a47b8a7469accbf1aceab7c9a599330e9dcc52946", @generic="acc551e520467ed7e8993c3c7149b8f0d26ca28a688015697de43cf3e628b03a5c46f70030aeea987e0e4fd487f5e6d00e165bbfa9519aee5ffb47d412fe8b9b17ea3422b7d3936cd7c18559378d30", @typed={0x2d, 0x4c, 0x0, 0x0, @binary="478985bd4057452151c39c7ad662556c55f44792bbd920c07322928f8bfcd71a9b20353ca79badcfee"}, @generic="98012c0d0f9bc3f8a73f57c733d6385820ca29616a127d4a2fd9450ffce3131fa6be3514091b47714a94376c2c0ff608f347bdbb44454e8d08bbbe9325f4c0ca48fc49264afa5c2ad54add834bf226a1008049fa63f73caee1d31faf81d76a14521f02497eec6bc703987ff29a39938053d4f9da9a75fd7f3613a4565e3110b7c122238f6b0632e0d4641f0cf5f7f9123464cd8efc20ef", @nested={0x161, 0x92, 0x0, 0x1, [@typed={0x8, 0x5d, 0x0, 0x0, @u32=0x51b}, @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@loopback}, @generic="ae0fd2fe4d40da8034f6e7abf2d7bfd2b7adc1f02198abeff5ee08e677cc20dc327fa3506ef6a4ee88b09725e5ce1deea006fe61dd5021056947999cc3a6ced985eed993572a0d31c48df45e8b341199d9490f65d297ad", @typed={0x14, 0x2f, 0x0, 0x0, @ipv6=@private0}, @generic="6f8f797f08291c26d876d3e48fa1443cb4d348d043cf5980b1c292e875b735526f5514273ba93640a313cbebf3c77c5719f8678b7eadec62faef6454e0a50bd48044f4714a2aca05543cf749d1a5711338235378fbc964cfa9a7a674", @typed={0x46, 0xb, 0x0, 0x0, @binary="3d94185d40caa3d826ca3619716b6d6b15a7ac0b464dcbf95f7206588bcd6ce9b55b08a4d84714eda4aba9ee3c86c317e3b6da39f27f889be66377e735037361b71e"}, @generic="241d3b8fafa4244f4c58a1ae146cd92afbcc9f7d5b387877a3811de13c6d96006baddbb4eefdb762be0b2feb1064648e6dae"]}, @generic="fc4a2bbd790985124e96196401202241dd865ecbdec9cf1114229b6649f228293ab8"]}, 0x440}, 0x1, 0x0, 0x0, 0x90}, 0x800) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x5, @empty, 'bridge0\x00'}}, 0x1e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x9) sendmmsg(r3, &(0x7f00000002c0)=[{{&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000000)="42651f5f254931038a4d", 0xa}, {&(0x7f0000000200)="04b29e7d27194ce5903376fa159fabbd447d42b33cae381ccfaa257081ebe89d361108699d824ae70ae135070460e6f764af31304a0aabae05f3d4dd62a4f091d98014dff24f09dd44390cd16b698d2846ac6533fac124f8a3df9d418ca9ab3ca8292c26c7b500d0ed2cd8551d56168ea40798f97b50b88e87d0ab86a0f174a3327944265ea39f549e4790d53c", 0x8d}, {&(0x7f00000000c0)="af6d147074f4478350d12106a39aeee8dd8a8efeec8dad7831662990affc512b1e3cd0ee5ea93eb73d2cb3c5", 0x2c}, {&(0x7f0000000380)="cf40bf8b42e54177ef234a7dc91a40ed12478cd46f37f2566bcf7c21b8934ccac99d9528ae05027deae2eeca5a2fac05c74eeb69b0dfff4dff0304d1ecaf24751bcc7685713fe79316e9256ef5fd8ac75ef17624e1ae", 0x56}, {&(0x7f0000000400)="9abea083356ec57682eac95110a882d3f09ccc89ca4fc9e202bb9de37e605d4f95085216a4f4fc4ee60e0bd19cfd311ee3d3db607d079cd592fb9efdf9ac4dece7aa8a094b6a7cb9f5ff36621066c528bc3a9f76a9e14ecc53a04432f3030126", 0x60}, {&(0x7f0000000480)="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", 0xfd}, {&(0x7f00000006c0)="2062917f85dd5c0ae1b43deb0c07f15c0269c02cd0daccfeac8dc8eb3033827b0310fead4e9b0ea2dfdc1ac852539838d6d3ded2de86b61639f642d4d845a0d9e7934ae3fda62b3b58308f7a88afb42c3785c046cea12a1d0ecb59e00cf04ab304b6470dd73d7189401c182596e30b2616e99ca9e0b181279c082f21768845c5eb8cb2dd31d1fcb406dbfe870761f2044990f57f6b84ddd85ae9e6c21fe297d10237efaa9cea35081c64d0d64f87e8dccf160f7eb00058750d1c6eb7a0b277d0d7a16de3cb89bb0c41e58dca18828bcd2afc99d6f906a4f655f6b2c9925adc2898decd5429232762915884130ca0bedd5bb3f5678617ad132713b0a62c9cc0e0db0e6d6eaaab008ac31b931c7432a06b75702b7481417b3f8841128c8014590701f6650f12dfe59d9ba9bee7ce040ee2f80bacd34049390c9b8b2a07b0fddda283414f97c8ddbd1826a0bc6b9113e51783c8e216379dea5d2e5c31b535deadbc066cf1ebe19c03ad3a4bf6988ea991b7c0202b6107992afe9a2c2931b1fd4e7677c08077f9c3f0b644783d96230ee32e6392e12fdc46617743b0768162de7b21ae01b98f1090185879ac6d06614c465ca36ddcb3d7ffccae81ee5c6b519f60a9854c4753eb66286c5dab4225db5ffb6994ccf4b45182a3085d50ba87938c1c1f717d49e0e2e202e39d60d868ac9e430bc1733af7feee5b4abb7885c17f1f5594fec81b68ec8cedd72b73e4e7fd45e01584f43c610108e6e299a35128dde72df0ff841b46aec7b773a452d16897bdfd145f3a5312b10430568e98cc3937b562371000a04d5c71c2ff23e11d08270ea27d4a7a6a10ce0190302a6f23513e73be0579144767f493a7cc126b473ebc263aaf26c798c2c5ad9baf3b023627cb102495c7bfcd79fd153b09dbb4f57b854a35244a55935efeafda29ad874d16dcc4e7cbc2ae76ded50782baa8d22aff31170ab2a76f4887313aad2724d28d7af7ac004b13ea7bb3f149880dca9a13f24f5dc6779221f627046d8dc5758dccb9ae2024e7f647aa25864d36a9e35bd8c2e9869065af67fdb465c0bb5dcd8423f74b44704643b11dd7e233f677ae8c4fd44867fc24ab0e46cc694401fbf4992b85997415b8b6f2d708ebbc1528c7276d69ab68b457ed985a144c52be0c69561b64c374e596f22d8e7c36d866c1af13abd8d9f592bdea056826650a84ea13d4874aa5e8ef7d8cb8e815bbcf8b534bbe8b9783dedf3375a589c9a86fd3300e24f8c852162e3ca68bd7aba1ab4b3759fae9052cdaf21da074930ec33722d69505bba57862ecb86699ed5c3cbbc801c969f2de2ac1db6a93a4c5ad7cc064b116da875fdeded4111e985a292434e8e8721b6b1b238963c16c3e4c824c1b472339f4ccc5ef9dd43d371398efeaf423d23eb323f0c8924f8879d776866ce8c57a595adc3ba064a83f6768f70d457d18340a3b8a854491a013b41f65f4d7aee278650bf8a174a9118170f261323292b15fa637be06e495deaa85aba7288a8fc4727982af01f5c78826d536793df74e365c6d42bfc803077fa7092d248d6a9223223a34d42bf72e8a9185066e54b253e1af5ef7bb848f85fd7371c91aea1ea2b225f69ce6687eb0cedeb890eb38915fe37783e08d9086502a8e76f99e88afd202d9cf253421bb8e11031e41c2ef7f863746b7b20ee3b41be03633d0aabc5dccecf370ecbb3052e8c7547fdb0cb940248d771d5e184486188dfad8b75b20d7bfe323eba943372c481f2b803ab84a98872522d72f6f510f25c21e93ca72969fc41dd15a8bcaffb4af5d1237efb54c8deea26d4c845a0e52ab164faeb0f02847f2a43d0797b5823144ddb4fe2fd2573e60bbac1279fe47fe3a20a3a36619659fc05727ec73f06d27097cd4f12fd02d75c139a8cd51449887852d378dd2ebdefdb2ac04e090390a0c734ec359260406c16109d2ae89091d92f453359fccd2d899b44ed6498a7c55f9a53eb46649d106a633cb7a4c630691d13308bc7612a5378b506c4cce9e4451046be61dbb0575d5611594b2ec7bfd0e164e4bfb08866727f904704a1a3ffdb3cba3986cef1ce5668be91f37b1fc833f0f311c3cfa09a5b42913559b9c15276b5bb4543385af63fccc22f63d1ed5ae6f111f65bfa013487b81ba5eba2893d4e8b4fbdd28b88026ae5268c6e73a4c69f4c1901af1b6fc9d320cf2a0b948d4e338ec26bc35e809d9145c2fdb175873b2d90c950649f34bb21f728583f5a0de3eeee4d37858b63b56045ac39395db0f64b9ff7792f5ab68b53d153a3b9302a98ce5fc30c494a084df305b16e7b63f6b157d9cad8702e2be1bdbb5a3da6fdda62b7dc7a375c32700fe056a4b13f50d079161ead84fc35f0e715b966ba545fcfb65fb595a59ddf2f0509c86c2acd98e8e6747588413f04bdf92e0678437cee6c1a6f53ca0dfd10177da1a7bdbb4cf41d6c48c38c9170a360a0603093d0f15d4986502f0de10d4cde54137140c8bd87b2aa6adbb8542cb2c243813cfcefbc66252f669fd222283006203c801b900156d36778903943211f9623c847a3e5c37d3f57dbbdd88e499cdc2b5dd569a69bd17601869517a2095ed432ab0d44053c6c09caadf212bc08784ab954ba798a85a24102f4e13a6f10c2228d2f6c97894ed20a50f18685c8ac9e561b4432cb8a888175db8df90137f734590ad27230053ef4df4ee47c279628532b515593b704fede9dcee2ab8e747192a40669dc5c172ff68fe74b96a67ad41f3303be71ccf1372964194ed818691e7b0dece4e4f32c68c6ac89873bba6476d174fe653427056e658efdf39e990d57f9dd44f73cec9b1fd59bd2cbe32777e7d530710ad36d4b85c79da2a3735f89a87e7731ccc8781595a77c07baa19a1a3fdd0a2f999286381e8415f600cb7491e2b09688afdcc72031b556ae9422c9c01222ddec8c86e9a760d3357348cedf9c5dea37277dff1ab3506d23fcc731ea6ada6455040f6d3cb7d729b6f0bbcfe87eb609acc2617060552d0eef8f8e44af1cfa98c49d7255f8f5fce398a9ad0a8834e40c58293c135cc71f05cfa95a4054c49677c1ea50957fe17ac6200cefadcc9c355d0e4d588dfbe65f0cb28cad2fd303ffd548144c16059574d0fccb77430fc5d59a9a86e51225862161c2326901d451b316c8f0f2a6437e805f87f46342142a92a2c322b9bf61ce0348d846da6dd5f53fd809cd9b9bfe1bebe05ea1f1797813ade8bc563a618dc19b458dfd683918fd68d77370fa28e335be8e8de08d32f2d91eedd6283601e603267aae7559dad971a20a2e48205d8814145f21af7220c43a6372c34e2d2067db04ba5995a246bfdcd92c4e4a98cec7d84b13079ed87f96171daca7d630fc5ce91dfc492d908df200bebc39e9528d0071bbf076582fc787c02c80bc9ce5264bbc633c4b74678588d1d1b037b60ea5b9f8989517564e71f25e236aaa6cf794aabc5d8480cdff0269d50470066307c2187198900fb76de79ee3c622627770e39f54778f31ee51fd1bac542ba5eeb9a09cae07974d402b7a39db960c219b7332ab82636fae6c609ae83c7dbdf428c670c4609c9107bae258e24787e3ee63a9f7b31e127bc7aa3897e44c32d0ec7ac7f762c4eb0f6eccc570a2376866c45865fd555c0c5b08052c37a769aa83ec4b6c5d174478b5789203f2d8316b8f4f25851ce8a7e9a031fd829998ac1fa3f3de219a7bed92a25d0d18f1d0684b505e1b1310e45d8fb72ab2406289d5f427dc4178c7246b7d23f259e9152fd4b15544d9b619ad3227129f1a8ae987a9e30a7d4913cecdbc8fa8bf94434711d6cc08e7b5a529591a55cc81de9838dcccc2787ea9da244c71d614854c8dd7711feea14277d368273580882f9dfc0cf4997c9acfd4dd79d99c381038eee8ea31ffb8bc54e2021667abb3c7409790804ec04357f67220f3242658836c8e0a3d272d898c0b5ca6b267236d5f1da4eab56ce22cdff83a89af8d37ff0f473eed486db9d6dd67d18ced8d8436bd41d7cea9d2654e2157b6feb96bd5ab845f7b5730523a1c6db6a60ace2b1a8d40fc530fd9e81809654cdac17328d48838522366faad4684dbfa2e4fbf5c0733109fb54631ff393fbec15843f64692ec0d97a7f5334ba8b3da4002535eda5ae61ba94c34c296c1eeef9d65273e3db18158b2013b4f13fb2cb6589a797b99d266e93e51eaf313fb031a4380747cf1943d5d5b6a4e3e4ffa796a4ebfa6371d6a7e2f3215ca7fe82fdc188a94f4d3d9d33606e04f6583dd211a3937a4fb19263cd88384906471cc03afe0625387bc0f0030cb2d9f0982de623afdc4fe06cbaf71bad9416b9064022b9d8fff031ebf340fb37d168b9c899933148f57791e1903f4b730eda93bf8f4c1e58cbc2172298b852b73fd7d42087568716fbcdaf9aa3bcf4559e0c0063f7cdfe800868d16df3ec7bb850bdeabe2217ffbe7d8e6d274914b505fd28abb5b46e0277146b225a274471691ed6535e869579004173745995242fdf412b3ef9cace63ca015ac6f6a9353006ebdbd4f0d03f2512e0522720fe61761b34634aad3fb339f10847a34e5593c74c3f65753cb6b6f4b6125569168da715b581f9bccd804341255bbb786caa28a8e70892b3afa54997510e240be921600e5d5117b38ed3dc02b97824b63c8c5b5d58827c7d77648980c9796177ce0d664ccc2a9b5c7e65fa0dab9a7af12534d85863015df430173f0dceff7c27b35f4c497e30b0288811315cdd46424e2e7b54c14e01fd6937de8ad7e3a7ece37e9d54f5c6c1b9dfd80d8c8c067e1edce1dc08442b1e7fafd2d5cf66bf36d3d4f8df2ac16d939e68408d44e4ff42252966fbc905aa79ecfc329152dbd8f42d3afa336baf45869ac0f085db788f7cb15e0b17f0dd75d6f79f441d6b953f346207a8a8520a40cb1bd9727250d679e08c695aae47e5fb3e6bd3f581a700f994ec42990fc8c5d14893c8952f4ab2e1cb9695cd7fbb68ee30004df1880c80e52580f16612598a637ccbdedc1bc33791276198eec53a75997e65cba5ce85a768431fbc70d9b3caf13ea02cafb714ba250181a947e8513b2282cf7f407d0d91b29694de63fbdcba4c855e05f2b3140096784fca645192adb7832609665a23d5f05796f3e09148dcf998074485f71989de09e068a46ea161a7a0b2510dbf303c68555e8b96d8f7b6d941d786f0f58fa865af67bfc838db6193d54c6602d4be8dda76d307b9a6463c14840dab8c7eafaba79a0b4fd3b28522ef1d5bbb47460cf2735c2b4b02c70b457b81d65b96121cec9ea705cffb94240b5afdb6dafb8a720f53084db4b36f634ce224e9208763831f1564b6476add8032e3a79bf14f2aa84af35440ef2bf2af9aa91a6ffa17c0ecd68240eb769a9b425f753e50bcae1b41d618e34f8196503b56aafdc8120b580877b0afe66d1203a1ff0957b4dde266accbcc7b6a9736eefd07bc1b3f9dff84bf32ec6d0f01888ca4c3c2de380dab3c4b660fba8338ebc560f0fecf36b5dc425ddc4d140ed3803cefa15f76167fa90e78e3034081af750aba6d8b43fc30b607ccdbd7e34784bf6e315bb83736089e2f035ea8e2d71b1f14815a9243fdd57734309bd41cc401820d67953d11ee448a16569352937e8aed27a84ce4a8fc34c8d4d2127092380c270b0c3664fb31a9316679db22717bfdaf2556919ef866f767406e71517832b4af7c740ec6ce201cb2da3f5c13439eb07ad58dc6b97e678b762aa338c6a4b34c061bd02470a1b9b41882552b0ae448941feda5832b9118c32efff1bab7", 0x1000}], 0x7, &(0x7f00000016c0)=[{0xc8, 0x102, 0x8, "58010b9df1807cdbc972479c1f4a0c2c188d9762113817f156ec38bd6930260b04a4576c5f7514e116073f8ebd14296f74dd8d705272fd253bfa6e649adb8462e9c51f6dd17eac3306e1e000a2c536bdc89de484e9c997c646ddf05bc23daec4987e726cc1ab7f9c297ee0173c29bcb33099d6f7ac3c6db2c239ddb94d63309b0a20f36a10a593cbea602d4456733ba4a0349d33fb22f88e884fec96f909f3f8103b68cf1dcfe51fc1e6783c81219fc00fde"}, {0x100, 0x0, 0xb4, "5e69cb25ce48e72480ec5af6b88893d37aac9a6185e6f71f92716300f87ce31439afd1831c1794f2efb51412604ca647fc50c6346ff3d210b4442843f8ff80e16b134da10f45c3055900199429175b7e36582018d16e65c1e45c5dfd0eac19e28e6e74b5760be2d7523c2bc78b0006a7b880f112e287e543e3f91157408c46904a6c306a458cc0ddf2e9c2397be5f73677a5338cda997506dbe4824e320f3895dd842be38995184e1c1fb795cd03f930f8c1c16df684ec816d4937245fec5c1825e76608193f545a309801cea2c008136f2aa68d775835013d90e1836c49d643c3ff82b387a3751fe2712d"}, {0x30, 0x10a, 0xd7, "b053dd3e167a7a1daf441f51a21fb8c162a55058b8e41a2d64c0d69efcc1a2"}, {0x98, 0x0, 0x2, "1705c3f0f5d77a75a97f980b4cdc25e0490183a4968ca9cdfe17c02049c547d7f02db73f0f91654e0e636a7fd497f8e7d9d254bb1261bef6b9097c8da2efe67c9ae8325f74e5b104725f31ebc4c72a816d059917ed3db095245957fbebfca1c05bd003463e56692ed703e6b7da6c1d5e53796c2225fc310d8722c6f77010fac8f4"}], 