015] ? kmem_cache_alloc_trace+0x151/0x760 [ 2767.801865] ? acct_on+0x5f/0x790 [ 2767.805317] ? __x64_sys_acct+0xae/0x200 [ 2767.809394] do_filp_open+0x1a1/0x280 [ 2767.813199] ? may_open_dev+0x100/0x100 [ 2767.817187] ? fs_reclaim_acquire+0x20/0x20 [ 2767.821514] ? __lock_is_held+0xb6/0x140 [ 2767.825588] ? __lock_is_held+0xb6/0x140 [ 2767.829652] ? check_preemption_disabled+0x48/0x290 [ 2767.834698] file_open_name+0x2c5/0x3b0 [ 2767.838673] ? vfs_open+0xd0/0xd0 [ 2767.842142] ? rcu_read_lock_sched_held+0x110/0x130 [ 2767.847158] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2767.852699] ? strncpy_from_user+0x2a8/0x380 [ 2767.857116] acct_on+0x7f/0x790 [ 2767.860449] __x64_sys_acct+0xae/0x200 [ 2767.864348] do_syscall_64+0x103/0x610 [ 2767.868258] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2767.873458] RIP: 0033:0x457e29 [ 2767.876651] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2767.895553] RSP: 002b:00007fbeee1b4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 2767.903268] RAX: ffffffffffffffda RBX: 00007fbeee1b4c90 RCX: 0000000000457e29 [ 2767.910532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 2767.917799] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2767.925066] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbeee1b56d4 [ 2767.932331] R13: 00000000004bdd46 R14: 00000000004ce0f0 R15: 0000000000000005 [ 2767.950110] audit: type=1326 audit(1550254456.328:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9371 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2767.972843] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2767.980963] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:16 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000340008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:14:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:14:16 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2768.049553] audit: type=1804 audit(1550254456.338:265): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir917830631/syzkaller.gEM6BY/1447/file0" dev="sda1" ino=17041 res=0 [ 2768.083081] binder: release 9350:9355 transaction 441 out, still active [ 2768.091062] binder: send failed reply for transaction 441, target dead [ 2768.112222] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2768.119245] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2768.129990] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2768.143827] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2768.159434] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2768.171849] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2768.194475] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2768.216308] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2768.222160] binder: 9388:9392 ioctl c018620b 0 returned -14 [ 2768.231901] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2768.249772] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2768.272693] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2768.294391] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:14:16 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x6, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:16 executing program 3 (fault-call:3 fault-nth:10): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2768.324044] Process accounting resumed [ 2768.328515] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2768.352450] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 18:14:16 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00fffff0008e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2768.402941] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2768.409422] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2768.438977] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:14:16 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2768.465097] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2768.533020] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2768.539617] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2768.552784] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2768.560144] FAULT_INJECTION: forcing a failure. [ 2768.560144] name failslab, interval 1, probability 0, space 0, times 0 18:14:17 