0x290}}], 0x1, 0x0) 07:18:09 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xff01000000000000, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:09 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 844.000576][ T26] audit: type=1800 audit(1588576689.588:771): pid=19662 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16290 res=0 [ 844.028603][T19662] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:18:09 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x5, @empty, 'bridge0\x00'}}, 0x1e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f000000d180), 0x40000000000010c, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 07:18:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0x3b010000}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 844.142148][ T26] audit: type=1800 audit(1588576689.728:772): pid=19662 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 844.183644][T19672] minix_free_block (loop4:10592): bit already cleared [ 844.226014][T19672] minix_free_block (loop4:9523): bit already cleared 07:18:09 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 844.266317][T19672] minix_free_block (loop4:44211): bit already cleared [ 844.273355][T19672] minix_free_block (loop4:36301): bit already cleared [ 844.280304][T19672] minix_free_block (loop4:21375): bit already cleared [ 844.287244][T19672] Trying to free block not in datazone [ 844.293728][T19672] minix_free_block (loop4:14418): bit already cleared [ 844.301917][T19672] Trying to free block not in datazone 07:18:09 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xff0f000000000000, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 844.579618][ T26] audit: type=1800 audit(1588576690.168:773): pid=19699 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16035 res=0 [ 844.619183][T19699] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 844.748085][ T26] audit: type=1800 audit(1588576690.338:774): pid=19699 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 844.758847][T19704] minix_free_block (loop4:10592): bit already cleared [ 844.772395][T19704] minix_free_block (loop4:9523): bit already cleared [ 844.780540][T19704] minix_free_block (loop4:44211): bit already cleared [ 844.787943][T19704] minix_free_block (loop4:36301): bit already cleared [ 844.795315][T19704] minix_free_block (loop4:21375): bit already cleared [ 844.802654][T19704] Trying to free block not in datazone [ 844.818625][T19704] minix_free_block (loop4:14418): bit already cleared [ 844.826168][T19704] Trying to free block not in datazone 07:18:12 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0x3b010000}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:18:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:18:12 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:12 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x5, @empty, 'bridge0\x00'}}, 0x1e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x40, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x2, 0xb294}}, 0x30) sendmmsg(r2, &(0x7f000000d180), 0x40000000000010c, 0x0) 07:18:12 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xfffbffff00000000, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:12 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 847.097340][ T26] audit: type=1800 audit(1588576692.688:775): pid=19719 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16368 res=0 [ 847.122820][T19719] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 847.282886][ T26] audit: type=1800 audit(1588576692.818:776): pid=19719 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 07:18:12 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:18:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 847.429867][T19730] minix_free_block (loop4:10592): bit already cleared [ 847.437002][T19730] minix_free_block (loop4:9523): bit already cleared [ 847.443717][T19730] minix_free_block (loop4:44211): bit already cleared [ 847.451056][T19730] minix_free_block (loop4:36301): bit already cleared [ 847.458184][T19730] minix_free_block (loop4:21375): bit already cleared [ 847.465388][T19730] Trying to free block not in datazone [ 847.470884][T19730] minix_free_block (loop4:14418): bit already cleared [ 847.486086][T19730] Trying to free block not in datazone 07:18:13 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:13 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xffffff7f00000000, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:13 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 847.773035][ T26] audit: type=1800 audit(1588576693.358:777): pid=19766 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16363 res=0 [ 847.810430][T19766] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 847.887742][ T26] audit: type=1800 audit(1588576693.478:778): pid=19766 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 847.899844][T19774] minix_free_block (loop4:10592): bit already cleared [ 847.915914][T19774] minix_free_block (loop4:9523): bit already cleared [ 847.922729][T19774] minix_free_block (loop4:44211): bit already cleared [ 847.937080][T19774] minix_free_block (loop4:36301): bit already cleared [ 847.944020][T19774] minix_free_block (loop4:21375): bit already cleared [ 847.953031][T19774] Trying to free block not in datazone [ 847.973867][T19774] minix_free_block (loop4:14418): bit already cleared [ 847.998235][T19774] Trying to free block not in datazone 07:18:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:18:15 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8940, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) fallocate(r1, 0x10, 0xffffffffffffff01, 0xf4c7) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x5, @empty, 'bridge0\x00'}}, 0x1e) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f000000d180), 0x40000000000010c, 0x0) socket(0x9, 0x6, 0x8001) 07:18:15 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xffffffff00000000, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 850.172113][ T26] audit: type=1800 audit(1588576695.758:779): pid=19790 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16360 res=0 07:18:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:15 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8941, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 850.216868][T19790] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 850.319483][T19790] minix_free_block (loop4:10592): bit already cleared [ 850.329079][ T26] audit: type=1800 audit(1588576695.918:780): pid=19803 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 850.357103][T19790] minix_free_block (loop4:9523): bit already cleared [ 850.409606][T19790] minix_free_block (loop4:44211): bit already cleared 07:18:16 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 850.461649][T19790] minix_free_block (loop4:36301): bit already cleared [ 850.533976][T19790] minix_free_block (loop4:21375): bit already cleared [ 850.568048][T19790] Trying to free block not in datazone 07:18:16 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 850.583606][T19790] minix_free_block (loop4:14418): bit already cleared [ 850.623324][T19790] Trying to free block not in datazone 07:18:16 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:16 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x400000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x5, @empty, 'bridge0\x00'}}, 0x1e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x20182, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f00000001c0)=0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r4, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$TIOCMGET(r4, 0x5415, &(0x7f00000000c0)) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) sendmmsg(r5, &(0x7f0000000200), 0x4d, 0x40000) [ 850.868043][ T26] audit: type=1800 audit(1588576696.458:781): pid=19838 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16372 res=0 [ 850.899144][T19838] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 850.919703][T19838] minix_free_block (loop4:10592): bit already cleared [ 850.939479][T19838] minix_free_block (loop4:9523): bit already cleared [ 850.971012][T19838] minix_free_block (loop4:44211): bit already cleared [ 850.985997][T19838] minix_free_block (loop4:36301): bit already cleared [ 851.004289][T19838] minix_free_block (loop4:21375): bit already cleared [ 851.029363][T19838] Trying to free block not in datazone [ 851.037405][T19838] minix_free_block (loop4:14418): bit already cleared [ 851.047042][T19838] Trying to free block not in datazone 07:18:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:18:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:18 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:18:18 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r1, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000), 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f00000000c0)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x5, @empty, 'bridge0\x00'}}, 0x1e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f000000d180), 0x40000000000010c, 0x0) 07:18:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 853.269969][ T26] audit: type=1800 audit(1588576698.858:782): pid=19860 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16363 res=0 [ 853.298539][T19860] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:18:18 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 853.423591][T19872] minix_free_block (loop4:10592): bit already cleared [ 853.431262][ T26] audit: type=1800 audit(1588576699.018:783): pid=19860 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 853.485882][T19872] minix_free_block (loop4:9523): bit already cleared [ 853.552558][T19872] minix_free_block (loop4:44211): bit already cleared [ 853.624297][T19872] minix_free_block (loop4:36301): bit already cleared [ 853.660074][T19872] minix_free_block (loop4:21375): bit already cleared 07:18:19 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 853.683854][T19872] Trying to free block not in datazone [ 853.713234][T19872] minix_free_block (loop4:14418): bit already cleared [ 853.748935][T19872] Trying to free block not in datazone 07:18:19 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x3) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:19 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 853.963939][ T26] audit: type=1800 audit(1588576699.548:784): pid=19901 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16372 res=0 [ 853.970602][T19901] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 854.064837][ T26] audit: type=1800 audit(1588576699.658:785): pid=19901 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 854.077478][T19907] minix_free_block (loop4:10592): bit already cleared [ 854.089066][T19907] minix_free_block (loop4:9523): bit already cleared [ 854.098817][T19907] minix_free_block (loop4:44211): bit already cleared [ 854.106023][T19907] minix_free_block (loop4:36301): bit already cleared [ 854.112934][T19907] minix_free_block (loop4:21375): bit already cleared [ 854.120458][T19907] Trying to free block not in datazone [ 854.126415][T19907] minix_free_block (loop4:14418): bit already cleared [ 854.133328][T19907] Trying to free block not in datazone 07:18:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:18:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x200000) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x520, 0x100, 0x200, 0x200, 0x2a0, 0x200, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}, {0x0, 0x0, 0x7fff, {0x7}}}, @common=@icmp={{0x28, 'icmp\x00'}, {0xb, "eafb", 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x0, @local, 0x4e20}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x41}, @empty, 0xff000000, 0xffffffff, 'vxcan1\x00', 'vlan1\x00', {}, {0xff}, 0x62, 0x3, 0x68}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0x4, [0x3, 0x2, 0x4, 0x3, 0x2, 0x3], 0x0, 0x3}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x9}}}, {{@ip={@loopback, @remote, 0xff000000, 0xff000000, 'veth1_to_bond\x00', 'wg0\x00', {0xff}, {}, 0x11, 0x3, 0x1}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x3, @rand_addr=0x64010101, 0x4e22}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'gre0\x00', {0x40, 0x7, 0x6, 0x3f, 0x80000000, 0x40, 0x0, 0x18, 0x20}}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x1}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[0x4e24, 0x4e23], [0x4e20, 0x4e20], 0xfe, 0x10, 0x4, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x7, @multicast1, 0x4e23}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x5, @empty, 'bridge0\x00'}}, 0x1e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f000000d180), 0x40000000000010c, 0x0) 07:18:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) sendmsg$rds(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:18:21 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x894c, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:21 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x4) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:21 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 856.358569][ T26] audit: type=1800 audit(1588576701.948:786): pid=19916 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16360 res=0 [ 856.396387][T19926] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:18:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 856.490739][T19926] minix_free_block (loop4:10592): bit already cleared [ 856.502911][ T26] audit: type=1800 audit(1588576702.088:787): pid=19916 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 856.521043][T19926] minix_free_block (loop4:9523): bit already cleared [ 856.567681][T19926] minix_free_block (loop4:44211): bit already cleared [ 856.607817][T19926] minix_free_block (loop4:36301): bit already cleared [ 856.645210][T19926] minix_free_block (loop4:21375): bit already cleared 07:18:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:22 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 856.685569][T19926] Trying to free block not in datazone [ 856.701285][T19926] minix_free_block (loop4:14418): bit already cleared [ 856.711224][T19926] Trying to free block not in datazone 07:18:22 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x5) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x5, @empty, 'bridge0\x00'}}, 0x1e) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x5520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f000000d180), 0x40000000000010c, 0x0) [ 856.994726][ T26] audit: type=1800 audit(1588576702.588:788): pid=19961 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16366 res=0 [ 857.029797][T19961] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 857.117481][ T26] audit: type=1800 audit(1588576702.708:789): pid=19961 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 857.133753][T19966] minix_free_block (loop4:10592): bit already cleared [ 857.155727][T19966] minix_free_block (loop4:9523): bit already cleared [ 857.162436][T19966] minix_free_block (loop4:44211): bit already cleared [ 857.196110][T19966] minix_free_block (loop4:36301): bit already cleared [ 857.202955][T19966] minix_free_block (loop4:21375): bit already cleared [ 857.210205][T19966] Trying to free block not in datazone [ 857.216109][T19966] minix_free_block (loop4:14418): bit already cleared [ 857.222932][T19966] Trying to free block not in datazone 07:18:25 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:18:25 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8980, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000001c0)={0x2d}) r3 = dup2(r1, 0xffffffffffffffff) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r4 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r4, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f00000017c0), 0x1cb, 0x0) write$P9_RXATTRWALK(r5, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x8}, 0xf) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000140)={0x18, 0x0, {0x5, @empty, 'bridge0\x00'}}, 0x1e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r6, &(0x7f000000d180), 0x40000000000010c, 0x0) 07:18:25 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) sendmsg$rds(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:18:25 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x6) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 859.492011][ T26] audit: type=1800 audit(1588576705.078:790): pid=19975 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16366 res=0 [ 859.519004][T19984] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:18:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 859.610087][T19984] minix_free_block (loop4:10592): bit already cleared [ 859.633066][T19984] minix_free_block (loop4:9523): bit already cleared [ 859.641651][ T26] audit: type=1800 audit(1588576705.198:791): pid=19975 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 07:18:25 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8981, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 859.700814][T19984] minix_free_block (loop4:44211): bit already cleared [ 859.752446][T19984] minix_free_block (loop4:36301): bit already cleared [ 859.792964][T19984] minix_free_block (loop4:21375): bit already cleared 07:18:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 859.840652][T19984] Trying to free block not in datazone [ 859.874721][T19984] minix_free_block (loop4:14418): bit already cleared [ 859.930726][T19984] Trying to free block not in datazone 07:18:25 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8982, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:25 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x7) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 860.157093][ T26] audit: type=1800 audit(1588576705.748:792): pid=20020 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16380 res=0 [ 860.203028][T20020] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 860.265866][ T26] audit: type=1800 audit(1588576705.858:793): pid=20020 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 860.285231][T20025] minix_free_block (loop4:10592): bit already cleared [ 860.292016][T20025] minix_free_block (loop4:9523): bit already cleared [ 860.314615][T20025] minix_free_block (loop4:44211): bit already cleared [ 860.321527][T20025] minix_free_block (loop4:36301): bit already cleared [ 860.337689][T20025] minix_free_block (loop4:21375): bit already cleared [ 860.345418][T20025] Trying to free block not in datazone [ 860.350956][T20025] minix_free_block (loop4:14418): bit already cleared [ 860.358822][T20025] Trying to free block not in datazone 07:18:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:18:28 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0x3b010000}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:18:28 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8983, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) sendmsg$rds(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:18:28 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 862.552657][T20037] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 07:18:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:28 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 862.637026][ T26] audit: type=1800 audit(1588576708.229:794): pid=20046 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16354 res=0 [ 862.647377][T20051] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:18:28 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 862.711567][T20055] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 862.728046][ T26] audit: type=1800 audit(1588576708.319:795): pid=20046 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 862.732172][T20051] minix_free_block (loop4:10592): bit already cleared 07:18:28 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 862.786227][T20062] bond0: (slave bond_slave_1): Releasing backup interface [ 862.799824][T20051] minix_free_block (loop4:9523): bit already cleared [ 862.817327][T20051] minix_free_block (loop4:44211): bit already cleared [ 862.832065][T20051] minix_free_block (loop4:36301): bit already cleared [ 862.834003][T20062] device bond_slave_1 left promiscuous mode [ 862.857450][T20051] minix_free_block (loop4:21375): bit already cleared [ 862.882541][T20051] Trying to free block not in datazone 07:18:28 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:28 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 862.910996][T20051] minix_free_block (loop4:14418): bit already cleared [ 862.946833][T20051] Trying to free block not in datazone [ 863.057347][T20078] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 07:18:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:18:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 07:18:31 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xff00000000000000, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:31 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x9) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:31 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:31 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={0xffffffffffffffff, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 865.605275][ T26] audit: type=1800 audit(1588576711.199:796): pid=20092 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16376 res=0 07:18:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) [ 865.666615][T20104] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:18:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) [ 865.707062][ T26] audit: type=1800 audit(1588576711.249:797): pid=20095 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16345 res=0 07:18:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:31 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 865.794039][T20104] minix_free_block (loop4:10592): bit already cleared 07:18:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:31 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x9200000000000000, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 865.834990][T20104] minix_free_block (loop4:9523): bit already cleared [ 865.854529][T20104] minix_free_block (loop4:44211): bit already cleared [ 865.870726][ T26] audit: type=1804 audit(1588576711.259:798): pid=20092 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir021943768/syzkaller.laR6Fg/391/file0" dev="sda1" ino=16376 res=1 [ 865.902775][T20104] minix_free_block (loop4:36301): bit already cleared [ 865.917126][T20104] minix_free_block (loop4:21375): bit already cleared [ 865.931819][T20104] Trying to free block not in datazone [ 865.944287][ T26] audit: type=1800 audit(1588576711.399:799): pid=20095 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 865.965980][T20104] minix_free_block (loop4:14418): bit already cleared [ 865.986968][T20104] Trying to free block not in datazone [ 866.015461][ T26] audit: type=1800 audit(1588576711.569:800): pid=20130 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16380 res=0 [ 866.111257][ T26] audit: type=1804 audit(1588576711.589:801): pid=20130 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir021943768/syzkaller.laR6Fg/392/file0" dev="sda1" ino=16380 res=1 07:18:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:18:34 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540), 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:18:34 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0xa) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={0xffffffffffffffff, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 868.732720][ T26] audit: type=1800 audit(1588576714.319:802): pid=20153 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16366 res=0 [ 868.766593][T20153] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:18:34 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89a1, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) [ 868.846948][ T26] audit: type=1800 audit(1588576714.439:803): pid=20153 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 868.851162][T20166] minix_free_block (loop4:10592): bit already cleared 07:18:34 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 868.930239][T20166] minix_free_block (loop4:9523): bit already cleared [ 868.944450][T20166] minix_free_block (loop4:44211): bit already cleared [ 868.959097][T20166] minix_free_block (loop4:36301): bit already cleared 