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000000018e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2768.581567] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2768.598806] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2768.607895] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2768.625643] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2768.636066] CPU: 1 PID: 9404 Comm: syz-executor.3 Not tainted 5.0.0-rc6+ #73 [ 2768.643254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2768.652612] Call Trace: [ 2768.655193] dump_stack+0x172/0x1f0 [ 2768.658809] should_fail.cold+0xa/0x1b [ 2768.662688] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2768.667778] ? lock_downgrade+0x810/0x810 [ 2768.671915] ? ___might_sleep+0x163/0x280 [ 2768.676068] __should_failslab+0x121/0x190 [ 2768.680315] should_failslab+0x9/0x14 [ 2768.684123] kmem_cache_alloc_node+0x265/0x710 [ 2768.688707] ? __lock_is_held+0xb6/0x140 [ 2768.692770] ? check_preemption_disabled+0x48/0x290 [ 2768.697793] __alloc_skb+0xd5/0x5e0 [ 2768.701426] ? skb_scrub_packet+0x440/0x440 [ 2768.705750] ? kmem_cache_alloc+0x341/0x710 [ 2768.710081] audit_log_start+0x302/0x7a0 [ 2768.714150] ? audit_serial+0x30/0x30 [ 2768.717953] ? ima_get_binary_runtime_size+0x50/0x50 [ 2768.723055] ? rcu_read_lock_sched_held+0x110/0x130 [ 2768.728103] ? memcpy+0x46/0x50 [ 2768.731390] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2768.736413] integrity_audit_msg+0xff/0x480 [ 2768.740739] ? integrity_kernel_read+0x200/0x200 [ 2768.745493] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2768.750514] ? ima_alloc_init_template+0x2c7/0x3b0 [ 2768.755451] ima_add_violation+0x187/0x1f0 [ 2768.759693] ? ima_store_template+0x2a0/0x2a0 [ 2768.764191] ? kmem_cache_alloc+0x341/0x710 [ 2768.768523] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2768.774058] ? ima_d_path+0xbf/0x1ee [ 2768.777780] process_measurement+0x1093/0x1570 [ 2768.782379] ? ima_add_template_entry.cold+0x48/0x48 [ 2768.787488] ? refcount_inc_checked+0x70/0x70 [ 2768.791991] ? aa_get_task_label+0x344/0x680 [ 2768.796415] ? find_held_lock+0x35/0x130 [ 2768.800478] ? aa_get_task_label+0x344/0x680 [ 2768.804907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2768.810565] ? refcount_sub_and_test_checked+0x161/0x1f0 [ 2768.816065] ? refcount_inc_checked+0x70/0x70 [ 2768.820566] ? refcount_dec_and_test_checked+0x1b/0x20 [ 2768.825845] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2768.831386] ? apparmor_task_getsecid+0x94/0xd0 [ 2768.836064] ima_file_check+0xc5/0x110 [ 2768.839956] ? process_measurement+0x1570/0x1570 [ 2768.844711] ? inode_permission+0xb4/0x570 [ 2768.848958] path_openat+0x1130/0x4690 [ 2768.852845] ? kernel_text_address+0x73/0xf0 [ 2768.857253] ? __kernel_text_address+0xd/0x40 [ 2768.861763] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2768.866436] ? save_stack+0xa9/0xd0 [ 2768.870070] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2768.875172] ? kasan_kmalloc+0x9/0x10 [ 2768.878972] ? kmem_cache_alloc_trace+0x151/0x760 [ 2768.883818] ? acct_on+0x5f/0x790 [ 2768.887273] ? __x64_sys_acct+0xae/0x200 [ 2768.891341] do_filp_open+0x1a1/0x280 [ 2768.895150] ? may_open_dev+0x100/0x100 [ 2768.899138] ? fs_reclaim_acquire+0x20/0x20 [ 2768.903466] ? __lock_is_held+0xb6/0x140 [ 2768.907533] ? __lock_is_held+0xb6/0x140 [ 2768.911605] ? check_preemption_disabled+0x48/0x290 [ 2768.916630] file_open_name+0x2c5/0x3b0 [ 2768.920611] ? vfs_open+0xd0/0xd0 [ 2768.924063] ? rcu_read_lock_sched_held+0x110/0x130 [ 2768.929081] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2768.934621] ? strncpy_from_user+0x2a8/0x380 [ 2768.939038] acct_on+0x7f/0x790 [ 2768.942320] __x64_sys_acct+0xae/0x200 [ 2768.946221] do_syscall_64+0x103/0x610 [ 2768.950113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2768.955300] RIP: 0033:0x457e29 [ 2768.958495] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2768.977409] RSP: 002b:00007fbeee1d5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 2768.985117] RAX: ffffffffffffffda RBX: 00007fbeee1d5c90 RCX: 0000000000457e29 [ 2768.992386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 2768.999656] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2769.006925] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbeee1d66d4 [ 2769.014190] R13: 00000000004bdd46 R14: 00000000004ce0f0 