07:18:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:18:34 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 868.975521][T20166] minix_free_block (loop4:21375): bit already cleared [ 868.994873][T20166] Trying to free block not in datazone [ 869.010461][T20166] minix_free_block (loop4:14418): bit already cleared 07:18:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) [ 869.043044][T20166] Trying to free block not in datazone 07:18:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:18:37 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0xb) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:37 executing program 1: socket(0x10, 0x3, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 07:18:37 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 07:18:37 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={0xffffffffffffffff, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:18:37 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) [ 871.831784][ T26] audit: type=1800 audit(1588576717.419:804): pid=20203 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16375 res=0 07:18:37 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 871.888843][T20210] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 871.895089][T20217] device bond_slave_1 entered promiscuous mode [ 871.905814][T20217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 07:18:37 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 871.990025][T20210] minix_free_block (loop4:10592): bit already cleared [ 872.019030][ T26] audit: type=1800 audit(1588576717.609:805): pid=20203 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 872.042265][T20210] minix_free_block (loop4:9523): bit already cleared [ 872.092542][T20227] bond0: (slave bond_slave_1): Releasing backup interface [ 872.107778][T20210] minix_free_block (loop4:44211): bit already cleared [ 872.137318][T20227] bond0: (slave bond_slave_1): the permanent HWaddr of slave - 5a:ec:59:22:9d:04 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 872.171943][T20210] minix_free_block (loop4:36301): bit already cleared 07:18:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) 07:18:37 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 872.196747][T20210] minix_free_block (loop4:21375): bit already cleared [ 872.203382][T20227] device bond_slave_1 left promiscuous mode [ 872.205325][T20210] Trying to free block not in datazone [ 872.220888][T20210] minix_free_block (loop4:14418): bit already cleared [ 872.228386][T20210] Trying to free block not in datazone [ 872.356833][T20239] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 07:18:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:18:40 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) 07:18:40 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:40 executing program 1: socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 07:18:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000380)={r0}) sendmsg$rds(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:18:40 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89fb, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 874.905245][ T26] audit: type=1800 audit(1588576720.499:806): pid=20259 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16004 res=0 07:18:40 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x3300000000000000, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 874.956006][T20269] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:18:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 875.026499][ T26] audit: type=1800 audit(1588576720.619:807): pid=20259 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 875.045631][T20269] minix_free_block (loop4:10592): bit already cleared [ 875.069119][T20269] minix_free_block (loop4:9523): bit already cleared 07:18:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 875.115766][T20269] minix_free_block (loop4:44211): bit already cleared [ 875.129291][ T26] audit: type=1800 audit(1588576720.719:808): pid=20282 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=15842 res=0 07:18:40 executing program 1 (fault-call:5 fault-nth:0): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 875.169545][T20269] minix_free_block (loop4:36301): bit already cleared [ 875.187310][T20269] minix_free_block (loop4:21375): bit already cleared [ 875.201872][T20269] Trying to free block not in datazone [ 875.222693][ T26] audit: type=1804 audit(1588576720.719:809): pid=20282 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir021943768/syzkaller.laR6Fg/399/file0" dev="sda1" ino=15842 res=1 [ 875.223057][T20269] minix_free_block (loop4:14418): bit already cleared [ 875.290898][T20289] FAULT_INJECTION: forcing a failure. [ 875.290898][T20289] name failslab, interval 1, probability 0, space 0, times 0 [ 875.311866][T20269] Trying to free block not in datazone [ 875.321889][T20289] CPU: 1 PID: 20289 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 [ 875.330632][T20289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.340688][T20289] Call Trace: [ 875.344120][T20289] dump_stack+0x11d/0x187 [ 875.348503][T20289] should_fail.cold+0x5/0xf [ 875.353016][T20289] __should_failslab+0x82/0xb0 [ 875.357796][T20289] should_failslab+0x5/0xf [ 875.362210][T20289] kmem_cache_alloc+0x23/0x5e0 [ 875.367043][T20289] ? apparmor_file_open+0xf1/0x770 [ 875.372158][T20289] ? __read_once_size.constprop.0+0xd/0x20 [ 875.377973][T20289] ? fib_table_lookup+0x28e/0x1210 [ 875.383094][T20289] dst_alloc+0xbc/0x16c [ 875.387249][T20289] rt_dst_alloc+0x91/0x230 [ 875.391667][T20289] ip_route_output_key_hash_rcu+0x568/0x15d0 [ 875.397664][T20289] ip_route_output_key_hash+0xbb/0xf0 [ 875.403066][T20289] dccp_v4_connect+0x605/0x950 [ 875.407841][T20289] __inet_stream_connect+0x1bc/0x830 [ 875.413127][T20289] ? aa_sk_perm+0x1cd/0x590 [ 875.417636][T20289] ? __this_cpu_preempt_check+0x3c/0x130 [ 875.423272][T20289] inet_stream_connect+0x4e/0x80 [ 875.428289][T20289] ? __inet_stream_connect+0x830/0x830 [ 875.433844][T20289] __sys_connect_file+0xdc/0xf0 [ 875.438798][T20289] __sys_connect+0x11b/0x150 [ 875.443393][T20289] ? vfs_write+0x10b/0x380 [ 875.447807][T20289] ? fput_many+0xe2/0x130 [ 875.452134][T20289] ? fput+0x20/0x30 [ 875.455961][T20289] ? ksys_write+0x133/0x1a0 [ 875.460527][T20289] __x64_sys_connect+0x48/0x60 [ 875.465298][T20289] do_syscall_64+0xc7/0x3b0 [ 875.469841][T20289] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 875.475770][T20289] RIP: 0033:0x45c829 [ 875.479702][T20289] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 875.499391][T20289] RSP: 002b:00007fcb18eb9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 875.507801][T20289] RAX: ffffffffffffffda RBX: 00000000004dac00 RCX: 000000000045c829 [ 875.515847][T20289] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000004 [ 875.523825][T20289] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 875.531794][T20289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 875.539768][T20289] R13: 0000000000000083 R14: 00000000004c31b5 R15: 00007fcb18eba6d4 07:18:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:18:43 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89fc, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:43 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0xd) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:18:43 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000380)={r0}) sendmsg$rds(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:18:43 executing program 1 (fault-call:5 fault-nth:1): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 877.957042][T20307] FAULT_INJECTION: forcing a failure. [ 877.957042][T20307] name failslab, interval 1, probability 0, space 0, times 0 [ 877.963411][ T26] audit: type=1800 audit(1588576723.559:810): pid=20305 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16273 res=0 [ 877.973954][T20307] CPU: 0 PID: 20307 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 [ 877.997166][T20307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 878.007220][T20307] Call Trace: [ 878.010513][T20307] dump_stack+0x11d/0x187 [ 878.014843][T20307] should_fail.cold+0x5/0xf [ 878.019350][T20307] __should_failslab+0x82/0xb0 [ 878.024181][T20307] should_failslab+0x5/0xf [ 878.028625][T20307] kmem_cache_alloc+0x23/0x5e0 [ 878.033395][T20307] ? __read_once_size+0x2f/0xd0 [ 878.036535][T20310] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 878.038245][T20307] ? __rcu_read_unlock+0x77/0x390 [ 878.038271][T20307] ? __read_once_size.constprop.0+0xd/0x20 [ 878.057364][T20307] ? fib_table_lookup+0x28e/0x1210 [ 878.062493][T20307] dst_alloc+0xbc/0x16c [ 878.066650][T20307] rt_dst_alloc+0x91/0x230 [ 878.071153][T20307] ip_route_output_key_hash_rcu+0x568/0x15d0 [ 878.077161][T20307] ip_route_output_key_hash+0xbb/0xf0 [ 878.082546][T20307] ip_route_output_flow+0x2d/0xa0 [ 878.087575][T20307] dccp_v4_connect+0x3b6/0x950 [ 878.092467][T20307] __inet_stream_connect+0x1bc/0x830 [ 878.097753][T20307] ? aa_sk_perm+0x1cd/0x590 [ 878.102326][T20307] ? __this_cpu_preempt_check+0x3c/0x130 [ 878.107968][T20307] inet_stream_connect+0x4e/0x80 [ 878.112914][T20307] ? __inet_stream_connect+0x830/0x830 [ 878.118379][T20307] __sys_connect_file+0xdc/0xf0 [ 878.123307][T20307] __sys_connect+0x11b/0x150 [ 878.126072][T20310] minix_free_block (loop4:10592): bit already cleared [ 878.128074][T20307] ? vfs_write+0x10b/0x380 [ 878.128097][T20307] ? fput_many+0xe2/0x130 [ 878.135103][ T26] audit: type=1800 audit(1588576723.729:811): pid=20305 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 878.139232][T20307] ? fput+0x20/0x30 [ 878.139246][T20307] ? ksys_write+0x133/0x1a0 [ 878.139277][T20307] __x64_sys_connect+0x48/0x60 [ 878.170176][T20310] minix_free_block (loop4:9523): bit already cleared [ 878.174035][T20307] do_syscall_64+0xc7/0x3b0 [ 878.174138][T20307] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 878.188354][T20310] minix_free_block (loop4:44211): bit already cleared [ 878.191136][T20307] RIP: 0033:0x45c829 [ 878.191161][T20307] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 878.191178][T20307] RSP: 002b:00007fcb18eb9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 878.229996][T20307] RAX: ffffffffffffffda RBX: 00000000004dac00 RCX: 000000000045c829 [ 878.237963][T20307] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000004 [ 878.245928][T20307] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 07:18:43 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89fd, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 878.251737][T20310] minix_free_block (loop4:36301): bit already cleared [ 878.253890][T20307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 878.253900][T20307] R13: 0000000000000083 R14: 00000000004c31b5 R15: 00007fcb18eba6d4 07:18:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:18:43 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000380)={r0}) sendmsg$rds(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 878.379764][T20329] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 878.412301][T20310] minix_free_block (loop4:21375): bit already cleared 07:18:44 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0xae01, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 878.427379][T20331] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 878.427513][T20310] Trying to free block not in datazone [ 878.460881][T20310] minix_free_block (loop4:14418): bit already cleared 07:18:44 executing program 1 (fault-call:5 fault-nth:2): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 878.479093][T20310] Trying to free block not in datazone 07:18:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:18:44 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0xae41, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 878.537885][T20344] FAULT_INJECTION: forcing a failure. [ 878.537885][T20344] name failslab, interval 1, probability 0, space 0, times 0 [ 878.550564][T20344] CPU: 0 PID: 20344 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 [ 878.559244][T20344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 878.569295][T20344] Call Trace: [ 878.572655][T20344] dump_stack+0x11d/0x187 [ 878.576997][T20344] should_fail.cold+0x5/0xf [ 878.581519][T20344] __should_failslab+0x82/0xb0 [ 878.586289][T20344] should_failslab+0x5/0xf [ 878.590711][T20344] kmem_cache_alloc+0x23/0x5e0 [ 878.595490][T20344] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 878.601387][T20344] ? __read_once_size+0xb7/0x100 [ 878.606419][T20344] inet_bind_bucket_create+0x46/0x170 [ 878.611817][T20344] __inet_hash_connect+0x446/0x8a0 [ 878.616972][T20344] ? __inet_lookup_established+0x410/0x410 [ 878.622789][T20344] inet_hash_connect+0x55/0xb0 [ 878.627558][T20344] dccp_v4_connect+0x578/0x950 [ 878.632342][T20344] __inet_stream_connect+0x1bc/0x830 07:18:44 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0xe) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 878.637640][T20344] ? aa_sk_perm+0x1cd/0x590 [ 878.642150][T20344] ? __this_cpu_preempt_check+0x3c/0x130 [ 878.647795][T20344] inet_stream_connect+0x4e/0x80 [ 878.652740][T20344] ? __inet_stream_connect+0x830/0x830 [ 878.658200][T20344] __sys_connect_file+0xdc/0xf0 [ 878.663057][T20344] __sys_connect+0x11b/0x150 [ 878.667672][T20344] ? vfs_write+0x10b/0x380 [ 878.672100][T20344] ? fput_many+0xe2/0x130 [ 878.676429][T20344] ? fput+0x20/0x30 [ 878.680228][T20344] ? ksys_write+0x133/0x1a0 [ 878.684799][T20344] __x64_sys_connect+0x48/0x60 [ 878.689566][T20344] do_syscall_64+0xc7/0x3b0 [ 878.694103][T20344] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 878.699995][T20344] RIP: 0033:0x45c829 [ 878.703898][T20344] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 878.723504][T20344] RSP: 002b:00007fcb18eb9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 878.731936][T20344] RAX: ffffffffffffffda RBX: 00000000004dac00 RCX: 000000000045c829 [ 878.739908][T20344] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000004 [ 878.747954][T20344] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 878.755920][T20344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 878.763889][T20344] R13: 0000000000000083 R14: 00000000004c31b5 R15: 00007fcb18eba6d4 [ 878.877131][ T26] audit: type=1800 audit(1588576724.469:812): pid=20357 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16129 res=0 [ 878.881822][T20357] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 878.958562][ T26] audit: type=1800 audit(1588576724.549:813): pid=20357 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 879.023838][T20361] minix_free_block (loop4:10592): bit already cleared [ 879.036203][T20361] minix_free_block (loop4:9523): bit already cleared [ 879.042969][T20361] minix_free_block (loop4:44211): bit already cleared [ 879.049779][T20361] minix_free_block (loop4:36301): bit already cleared [ 879.059168][T20361] minix_free_block (loop4:21375): bit already cleared [ 879.066062][T20361] Trying to free block not in datazone [ 879.071568][T20361] minix_free_block (loop4:14418): bit already cleared [ 879.080858][T20361] Trying to free block not in datazone 07:18:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:18:46 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0xae60, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:46 executing program 1 (fault-call:5 fault-nth:3): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:18:46 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0xf) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:46 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 881.057339][T20374] FAULT_INJECTION: forcing a failure. [ 881.057339][T20374] name failslab, interval 1, probability 0, space 0, times 0 [ 881.088821][T20374] CPU: 1 PID: 20374 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 [ 881.097515][T20374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 881.107573][T20374] Call Trace: [ 881.110876][T20374] dump_stack+0x11d/0x187 [ 881.115201][T20374] should_fail.cold+0x5/0xf [ 881.119764][T20374] __should_failslab+0x82/0xb0 [ 881.124521][T20374] should_failslab+0x5/0xf [ 881.128927][T20374] kmem_cache_alloc+0x23/0x5e0 [ 881.133686][T20374] ? __read_once_size+0x2f/0xd0 [ 881.138543][T20374] ? __rcu_read_unlock+0x77/0x390 [ 881.143555][T20374] ? __read_once_size.constprop.0+0xd/0x20 [ 881.149363][T20374] ? fib_table_lookup+0x28e/0x1210 [ 881.154516][T20374] dst_alloc+0xbc/0x16c [ 881.158672][T20374] rt_dst_alloc+0x91/0x230 [ 881.163080][T20374] ip_route_output_key_hash_rcu+0x568/0x15d0 [ 881.169052][T20374] ip_route_output_key_hash+0xbb/0xf0 [ 881.174521][T20374] ip_route_output_flow+0x2d/0xa0 [ 881.179538][T20374] dccp_v4_connect+0x7e1/0x950 [ 881.184310][T20374] __inet_stream_connect+0x1bc/0x830 [ 881.189586][T20374] ? aa_sk_perm+0x1cd/0x590 [ 881.194109][T20374] ? __this_cpu_preempt_check+0x3c/0x130 [ 881.199803][T20374] inet_stream_connect+0x4e/0x80 [ 881.204729][T20374] ? __inet_stream_connect+0x830/0x830 [ 881.210244][T20374] __sys_connect_file+0xdc/0xf0 [ 881.215086][T20374] __sys_connect+0x11b/0x150 [ 881.219662][T20374] ? vfs_write+0x10b/0x380 [ 881.224145][T20374] ? fput_many+0xe2/0x130 [ 881.228461][T20374] ? fput+0x20/0x30 [ 881.232261][T20374] ? ksys_write+0x133/0x1a0 [ 881.236834][T20374] __x64_sys_connect+0x48/0x60 [ 881.241605][T20374] do_syscall_64+0xc7/0x3b0 [ 881.246103][T20374] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 881.251979][T20374] RIP: 0033:0x45c829 [ 881.255867][T20374] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 881.275552][T20374] RSP: 002b:00007fcb18eb9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 881.283953][T20374] RAX: ffffffffffffffda RBX: 00000000004dac00 RCX: 000000000045c829 [ 881.292173][T20374] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000004 [ 881.300146][T20374] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 881.308102][T20374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 881.316084][T20374] R13: 0000000000000083 R14: 00000000004c31b5 R15: 00007fcb18eba6d4 [ 881.327885][ T26] audit: type=1800 audit(1588576726.920:814): pid=20380 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16354 res=0 [ 881.353864][T20380] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:18:47 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0xae80, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:47 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x400454ca, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:47 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x40049409, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 881.457423][ T26] audit: type=1800 audit(1588576727.050:815): pid=20380 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 881.536448][T20390] minix_free_block (loop4:10592): bit already cleared [ 881.573009][T20390] minix_free_block (loop4:9523): bit already cleared 07:18:47 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x4008ae90, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 881.612558][T20390] minix_free_block (loop4:44211): bit already cleared [ 881.662308][T20390] minix_free_block (loop4:36301): bit already cleared [ 881.709548][T20390] minix_free_block (loop4:21375): bit already cleared [ 881.717107][T20390] Trying to free block not in datazone [ 881.722940][T20390] minix_free_block (loop4:14418): bit already cleared [ 881.729860][T20390] Trying to free block not in datazone 07:18:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:18:49 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x10) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:49 executing program 1 (fault-call:5 fault-nth:4): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:18:49 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x40186366, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) 07:18:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 884.401722][T20428] FAULT_INJECTION: forcing a failure. [ 884.401722][T20428] name failslab, interval 1, probability 0, space 0, times 0 [ 884.441156][ T26] audit: type=1800 audit(1588576730.030:816): pid=20432 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16345 res=0 [ 884.475822][T20439] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 884.480832][T20428] CPU: 0 PID: 20428 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 07:18:50 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x4020940d, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 884.492844][T20428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.502902][T20428] Call Trace: [ 884.506304][T20428] dump_stack+0x11d/0x187 [ 884.510671][T20428] should_fail.cold+0x5/0xf [ 884.515242][T20428] __should_failslab+0x82/0xb0 [ 884.520011][T20428] should_failslab+0x5/0xf [ 884.524427][T20428] kmem_cache_alloc_node+0x35/0x680 [ 884.529641][T20428] ? xfrm_lookup_with_ifid+0x408/0x1550 [ 884.535218][T20428] ? init_srcu_struct_fields+0x132/0x840 [ 884.540867][T20428] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 884.546807][T20428] __alloc_skb+0x8d/0x360 [ 884.551143][T20428] ? ipv4_mtu+0x19a/0x250 [ 884.555489][T20428] dccp_connect+0x133/0x2c0 [ 884.556857][T20439] minix_free_block (loop4:10592): bit already cleared [ 884.560078][T20428] dccp_v4_connect+0x89e/0x950 [ 884.560110][T20428] __inet_stream_connect+0x1bc/0x830 [ 884.567801][T20439] minix_free_block (loop4:9523): bit already cleared [ 884.571691][T20428] ? aa_sk_perm+0x1cd/0x590 [ 884.571722][T20428] ? __this_cpu_preempt_check+0x3c/0x130 [ 884.582934][T20439] minix_free_block (loop4:44211): bit already cleared [ 884.583636][T20428] inet_stream_connect+0x4e/0x80 [ 884.583663][T20428] ? __inet_stream_connect+0x830/0x830 [ 884.588262][T20439] minix_free_block (loop4:36301): bit already cleared [ 884.593751][T20428] __sys_connect_file+0xdc/0xf0 [ 884.593775][T20428] __sys_connect+0x11b/0x150 [ 884.593794][T20428] ? vfs_write+0x10b/0x380 [ 884.593811][T20428] ? fput_many+0xe2/0x130 [ 884.593894][T20428] ? fput+0x20/0x30 [ 884.607510][T20439] minix_free_block (loop4:21375): bit already cleared [ 884.610977][T20428] ? ksys_write+0x133/0x1a0 [ 884.611001][T20428] __x64_sys_connect+0x48/0x60 [ 884.611029][T20428] do_syscall_64+0xc7/0x3b0 [ 884.617947][T20439] Trying to free block not in datazone [ 884.622599][T20428] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 884.622612][T20428] RIP: 0033:0x45c829 [ 884.622637][T20428] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 884.622647][T20428] RSP: 002b:00007fcb18eb9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 884.622663][T20428] RAX: ffffffffffffffda RBX: 00000000004dac00 RCX: 000000000045c829 [ 884.622739][T20428] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000004 [ 884.633260][T20439] minix_free_block (loop4:14418): bit already cleared [ 884.635949][T20428] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 884.635960][T20428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 884.635973][T20428] R13: 0000000000000083 R14: 00000000004c31b5 R15: 00007fcb18eba6d4 07:18:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) [ 884.664863][ T26] audit: type=1800 audit(1588576730.160:817): pid=20432 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 884.667596][T20439] Trying to free block not in datazone 07:18:50 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x4020ae46, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) 07:18:50 executing program 1 (fault-call:5 fault-nth:5): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:18:50 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x11) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 885.026183][T20468] FAULT_INJECTION: forcing a failure. [ 885.026183][T20468] name failslab, interval 1, probability 0, space 0, times 0 [ 885.042193][ T26] audit: type=1800 audit(1588576730.630:818): pid=20471 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16372 res=0 [ 885.045129][T20468] CPU: 1 PID: 20468 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 [ 885.069718][T20468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.077525][T20471] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 885.079762][T20468] Call Trace: [ 885.079788][T20468] dump_stack+0x11d/0x187 [ 885.079817][T20468] should_fail.cold+0x5/0xf [ 885.100266][T20468] __should_failslab+0x82/0xb0 [ 885.105035][T20468] should_failslab+0x5/0xf [ 885.109451][T20468] kmem_cache_alloc_node_trace+0x37/0x610 [ 885.115254][T20468] ? __should_failslab+0x8a/0xb0 [ 