R15: 0000000000000005 [ 2769.024601] audit_log_lost: 3 callbacks suppressed [ 2769.024611] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 18:14:17 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000500000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2769.041025] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2769.048498] binder: release 9388:9397 transaction 445 out, still active [ 2769.061219] audit: out of memory in audit_log_start 18:14:17 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 2769.095393] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2769.111692] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2769.116303] binder: send failed reply for transaction 445, target dead 18:14:17 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000000028e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2769.165283] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2769.171740] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2769.197760] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2769.212971] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2769.226365] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env 18:14:17 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2769.260031] binder: 9419:9424 ioctl c018620b 0 returned -14 [ 2769.262178] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2769.268786] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2769.280899] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:17 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:17 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000000038e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2769.355619] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2769.362094] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2769.370537] Process accounting resumed [ 2769.375683] net_ratelimit: 22 callbacks suppressed [ 2769.375691] protocol 88fb is buggy, dev hsr_slave_0 [ 2769.375748] protocol 88fb is buggy, dev hsr_slave_1 [ 2769.375854] protocol 88fb is buggy, dev hsr_slave_0 [ 2769.375906] protocol 88fb is buggy, dev hsr_slave_1 [ 2769.413826] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2769.424058] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2769.434868] audit: type=1326 audit(1550254457.828:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9435 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2769.462035] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2769.473292] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2769.497608] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) 18:14:17 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:17 executing program 3 (fault-call:3 fault-nth:11): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') [ 2769.506202] audit: type=1326 audit(1550254457.878:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9435 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2769.542806] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2769.552539] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 18:14:18 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2769.569413] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2769.582828] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2769.597199] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2769.610145] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env 18:14:18 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000000048e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2769.626502] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2769.635153] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2769.645571] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2769.654459] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2769.691937] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2769.702166] audit: type=1326 audit(1550254458.088:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9448 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2769.727698] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2769.734721] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2769.742516] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2769.752209] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2769.769347] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2769.776944] FAULT_INJECTION: forcing a failure. [ 2769.776944] name failslab, interval 1, probability 0, space 0, times 0 18:14:18 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2769.797597] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2769.808938] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2769.824546] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2769.837385] CPU: 0 PID: 9453 Comm: syz-executor.3 Not tainted 5.0.0-rc6+ #73 [ 2769.839664] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2769.844593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2769.844600] Call Trace: [ 2769.844640] dump_stack+0x172/0x1f0 [ 2769.844663] should_fail.cold+0xa/0x1b [ 2769.844684] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2769.844707] ? lock_downgrade+0x810/0x810 [ 2769.844727] ? ___might_sleep+0x163/0x280 [ 2769.844767] __should_failslab+0x121/0x190 [ 2769.844802] should_failslab+0x9/0x14 [ 2769.852143] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2769.860560] kmem_cache_alloc+0x2be/0x710 [ 2769.860597] audit_log_start+0x2dd/0x7a0 [ 2769.860636] ? audit_serial+0x30/0x30 [ 2769.860652] ? ima_get_binary_runtime_size+0x50/0x50 [ 2769.860665] ? rcu_read_lock_sched_held+0x110/0x130 [ 2769.860688] ? memcpy+0x46/0x50 [ 2769.860719] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2769.920025] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2769.923798] integrity_audit_msg+0xff/0x480 [ 2769.923819] ? integrity_kernel_read+0x200/0x200 [ 2769.923833] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2769.923848] ? ima_alloc_init_template+0x2c7/0x3b0 [ 2769.923877] ima_add_violation+0x187/0x1f0 [ 2769.927389] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2769.932158] ? ima_store_template+0x2a0/0x2a0 [ 2769.932177] ? kmem_cache_alloc+0x341/0x710 [ 2769.932201] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2769.932214] ? ima_d_path+0xbf/0x1ee [ 2769.932232] process_measurement+0x1093/0x1570 [ 2769.993920] ? ima_add_template_entry.cold+0x48/0x48 [ 2769.999026] ? refcount_inc_checked+0x70/0x70 [ 2770.003535] ? aa_get_task_label+0x344/0x680 [ 2770.007951] ? find_held_lock+0x35/0x130 [ 2770.012013] ? aa_get_task_label+0x344/0x680 [ 2770.016430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2770.021974] ? refcount_sub_and_test_checked+0x161/0x1f0 [ 2770.027428] ? refcount_inc_checked+0x70/0x70 [ 2770.031938] ? refcount_dec_and_test_checked+0x1b/0x20 [ 2770.037213] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2770.042755] ? apparmor_task_getsecid+0x94/0xd0 [ 2770.047433] ima_file_check+0xc5/0x110 [ 2770.051327] ? process_measurement+0x1570/0x1570 [ 2770.056107] ? inode_permission+0xb4/0x570 [ 2770.060358] path_openat+0x1130/0x4690 [ 2770.064258] ? kernel_text_address+0x73/0xf0 [ 2770.068672] ? __kernel_text_address+0xd/0x40 [ 2770.073184] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2770.077867] ? save_stack+0xa9/0xd0 [ 2770.081496] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2770.086605] ? kasan_kmalloc+0x9/0x10 [ 2770.090407] ? kmem_cache_alloc_trace+0x151/0x760 [ 2770.095248] ? acct_on+0x5f/0x790 [ 2770.098707] ? __x64_sys_acct+0xae/0x200 [ 2770.102787] do_filp_open+0x1a1/0x280 [ 2770.106602] ? may_open_dev+0x100/0x100 [ 2770.110599] ? fs_reclaim_acquire+0x20/0x20 [ 2770.114929] ? __lock_is_held+0xb6/0x140 [ 2770.119001] ? __lock_is_held+0xb6/0x140 [ 2770.123066] ? check_preemption_disabled+0x48/0x290 [ 2770.128107] file_open_name+0x2c5/0x3b0 [ 2770.132086] ? vfs_open+0xd0/0xd0 [ 2770.135542] ? rcu_read_lock_sched_held+0x110/0x130 [ 2770.140560] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2770.146104] ? strncpy_from_user+0x2a8/0x380 [ 2770.150523] acct_on+0x7f/0x790 [ 2770.153809] __x64_sys_acct+0xae/0x200 [ 2770.157707] do_syscall_64+0x103/0x610 [ 2770.161610] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2770.166800] RIP: 0033:0x457e29 [ 2770.169993] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2770.188916] RSP: 002b:00007fbeee1d5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 2770.196624] RAX: ffffffffffffffda RBX: 00007fbeee1d5c90 RCX: 0000000000457e29 [ 2770.203894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 2770.211161] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2770.218426] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbeee1d66d4 [ 2770.225696] R13: 00000000004bdd46 R14: 00000000004ce0f0 R15: 0000000000000005 [ 2770.239635] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 2770.239648] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2770.239662] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2770.246840] audit: out of memory in audit_log_start [ 2770.310968] binder: send failed reply for transaction 449 to 9419:9434 [ 2770.317791] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2770.317804] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2770.334507] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2770.344477] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2770.347339] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2770.351036] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2770.359307] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2770.368517] binder: undelivered TRANSACTION_ERROR: 29189 [ 2770.375869] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2770.389456] kobject: 'loop2' (000000004811331c): kobject_uevent_env [ 2770.397381] kobject: 'loop2' (000000004811331c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2770.445663] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2770.457058] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:14:18 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000000058e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:14:18 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000600000a0000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) 18:14:18 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 18:14:18 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x9, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2770.552967] binder: 9471:9473 ioctl c018620b 0 returned -14 [ 2770.564722] Process accounting resumed [ 2770.572452] protocol 88fb is buggy, dev hsr_slave_0 [ 2770.577554] protocol 88fb is buggy, dev hsr_slave_1 [ 2770.582739] protocol 88fb is buggy, dev hsr_slave_0 [ 2770.587812] protocol 88fb is buggy, dev hsr_slave_1 [ 2770.594429] kobject: 'loop4' (00000000576122c5): kobject_uevent_env 18:14:19 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000000068e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 18:14:19 executing program 3 (fault-call:3 fault-nth:12): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) acct(&(0x7f0000000140)='./file0\x00') 18:14:19 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2770.600948] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2770.626847] kobject: 'loop5' (00000000bdd5969a): kobject_uevent_env [ 2770.634239] kobject: 'loop5' (00000000bdd5969a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2770.668056] audit: type=1326 audit(1550254459.058:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9477 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2770.673328] kobject: 'loop0' (00000000e0e7277a): kobject_uevent_env [ 2770.741655] kobject: 'loop4' (00000000576122c5): kobject_uevent_env [ 2770.749144] kobject: 'loop4' (00000000576122c5): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:14:19 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xb, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:14:19 executing program 0: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001600e70d017b00000000078e1584", 0x12, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2770.777218] audit: type=1326 audit(1550254459.108:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9477 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 2770.809336] kobject: 'loop0' (00000000e0e7277a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2770.824229] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2770.836841] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2770.853840] FAULT_INJECTION: forcing a failure. [ 2770.853840] name failslab, interval 1, probability 0, space 0, times 0 [ 2770.867011] kobject: 'loop3' (0000000077381589): kobject_uevent_env [ 2770.874370] kobject: 'loop3' (0000000077381589): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2770.875861] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2770.884335] CPU: 0 PID: 9489 Comm: syz-executor.3 Not tainted 5.0.0-rc6+ #73 [ 