885.120187][T20468] ? debug_smp_processor_id+0x3f/0x129 [ 885.125646][T20468] ? kmem_cache_alloc_node+0x26d/0x680 [ 885.131112][T20468] __kmalloc_reserve.isra.0+0x43/0xd0 [ 885.136484][T20468] __alloc_skb+0xbe/0x360 [ 885.140808][T20468] ? ipv4_mtu+0x19a/0x250 [ 885.145274][T20468] dccp_connect+0x133/0x2c0 [ 885.149850][T20468] dccp_v4_connect+0x89e/0x950 [ 885.154625][T20468] __inet_stream_connect+0x1bc/0x830 [ 885.159909][T20468] ? aa_sk_perm+0x1cd/0x590 [ 885.164528][T20468] ? __this_cpu_preempt_check+0x3c/0x130 [ 885.170174][T20468] inet_stream_connect+0x4e/0x80 [ 885.175212][T20468] ? __inet_stream_connect+0x830/0x830 [ 885.180677][T20468] __sys_connect_file+0xdc/0xf0 [ 885.185549][T20468] __sys_connect+0x11b/0x150 [ 885.190139][T20468] ? vfs_write+0x10b/0x380 [ 885.194564][T20468] ? fput_many+0xe2/0x130 [ 885.198894][T20468] ? fput+0x20/0x30 [ 885.202693][T20468] ? ksys_write+0x133/0x1a0 [ 885.207198][T20468] __x64_sys_connect+0x48/0x60 [ 885.211965][T20468] do_syscall_64+0xc7/0x3b0 [ 885.216547][T20468] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 885.222433][T20468] RIP: 0033:0x45c829 [ 885.226414][T20468] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 885.246038][T20468] RSP: 002b:00007fcb18eb9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 885.254526][T20468] RAX: ffffffffffffffda RBX: 00000000004dac00 RCX: 000000000045c829 [ 885.262492][T20468] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000004 [ 885.270478][T20468] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 885.278446][T20468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 885.286470][T20468] R13: 0000000000000083 R14: 00000000004c31b5 R15: 00007fcb18eba6d4 [ 885.355596][ T26] audit: type=1800 audit(1588576730.950:819): pid=20471 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 885.366832][T20477] minix_free_block (loop4:10592): bit already cleared [ 885.380098][T20477] minix_free_block (loop4:9523): bit already cleared [ 885.386960][T20477] minix_free_block (loop4:44211): bit already cleared [ 885.393870][T20477] minix_free_block (loop4:36301): bit already cleared [ 885.402895][T20477] minix_free_block (loop4:21375): bit already cleared [ 885.410196][T20477] Trying to free block not in datazone [ 885.417021][T20477] minix_free_block (loop4:14418): bit already cleared [ 885.423941][T20477] Trying to free block not in datazone 07:18:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 07:18:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 07:18:53 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x4090ae82, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:18:53 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x12) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:53 executing program 1 (fault-call:5 fault-nth:6): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 887.485799][ T26] audit: type=1800 audit(1588576733.080:820): pid=20490 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16360 res=0 [ 887.520231][T20490] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:18:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) [ 887.540336][T20494] FAULT_INJECTION: forcing a failure. [ 887.540336][T20494] name failslab, interval 1, probability 0, space 0, times 0 [ 887.609597][T20494] CPU: 0 PID: 20494 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 [ 887.618296][T20494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.628352][T20494] Call Trace: [ 887.631646][T20494] dump_stack+0x11d/0x187 [ 887.636040][T20494] should_fail.cold+0x5/0xf [ 887.640548][T20494] __should_failslab+0x82/0xb0 [ 887.645390][T20494] should_failslab+0x5/0xf [ 887.649805][T20494] kmem_cache_alloc+0x23/0x5e0 [ 887.654568][T20494] ? kmem_cache_alloc_node+0x26d/0x680 [ 887.660063][T20494] skb_clone+0xf4/0x280 [ 887.664223][T20494] dccp_skb_entail+0x8b/0xb0 [ 887.668845][T20494] dccp_connect+0x1d1/0x2c0 [ 887.673379][T20494] dccp_v4_connect+0x89e/0x950 [ 887.678173][T20494] __inet_stream_connect+0x1bc/0x830 [ 887.683457][T20494] ? aa_sk_perm+0x1cd/0x590 [ 887.687966][T20494] ? __this_cpu_preempt_check+0x3c/0x130 [ 887.694473][T20494] inet_stream_connect+0x4e/0x80 [ 887.699463][T20494] ? __inet_stream_connect+0x830/0x830 [ 887.705038][T20494] __sys_connect_file+0xdc/0xf0 [ 887.709904][T20494] __sys_connect+0x11b/0x150 [ 887.714498][T20494] ? vfs_write+0x10b/0x380 [ 887.718914][T20494] ? fput_many+0xe2/0x130 [ 887.723243][T20494] ? fput+0x20/0x30 [ 887.727106][T20494] ? ksys_write+0x133/0x1a0 [ 887.731631][T20494] __x64_sys_connect+0x48/0x60 [ 887.736396][T20494] do_syscall_64+0xc7/0x3b0 [ 887.740930][T20494] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 887.746813][T20494] RIP: 0033:0x45c829 [ 887.750718][T20494] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 887.770320][T20494] RSP: 002b:00007fcb18eb9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 887.778731][T20494] RAX: ffffffffffffffda RBX: 00000000004dac00 RCX: 000000000045c829 [ 887.786793][T20494] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000004 [ 887.794761][T20494] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 887.802730][T20494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 07:18:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 07:18:53 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x4138ae84, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 887.810773][T20494] R13: 0000000000000083 R14: 00000000004c31b5 R15: 00007fcb18eba6d4 [ 887.835529][ T26] audit: type=1800 audit(1588576733.430:821): pid=20490 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 07:18:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 07:18:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 07:18:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:18:53 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x80086301, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 888.065574][T20504] minix_free_block (loop4:10592): bit already cleared [ 888.072636][T20504] minix_free_block (loop4:9523): bit already cleared [ 888.088227][T20504] minix_free_block (loop4:44211): bit already cleared [ 888.120078][T20504] minix_free_block (loop4:36301): bit already cleared [ 888.137968][T20504] minix_free_block (loop4:21375): bit already cleared [ 888.154065][T20504] Trying to free block not in datazone 07:18:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 07:18:53 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x13) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 888.164629][T20504] minix_free_block (loop4:14418): bit already cleared [ 888.172098][T20504] Trying to free block not in datazone 07:18:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, 0x0, 0x0) 07:18:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 888.302452][ T26] audit: type=1800 audit(1588576733.900:822): pid=20539 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16360 res=0 [ 888.318084][T20539] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:18:53 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:18:53 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x80108906, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 888.427476][ T26] audit: type=1800 audit(1588576734.020:823): pid=20539 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 888.465679][T20546] minix_free_block (loop4:10592): bit already cleared 07:18:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 888.507662][T20546] minix_free_block (loop4:9523): bit already cleared [ 888.517549][T20546] minix_free_block (loop4:44211): bit already cleared [ 888.524556][T20546] minix_free_block (loop4:36301): bit already cleared [ 888.531484][T20546] minix_free_block (loop4:21375): bit already cleared [ 888.541077][T20546] Trying to free block not in datazone [ 888.546796][T20546] minix_free_block (loop4:14418): bit already cleared [ 888.553966][T20546] Trying to free block not in datazone 07:18:54 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x14) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:54 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x80108907, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:54 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x3, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 888.739501][ T26] audit: type=1800 audit(1588576734.330:824): pid=20569 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16376 res=0 [ 888.764189][T20569] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 888.856354][ T26] audit: type=1800 audit(1588576734.450:825): pid=20569 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 888.880412][T20572] minix_free_block (loop4:10592): bit already cleared [ 888.887286][T20572] minix_free_block (loop4:9523): bit already cleared [ 888.894443][T20572] minix_free_block (loop4:44211): bit already cleared [ 888.901246][T20572] minix_free_block (loop4:36301): bit already cleared [ 888.908132][T20572] minix_free_block (loop4:21375): bit already cleared [ 888.915037][T20572] Trying to free block not in datazone [ 888.920562][T20572] minix_free_block (loop4:14418): bit already cleared [ 888.927441][T20572] Trying to free block not in datazone 07:18:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:18:56 executing program 0: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x10) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:56 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x4, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:18:56 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8138ae83, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:56 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x15) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, 0x0, 0x0) [ 891.230857][ T26] audit: type=1800 audit(1588576736.820:826): pid=20589 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15807 res=0 07:18:56 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x5, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 891.291675][ T26] audit: type=1804 audit(1588576736.880:827): pid=20589 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir382716019/syzkaller.XfdY0T/657/file0" dev="sda1" ino=15807 res=1 [ 891.324484][T20595] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:18:57 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0xc0045540, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:57 executing program 0 (fault-call:7 fault-nth:0): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:57 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x6, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 891.505630][ T26] audit: type=1800 audit(1588576736.890:828): pid=20595 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16384 res=0 07:18:57 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0xc0045878, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 891.565432][ T26] audit: type=1800 audit(1588576737.060:829): pid=20595 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 891.591315][T20613] FAULT_INJECTION: forcing a failure. [ 891.591315][T20613] name failslab, interval 1, probability 0, space 0, times 0 [ 891.606851][T20613] CPU: 1 PID: 20613 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 891.615533][T20613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 891.617785][T20603] minix_free_block (loop4:10592): bit already cleared [ 891.625726][T20613] Call Trace: [ 891.625754][T20613] dump_stack+0x11d/0x187 [ 891.625776][T20613] should_fail.cold+0x5/0xf [ 891.625803][T20613] __should_failslab+0x82/0xb0 [ 891.649538][T20613] should_failslab+0x5/0xf [ 891.653957][T20613] kmem_cache_alloc_node+0x35/0x680 [ 891.659308][T20613] __alloc_skb+0x8d/0x360 [ 891.663642][T20613] netlink_sendmsg+0x662/0x8a0 [ 891.664811][T20603] minix_free_block (loop4:9523): bit already cleared [ 891.668411][T20613] ? netlink_unicast+0x4c0/0x4c0 [ 891.668430][T20613] sock_sendmsg+0x98/0xc0 [ 891.668515][T20613] ____sys_sendmsg+0x493/0x4c0 [ 891.689135][T20613] ___sys_sendmsg+0xb5/0x100 [ 891.693729][T20613] ? _kstrtoull+0xfc/0x130 [ 891.698199][T20613] ? __fget_files+0xa2/0x1c0 [ 891.702801][T20613] ? __fget_light+0xc0/0x1a0 [ 891.702899][T20603] minix_free_block (loop4:44211): bit already cleared [ 891.707550][T20613] ? __fdget+0x29/0x30 [ 