2770.898237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2770.901012] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2770.907592] Call Trace: [ 2770.907616] dump_stack+0x172/0x1f0 [ 2770.907637] should_fail.cold+0xa/0x1b [ 2770.907655] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2770.907684] __should_failslab+0x121/0x190 [ 2770.907702] should_failslab+0x9/0x14 [ 2770.907721] __kmalloc+0x71/0x740 [ 2770.907744] ? aa_label_asxprint+0x7c/0x150 [ 2770.907764] aa_label_asxprint+0x7c/0x150 [ 2770.907784] apparmor_secid_to_secctx+0x157/0x2d0 [ 2770.907802] security_secid_to_secctx+0x7b/0xc0 [ 2770.907823] audit_log_task_context+0xf7/0x170 [ 2770.907839] ? audit_log_format+0x110/0x110 [ 2770.917036] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2770.917868] ? from_kuid+0x85/0xc0 [ 2770.917889] ? ima_write_template_field_data.isra.0+0x1a6/0x210 [ 2770.917914] integrity_audit_msg+0x265/0x480 [ 2770.917933] ? integrity_kernel_read+0x200/0x200 [ 2770.917947] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2770.917961] ? ima_alloc_init_template+0x2c7/0x3b0 [ 2770.917982] ima_add_violation+0x187/0x1f0 [ 2770.922388] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2770.925495] ? ima_store_template+0x2a0/0x2a0 [ 2770.925515] ? kmem_cache_alloc+0x341/0x710 [ 2770.925539] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2770.925552] ? ima_d_path+0xbf/0x1ee [ 2770.925570] process_measurement+0x1093/0x1570 [ 2770.925596] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2770.925620] ? ima_add_template_entry.cold+0x48/0x48 [ 2770.925639] ? retint_kernel+0x2d/0x2d [ 2770.925669] ? refcount_sub_and_test_checked+0x136/0x1f0 [ 2770.925686] ? __sanitizer_cov_trace_const_cmp1+0x15/0x20 [ 2770.925711] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2770.925729] ? refcount_sub_and_test_checked+0x161/0x1f0 [ 2770.931454] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 2560) [ 2770.935052] ? refcount_inc_checked+0x70/0x70 [ 2770.935080] ? refcount_dec_and_test_checked+0x1b/0x20 [ 2770.935094] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2770.935108] ? apparmor_task_getsecid+0x94/0xd0 [ 2770.935127] ima_file_check+0xc5/0x110 [ 2770.935143] ? process_measurement+0x1570/0x1570 [ 2770.935158] ? inode_permission+0xb4/0x570 [ 2770.935182] path_openat+0x1130/0x4690 [ 2771.118117] ? kernel_text_address+0x73/0xf0 [ 2771.122543] ? __kernel_text_address+0xd/0x40 [ 2771.127055] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2771.131726] ? save_stack+0xa9/0xd0 [ 2771.135356] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2771.140458] ? kasan_kmalloc+0x9/0x10 [ 2771.144258] ? kmem_cache_alloc_trace+0x151/0x760 [ 2771.149104] ? acct_on+0x5f/0x790 [ 2771.152558] ? __x64_sys_acct+0xae/0x200 [ 2771.156635] do_filp_open+0x1a1/0x280 [ 2771.160443] ? may_open_dev+0x100/0x100 [ 2771.164443] ? fs_reclaim_acquire+0x20/0x20 [ 2771.168768] ? __lock_is_held+0xb6/0x140 [ 2771.172879] ? __lock_is_held+0xb6/0x140 [ 2771.176962] ? check_preemption_disabled+0x48/0x290 [ 2771.181983] file_open_name+0x2c5/0x3b0 [ 2771.185979] ? vfs_open+0xd0/0xd0 [ 2771.189433] ? rcu_read_lock_sched_held+0x110/0x130 [ 2771.194467] ? retint_kernel+0x2d/0x2d [ 2771.198412] acct_on+0x7f/0x790 [ 2771.201696] __x64_sys_acct+0xae/0x200 [ 2771.205599] do_syscall_64+0x103/0x610 [ 2771.209493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2771.214682] RIP: 0033:0x457e29 [ 2771.217886] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2771.236801] RSP: 002b:00007fbeee1f6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 2771.244511] RAX: ffffffffffffffda RBX: 00007fbeee1f6c90 RCX: 0000000000457e29 [ 2771.251796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 2771.259063] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2771.266332] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbeee1f76d4 [ 2771.273632] R13: 00000000004bdd46 R14: 00000000004ce0f0 R15: 0000000000000005 [ 2771.281423] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2771.282378] protocol 88fb is buggy, dev hsr_slave_0 18:14:19 executing program 1: seccomp(0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2771.294466] protocol 88fb is buggy, dev hsr_slave_1 [ 2771.306351] ================================================================== [ 2771.307886] kobject: 