891.707631][T20613] ? sockfd_lookup_light+0xa5/0x100 [ 891.707784][T20613] __sys_sendmsg+0x9b/0x150 [ 891.728646][T20613] __x64_sys_sendmsg+0x4c/0x60 [ 891.733421][T20613] do_syscall_64+0xc7/0x3b0 [ 891.733715][T20603] minix_free_block (loop4:36301): bit already cleared [ 891.737928][T20613] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 891.737943][T20613] RIP: 0033:0x45c829 [ 891.737967][T20613] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 891.737984][T20613] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.758359][T20603] minix_free_block (loop4:21375): bit already cleared [ 891.774281][T20613] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 891.774293][T20613] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 891.774304][T20613] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 891.774314][T20613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 891.774324][T20613] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 07:18:57 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x7, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 891.964596][T20603] Trying to free block not in datazone [ 891.970657][T20603] minix_free_block (loop4:14418): bit already cleared [ 891.980102][T20603] Trying to free block not in datazone 07:18:59 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x8, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:18:59 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0xc0045878, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:18:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:18:59 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x16) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:18:59 executing program 0 (fault-call:7 fault-nth:1): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:18:59 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, 0x0, 0x0) 07:18:59 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x9, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:18:59 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0xc008ae05, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 894.319417][ T26] audit: type=1800 audit(1588576739.910:830): pid=20642 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16379 res=0 [ 894.348736][T20642] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 894.353258][T20646] FAULT_INJECTION: forcing a failure. [ 894.353258][T20646] name failslab, interval 1, probability 0, space 0, times 0 [ 894.373222][T20646] CPU: 1 PID: 20646 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 894.381905][T20646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 894.392845][T20646] Call Trace: [ 894.396139][T20646] dump_stack+0x11d/0x187 [ 894.400485][T20646] should_fail.cold+0x5/0xf [ 894.405004][T20646] __should_failslab+0x82/0xb0 [ 894.409772][T20646] should_failslab+0x5/0xf [ 894.414431][T20646] kmem_cache_alloc_node_trace+0x37/0x610 [ 894.420179][T20646] ? __should_failslab+0x8a/0xb0 [ 894.425191][T20646] ? debug_smp_processor_id+0x3f/0x129 [ 894.430655][T20646] ? kmem_cache_alloc_node+0x26d/0x680 [ 894.436124][T20646] __kmalloc_reserve.isra.0+0x43/0xd0 [ 894.441507][T20646] __alloc_skb+0xbe/0x360 [ 894.445851][T20646] netlink_sendmsg+0x662/0x8a0 [ 894.450637][T20646] ? netlink_unicast+0x4c0/0x4c0 [ 894.455575][T20646] sock_sendmsg+0x98/0xc0 [ 894.459981][T20646] ____sys_sendmsg+0x493/0x4c0 [ 894.464760][T20646] ___sys_sendmsg+0xb5/0x100 [ 894.469359][T20646] ? _kstrtoull+0xfc/0x130 [ 894.473791][T20646] ? __fget_files+0xa2/0x1c0 [ 894.478388][T20646] ? __fget_light+0xc0/0x1a0 [ 894.483032][T20646] ? __fdget+0x29/0x30 [ 894.487120][T20646] ? sockfd_lookup_light+0xa5/0x100 [ 894.492329][T20646] __sys_sendmsg+0x9b/0x150 [ 894.496850][T20646] __x64_sys_sendmsg+0x4c/0x60 [ 894.501982][T20646] do_syscall_64+0xc7/0x3b0 [ 894.506501][T20646] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 894.512392][T20646] RIP: 0033:0x45c829 [ 894.516291][T20646] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 894.535896][T20646] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.544358][T20646] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 894.552414][T20646] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 894.560399][T20646] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 07:19:00 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0xc008ae67, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:19:00 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0xa, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 894.568377][T20646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 894.576349][T20646] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 [ 894.602900][ T26] audit: type=1800 audit(1588576740.200:831): pid=20642 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 894.603129][T20655] minix_free_block (loop4:10592): bit already cleared 07:19:00 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0xc0189436, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:19:00 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0xc, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 894.717935][T20655] minix_free_block (loop4:9523): bit already cleared [ 894.739072][T20655] minix_free_block (loop4:44211): bit already cleared [ 894.746457][T20655] minix_free_block (loop4:36301): bit already cleared [ 894.753544][T20655] minix_free_block (loop4:21375): bit already cleared [ 894.760302][T20655] Trying to free block not in datazone 07:19:00 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0xc020660b, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 894.774023][T20655] minix_free_block (loop4:14418): bit already cleared [ 894.792030][T20655] Trying to free block not in datazone 07:19:00 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x17) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 894.937275][ T26] audit: type=1800 audit(1588576740.530:832): pid=20690 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15817 res=0 [ 894.961589][T20690] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 895.028575][ T26] audit: type=1800 audit(1588576740.620:833): pid=20690 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 895.057901][T20693] minix_free_block (loop4:10592): bit already cleared [ 895.074366][T20693] minix_free_block (loop4:9523): bit already cleared [ 895.081209][T20693] minix_free_block (loop4:44211): bit already cleared [ 895.118148][T20693] minix_free_block (loop4:36301): bit already cleared [ 895.126304][T20693] minix_free_block (loop4:21375): bit already cleared [ 895.133560][T20693] Trying to free block not in datazone [ 895.139199][T20693] minix_free_block (loop4:14418): bit already cleared [ 895.146444][T20693] Trying to free block not in datazone 07:19:02 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:02 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0xd, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:02 executing program 0 (fault-call:7 fault-nth:2): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:02 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000000)={0x3, 0x0, [0x0, 0x0, 0x0]}) 07:19:02 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) 07:19:02 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x18) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 897.409506][ T26] audit: type=1800 audit(1588576743.000:834): pid=20704 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15831 res=0 [ 897.409899][T20705] FAULT_INJECTION: forcing a failure. [ 897.409899][T20705] name failslab, interval 1, probability 0, space 0, times 0 [ 897.438622][T20706] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:03 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0xe, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:03 executing program 3: clone(0x82008000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 897.462764][T20710] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 897.483646][T20708] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 897.528934][T20718] ptrace attach of "/root/syz-executor.2"[20716] was attempted by "/root/syz-executor.2"[20718] [ 897.556980][T20710] minix_free_block (loop4:10592): bit already cleared 07:19:03 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0xff03, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 897.566349][ T26] audit: type=1800 audit(1588576743.160:835): pid=20704 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 897.596008][T20710] minix_free_block (loop4:9523): bit already cleared [ 897.614400][T20705] CPU: 0 PID: 20705 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 897.623110][T20705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 897.633173][T20705] Call Trace: [ 897.636481][T20705] dump_stack+0x11d/0x187 [ 897.638552][T20710] minix_free_block (loop4:44211): bit already cleared [ 897.641059][T20705] should_fail.cold+0x5/0xf [ 897.641114][T20705] __should_failslab+0x82/0xb0 [ 897.657343][T20705] should_failslab+0x5/0xf [ 897.661785][T20705] kmem_cache_alloc+0x23/0x5e0 [ 897.665944][T20710] minix_free_block (loop4:36301): bit already cleared [ 897.666649][T20705] ? should_fail+0x7c/0x2fd [ 897.678074][T20705] skb_clone+0xf4/0x280 [ 897.680634][T20710] minix_free_block (loop4:21375): bit already cleared [ 897.682312][T20705] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 897.682338][T20705] netlink_deliver_tap+0x45a/0x4d0 [ 897.682496][T20705] netlink_unicast+0x41f/0x4c0 [ 897.690725][T20710] Trying to free block not in datazone [ 897.695003][T20705] netlink_sendmsg+0x4cf/0x8a0 [ 897.695031][T20705] ? netlink_unicast+0x4c0/0x4c0 [ 897.695052][T20705] sock_sendmsg+0x98/0xc0 [ 897.695072][T20705] ____sys_sendmsg+0x493/0x4c0 [ 897.695180][T20705] ___sys_sendmsg+0xb5/0x100 [ 897.704801][T20710] minix_free_block (loop4:14418): bit already cleared [ 897.704970][T20705] ? _kstrtoull+0xfc/0x130 [ 897.715083][T20710] Trying to free block not in datazone [ 897.715299][T20705] ? __fget_files+0xa2/0x1c0 [ 897.715367][T20705] ? __fget_light+0xc0/0x1a0 [ 897.760612][T20705] ? __fdget+0x29/0x30 [ 897.764704][T20705] ? sockfd_lookup_light+0xa5/0x100 [ 897.769948][T20705] __sys_sendmsg+0x9b/0x150 [ 897.774483][T20705] __x64_sys_sendmsg+0x4c/0x60 07:19:03 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e12, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 897.779640][T20705] do_syscall_64+0xc7/0x3b0 [ 897.784191][T20705] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 897.790090][T20705] RIP: 0033:0x45c829 [ 897.794109][T20705] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 897.814001][T20705] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 897.822511][T20705] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 897.830494][T20705] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 897.838609][T20705] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 897.846677][T20705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 897.854933][T20705] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 [ 897.869794][T20727] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:03 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x100) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:19:03 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 897.988564][T20741] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:06 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:06 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x19) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:06 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) fstat(r3, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:19:06 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:06 executing program 0 (fault-call:7 fault-nth:3): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) [ 900.494125][ T26] audit: type=1800 audit(1588576746.090:836): pid=20757 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15837 res=0 [ 900.526733][T20757] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 900.542211][T20763] FAULT_INJECTION: forcing a failure. [ 900.542211][T20763] name failslab, interval 1, probability 0, space 0, times 0 [ 900.555337][T20763] CPU: 0 PID: 20763 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 