'loop1' (00000000f88d1156): kobject_uevent_env [ 2771.313883] BUG: KASAN: use-after-free in __lock_acquire+0x30e0/0x4700 [ 2771.313895] Read of size 8 at addr ffff8880a0f50580 by task syz-executor.5/9493 [ 2771.313897] [ 2771.313912] CPU: 0 PID: 9493 Comm: syz-executor.5 Not tainted 5.0.0-rc6+ #73 [ 2771.313919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2771.313923] Call Trace: [ 2771.313940] dump_stack+0x172/0x1f0 [ 2771.313958] ? __lock_acquire+0x30e0/0x4700 [ 2771.313976] print_address_description.cold+0x7c/0x20d [ 2771.332561] kobject: 'loop1' (00000000f88d1156): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2771.334483] ? __lock_acquire+0x30e0/0x4700 [ 2771.334501] ? __lock_acquire+0x30e0/0x4700 [ 2771.334515] kasan_report.cold+0x1b/0x40 [ 2771.334530] ? lockdep_hardirqs_on+0x380/0x5d0 [ 2771.334541] ? __lock_acquire+0x30e0/0x4700 [ 2771.334558] __asan_report_load8_noabort+0x14/0x20 [ 2771.334570] __lock_acquire+0x30e0/0x4700 [ 2771.334600] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2771.413811] ? try_to_wake_up+0xc6/0xff0 [ 2771.417898] ? mark_held_locks+0x100/0x100 [ 2771.422148] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2771.427339] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 2771.432372] ? futex_wake+0x179/0x4d0 [ 2771.436190] ? seccomp_notify_release+0x62/0x280 [ 2771.440959] lock_acquire+0x16f/0x3f0 [ 2771.444812] ? seccomp_notify_release+0x62/0x280 [ 2771.449565] ? seccomp_notify_release+0x62/0x280 [ 2771.454353] __mutex_lock+0xf7/0x1310 [ 2771.458145] ? seccomp_notify_release+0x62/0x280 [ 2771.462901] ? seccomp_notify_release+0x62/0x280 [ 2771.467652] ? __lock_acquire+0x53b/0x4700 [ 2771.472045] ? mutex_trylock+0x1e0/0x1e0 [ 2771.476103] ? mark_held_locks+0x100/0x100 [ 2771.480393] ? vfs_lock_file+0xf0/0xf0 [ 2771.484283] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2771.489890] ? fsnotify+0x395/0xbd0 [ 2771.493538] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2771.499072] ? locks_remove_file+0x2de/0x460 [ 2771.503484] ? get_nth_filter.part.0+0x1d0/0x1d0 [ 2771.508239] mutex_lock_nested+0x16/0x20 [ 2771.512299] ? mutex_lock_nested+0x16/0x20 [ 2771.516534] seccomp_notify_release+0x62/0x280 [ 2771.521114] ? ima_file_free+0xc9/0x4a0 [ 2771.525094] ? get_nth_filter.part.0+0x1d0/0x1d0 [ 2771.529867] __fput+0x2df/0x8d0 [ 2771.533222] ____fput+0x16/0x20 [ 2771.536592] task_work_run+0x14a/0x1c0 [ 2771.540479] exit_to_usermode_loop+0x273/0x2c0 [ 2771.545148] do_syscall_64+0x52d/0x610 [ 2771.549036] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2771.554218] RIP: 0033:0x411d31 [ 2771.557407] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 94 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2771.576333] RSP: 002b:00007ffc186a6120 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2771.584124] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411d31 [ 2771.591388] RDX: 0000000000000000 RSI: 00000000007402a8 RDI: 0000000000000003 [ 2771.598652] RBP: 0000000000000000 R08: 00000000007402a0 R09: 00000000002a47eb [ 2771.605918] R10: 00007ffc186a6040 R11: 0000000000000293 R12: 0000000000000000 [ 2771.613178] R13: 0000000000000001 R14: 0000000000000ac4 R15: 0000000000000005 [ 2771.620458] [ 2771.622081] Allocated by task 9495: [ 2771.625710] save_stack+0x45/0xd0 [ 2771.629171] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2771.634105] kasan_kmalloc+0x9/0x10 [ 2771.637731] kmem_cache_alloc_trace+0x151/0x760 [ 2771.642394] do_seccomp+0x73e/0x2250 [ 2771.646114] __x64_sys_seccomp+0x73/0xb0 [ 2771.650191] do_syscall_64+0x103/0x610 [ 2771.654089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2771.659263] [ 2771.660882] Freed by task 9495: [ 2771.664190] save_stack+0x45/0xd0 [ 2771.667641] __kasan_slab_free+0x102/0x150 [ 2771.671875] kasan_slab_free+0xe/0x10 [ 2771.675684] kfree+0xcf/0x230 [ 2771.678784] do_seccomp+0xafb/0x2250 [ 2771.682502] __x64_sys_seccomp+0x73/0xb0 [ 2771.686571] do_syscall_64+0x103/0x610 [ 2771.690500] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2771.695676] [ 2771.697297] The buggy address belongs to the object at ffff8880a0f50500 [ 2771.697297] which belongs to the cache kmalloc-192 of size 192 [ 2771.709950] The buggy address is located 128 bytes inside of [ 2771.709950] 192-byte region [ffff8880a0f50500, ffff8880a0f505c0) [ 2771.721811] The buggy address belongs to the page: [ 2771.726737] page:ffffea000283d400 count:1 mapcount:0 mapping:ffff88812c3f0040 index:0xffff8880a0f50700 [ 2771.736190] flags: 0x1fffc0000000200(slab) [ 2771.740430] raw: 01fffc0000000200 ffffea00029061c8 ffffea000230f248 ffff88812c3f0040 [ 2771.748310] raw: ffff8880a0f50700 ffff8880a0f50000 000000010000000d 0000000000000000 [ 2771.756181] page dumped because: kasan: bad access detected [ 2771.761888] [ 2771.763508] Memory state around the buggy address: [ 2771.768431] ffff8880a0f50480: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2771.775794] ffff8880a0f50500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2771.783265] >ffff8880a0f50580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2771.790656] ^ [ 2771.794045] ffff8880a0f50600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2771.801411] ffff8880a0f50680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2771.808790] ================================================================== [ 2771.816136] Disabling lock debugging due to kernel taint [ 2771.821595] Kernel panic - not syncing: panic_on_warn set ... [ 2771.827478] CPU: 0 PID: 9493 Comm: syz-executor.5 Tainted: G B 5.0.0-rc6+ #73 [ 2771.836044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2771.845837] Call Trace: [ 2771.848434] dump_stack+0x172/0x1f0 [ 2771.852116] panic+0x2cb/0x65c [ 2771.855407] ? __warn_printk+0xf3/0xf3 [ 2771.859308] ? lock_downgrade+0x810/0x810 [ 2771.863468] ? __lock_acquire+0x30e0/0x4700 [ 2771.867801] ? trace_hardirqs_off+0x62/0x220 [ 2771.872203] ? trace_hardirqs_off+0x59/0x220 [ 2771.876615] ? __lock_acquire+0x30e0/0x4700 [ 2771.880939] end_report+0x47/0x4f [ 2771.884393] ? __lock_acquire+0x30e0/0x4700 [ 2771.888746] kasan_report.cold+0xe/0x40 [ 2771.892731] ? lockdep_hardirqs_on+0x380/0x5d0 [ 2771.897308] ? __lock_acquire+0x30e0/0x4700 [ 2771.901631] __asan_report_load8_noabort+0x14/0x20 [ 2771.906576] __lock_acquire+0x30e0/0x4700 [ 2771.910731] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2771.915847] ? try_to_wake_up+0xc6/0xff0 [ 2771.919913] ? mark_held_locks+0x100/0x100 [ 2771.924162] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2771.929350] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 2771.934379] ? futex_wake+0x179/0x4d0 [ 2771.938193] ? seccomp_notify_release+0x62/0x280 [ 2771.942944] lock_acquire+0x16f/0x3f0 [ 2771.946738] ? seccomp_notify_release+0x62/0x280 [ 2771.951490] ? seccomp_notify_release+0x62/0x280 [ 2771.956246] __mutex_lock+0xf7/0x1310 [ 2771.960044] ? seccomp_notify_release+0x62/0x280 [ 2771.964812] ? seccomp_notify_release+0x62/0x280 [ 2771.969566] ? __lock_acquire+0x53b/0x4700 [ 2771.973815] ? mutex_trylock+0x1e0/0x1e0 [ 2771.977875] ? mark_held_locks+0x100/0x100 [ 2771.982106] ? vfs_lock_file+0xf0/0xf0 [ 2771.986004] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2771.991537] ? fsnotify+0x395/0xbd0 [ 2771.995170] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2772.000707] ? locks_remove_file+0x2de/0x460 [ 2772.005113] ? get_nth_filter.part.0+0x1d0/0x1d0 [ 2772.009870] mutex_lock_nested+0x16/0x20 [ 2772.013930] ? mutex_lock_nested+0x16/0x20 [ 2772.018163] seccomp_notify_release+0x62/0x280 [ 2772.022741] ? ima_file_free+0xc9/0x4a0 [ 2772.026717] ? get_nth_filter.part.0+0x1d0/0x1d0 [ 2772.031470] __fput+0x2df/0x8d0 [ 2772.034747] ____fput+0x16/0x20 [ 2772.038022] task_work_run+0x14a/0x1c0 [ 2772.041914] exit_to_usermode_loop+0x273/0x2c0 [ 2772.046497] do_syscall_64+0x52d/0x610 [ 2772.050383] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2772.055568] RIP: 0033:0x411d31 [ 2772.058765] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 94 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2772.077681] RSP: 002b:00007ffc186a6120 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2772.085383] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411d31 [ 2772.092666] RDX: 0000000000000000 RSI: 00000000007402a8 RDI: 0000000000000003 [ 2772.099945] RBP: 0000000000000000 R08: 00000000007402a0 R09: 00000000002a47eb [ 2772.107237] R10: 00007ffc186a6040 R11: 0000000000000293 R12: 0000000000000000 [ 2772.114516] R13: 0000000000000001 R14: 0000000000000ac4 R15: 0000000000000005 [ 2772.122787] Kernel Offset: disabled [ 2772.126408] Rebooting in 86400 seconds..