900.564390][T20763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.574589][T20763] Call Trace: [ 900.577889][T20763] dump_stack+0x11d/0x187 [ 900.582418][T20763] should_fail.cold+0x5/0xf [ 900.586976][T20763] __should_failslab+0x82/0xb0 [ 900.591768][T20763] should_failslab+0x5/0xf [ 900.596184][T20763] kmem_cache_alloc_trace+0x26/0x5f0 [ 900.601503][T20763] ? ns_capable_common+0xad/0xc0 [ 900.606726][T20763] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 900.612624][T20763] rtnl_newlink+0x41/0x90 [ 900.616983][T20763] ? __rtnl_newlink+0xfb0/0xfb0 [ 900.621836][T20763] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 900.626898][T20763] ? __rcu_read_unlock+0x77/0x390 [ 900.631923][T20763] ? skb_clone+0x132/0x280 [ 900.636524][T20763] netlink_rcv_skb+0xaf/0x260 [ 900.641282][T20763] ? rtnl_calcit.isra.0+0x200/0x200 [ 900.646483][T20763] rtnetlink_rcv+0x22/0x30 [ 900.650926][T20763] netlink_unicast+0x390/0x4c0 [ 900.655694][T20763] netlink_sendmsg+0x4cf/0x8a0 [ 900.660467][T20763] ? netlink_unicast+0x4c0/0x4c0 [ 900.665416][T20763] sock_sendmsg+0x98/0xc0 [ 900.669788][T20763] ____sys_sendmsg+0x493/0x4c0 [ 900.674626][T20763] ___sys_sendmsg+0xb5/0x100 [ 900.679215][T20763] ? _kstrtoull+0xfc/0x130 [ 900.683692][T20763] ? __fget_files+0xa2/0x1c0 [ 900.688314][T20763] ? __fget_light+0xc0/0x1a0 [ 900.692902][T20763] ? __fdget+0x29/0x30 [ 900.696972][T20763] ? sockfd_lookup_light+0xa5/0x100 [ 900.702452][T20763] __sys_sendmsg+0x9b/0x150 [ 900.707010][T20763] __x64_sys_sendmsg+0x4c/0x60 [ 900.711816][T20763] do_syscall_64+0xc7/0x3b0 [ 900.716327][T20763] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 900.722216][T20763] RIP: 0033:0x45c829 07:19:06 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 900.726248][T20763] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 900.745847][T20763] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.754274][T20763] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 900.762327][T20763] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 900.770382][T20763] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 900.778960][T20763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 900.786927][T20763] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 [ 900.830048][T20771] minix_free_block (loop4:10592): bit already cleared [ 900.837083][T20771] minix_free_block (loop4:9523): bit already cleared [ 900.840764][T20770] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 900.844128][T20771] minix_free_block (loop4:44211): bit already cleared [ 900.860607][T20771] minix_free_block (loop4:36301): bit already cleared [ 900.867908][T20771] minix_free_block (loop4:21375): bit already cleared [ 900.875061][T20771] Trying to free block not in datazone [ 900.880521][T20771] minix_free_block (loop4:14418): bit already cleared [ 900.888025][T20771] Trying to free block not in datazone [ 900.894050][ T26] audit: type=1800 audit(1588576746.420:837): pid=20757 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 07:19:06 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:06 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1a) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:06 executing program 0 (fault-call:7 fault-nth:4): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:06 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 900.964663][T20782] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:06 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x4, @local, 0x2}], 0x1c) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x100, 0x422842) getpeername$ax25(r3, &(0x7f0000000080)={{0x3, @null}, [@null, @default, @rose, @default, @netrom, @netrom, @bcast]}, &(0x7f0000000100)=0x48) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 901.070030][T20790] FAULT_INJECTION: forcing a failure. [ 901.070030][T20790] name failslab, interval 1, probability 0, space 0, times 0 [ 901.096638][ T26] audit: type=1800 audit(1588576746.691:838): pid=20792 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15846 res=0 [ 901.125441][T20790] CPU: 0 PID: 20790 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 901.134149][T20790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.144294][T20790] Call Trace: [ 901.147600][T20790] dump_stack+0x11d/0x187 [ 901.151993][T20790] should_fail.cold+0x5/0xf [ 901.156550][T20790] __should_failslab+0x82/0xb0 [ 901.161327][T20790] should_failslab+0x5/0xf [ 901.165770][T20790] kmem_cache_alloc_node_trace+0x37/0x610 [ 901.171642][T20790] ? apparmor_capable+0x25a/0x470 [ 901.176683][T20790] kvmalloc_node+0x6b/0x100 [ 901.181202][T20790] alloc_netdev_mqs+0xb1/0x870 [ 901.185980][T20790] ? geneve_udp_encap_recv.cold+0x47/0x47 [ 901.191714][T20790] ? geneve_udp_encap_recv.cold+0x47/0x47 [ 901.197447][T20790] rtnl_create_link+0x176/0x500 [ 901.202375][T20790] __rtnl_newlink+0xb52/0xfb0 [ 901.207140][T20790] ? finish_task_switch+0x7b/0x260 [ 901.212371][T20790] ? preempt_count_add+0x44/0x90 [ 901.217452][T20790] ? preempt_schedule_irq+0x6e/0x80 [ 901.222698][T20790] ? retint_kernel+0x1b/0x1b [ 901.223139][ T26] audit: type=1804 audit(1588576746.821:839): pid=20799 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir604331999/syzkaller.i336n0/428/file0" dev="sda1" ino=15846 res=1 [ 901.227353][T20790] ? debug_smp_processor_id+0x3f/0x129 [ 901.256206][T20790] ? delay_tsc+0x8a/0xb0 [ 901.260473][T20790] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 901.266620][T20790] ? tomoyo_profile+0x3f/0x50 [ 901.271460][T20790] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 901.277517][T20790] rtnl_newlink+0x5f/0x90 [ 901.281963][T20790] ? __rtnl_newlink+0xfb0/0xfb0 [ 901.287096][T20790] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 901.292047][T20790] ? __rcu_read_unlock+0x77/0x390 [ 901.297374][T20790] ? skb_clone+0x132/0x280 [ 901.301921][T20790] netlink_rcv_skb+0xaf/0x260 [ 901.306835][T20790] ? rtnl_calcit.isra.0+0x200/0x200 [ 901.312193][T20790] rtnetlink_rcv+0x22/0x30 [ 901.316827][T20790] netlink_unicast+0x390/0x4c0 [ 901.321610][T20790] netlink_sendmsg+0x4cf/0x8a0 [ 901.326729][T20790] ? netlink_unicast+0x4c0/0x4c0 [ 901.331771][T20790] sock_sendmsg+0x98/0xc0 [ 901.336185][T20790] ____sys_sendmsg+0x493/0x4c0 [ 901.341149][T20790] ___sys_sendmsg+0xb5/0x100 [ 901.345817][T20790] ? _kstrtoull+0xfc/0x130 [ 901.350248][T20790] ? __fget_files+0xa2/0x1c0 [ 901.354987][T20790] ? __fget_light+0xc0/0x1a0 [ 901.359652][T20790] ? __fdget+0x29/0x30 [ 901.363155][T20792] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 901.363741][T20790] ? sockfd_lookup_light+0xa5/0x100 [ 901.363770][T20790] __sys_sendmsg+0x9b/0x150 [ 901.382010][T20790] __x64_sys_sendmsg+0x4c/0x60 [ 901.386792][T20790] do_syscall_64+0xc7/0x3b0 [ 901.391456][T20790] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 901.398575][T20790] RIP: 0033:0x45c829 [ 901.402611][T20790] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 901.422471][T20790] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.430895][T20790] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 901.439026][T20790] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 901.446345][ T26] audit: type=1800 audit(1588576747.041:840): pid=20799 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 901.447313][T20790] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 901.473598][T20790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 901.481741][T20790] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 [ 901.694977][T20805] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:09 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:09 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e27, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:09 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1b) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:09 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x1f, 0x0, 0x1, 0x101}, 0x10) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:19:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) 07:19:09 executing program 0 (fault-call:7 fault-nth:5): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:09 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e29, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 903.609559][T20820] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 903.628447][ T26] audit: type=1800 audit(1588576749.221:841): pid=20822 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15815 res=0 07:19:09 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) poll(&(0x7f0000000000)=[{r1, 0x402}, {r0, 0xe103}, {r0, 0x8}, {r0, 0x8000}, {r2, 0x410}, {r3, 0x2a8}, {0xffffffffffffffff, 0x1003}], 0x7, 0x5) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 903.654358][T20825] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 903.670887][T20827] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 903.686435][T20819] FAULT_INJECTION: forcing a failure. [ 903.686435][T20819] name failslab, interval 1, probability 0, space 0, times 0 [ 903.759921][T20819] CPU: 0 PID: 20819 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 903.769606][T20819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.780842][T20819] Call Trace: [ 903.784152][T20819] dump_stack+0x11d/0x187 [ 903.788777][T20819] should_fail.cold+0x5/0xf [ 903.793319][T20819] __should_failslab+0x82/0xb0 [ 903.798332][T20819] should_failslab+0x5/0xf [ 903.802984][T20819] kmem_cache_alloc_trace+0x26/0x5f0 [ 903.808284][T20819] ? pcpu_chunk_relocate+0xdc/0x110 [ 903.813954][T20819] ? pcpu_alloc_area+0x386/0x510 [ 903.819014][T20819] ? _find_next_bit.constprop.0+0x126/0x160 [ 903.825049][T20819] __hw_addr_create_ex+0x62/0x1b0 [ 903.830338][T20819] __hw_addr_add_ex+0x19a/0x210 [ 903.835342][T20819] dev_addr_init+0xb4/0x120 [ 903.839867][T20819] alloc_netdev_mqs+0x124/0x870 [ 903.844855][T20819] ? geneve_udp_encap_recv.cold+0x47/0x47 [ 903.850603][T20819] ? geneve_udp_encap_recv.cold+0x47/0x47 [ 903.856617][T20819] rtnl_create_link+0x176/0x500 [ 903.861600][T20819] __rtnl_newlink+0xb52/0xfb0 [ 903.866476][T20819] ? preempt_count_add+0x44/0x90 [ 903.871587][T20819] ? kernel_init_free_pages+0x72/0xa0 [ 903.877004][T20819] ? widen_string+0x48/0x190 [ 903.881676][T20819] ? debug_smp_processor_id+0x3f/0x129 [ 903.887161][T20819] ? delay_tsc+0x8a/0xb0 [ 903.891592][T20819] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 903.897642][T20819] ? tomoyo_profile+0x3f/0x50 [ 903.902333][T20819] ? cgroup_rstat_updated+0xbb/0x1f0 [ 903.907641][T20819] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 903.913629][T20819] rtnl_newlink+0x5f/0x90 [ 903.918151][T20819] ? __rtnl_newlink+0xfb0/0xfb0 [ 903.923057][T20819] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 903.928046][T20819] ? __rcu_read_unlock+0x77/0x390 [ 903.933340][T20819] ? skb_clone+0x132/0x280 [ 903.937846][T20819] netlink_rcv_skb+0xaf/0x260 [ 903.942733][T20819] ? rtnl_calcit.isra.0+0x200/0x200 [ 903.947951][T20819] rtnetlink_rcv+0x22/0x30 [ 903.952521][T20819] netlink_unicast+0x390/0x4c0 [ 903.957455][T20819] netlink_sendmsg+0x4cf/0x8a0 [ 903.962513][T20819] ? netlink_unicast+0x4c0/0x4c0 [ 903.967509][T20819] sock_sendmsg+0x98/0xc0 [ 903.972060][T20819] ____sys_sendmsg+0x493/0x4c0 [ 903.976851][T20819] ___sys_sendmsg+0xb5/0x100 [ 903.981460][T20819] ? _kstrtoull+0xfc/0x130 [ 903.986042][T20819] ? __fget_files+0xa2/0x1c0 [ 903.990681][T20819] ? __fget_light+0xc0/0x1a0 [ 903.995484][T20819] ? __fdget+0x29/0x30 [ 903.999739][T20819] ? sockfd_lookup_light+0xa5/0x100 [ 904.005118][T20819] __sys_sendmsg+0x9b/0x150 07:19:09 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e2a, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 904.009932][T20819] __x64_sys_sendmsg+0x4c/0x60 [ 904.014810][T20819] do_syscall_64+0xc7/0x3b0 [ 904.019787][T20819] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 904.025723][T20819] RIP: 0033:0x45c829 [ 904.029837][T20819] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 904.049624][T20819] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.058087][T20819] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 904.066070][T20819] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 904.074053][T20819] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 904.083013][T20819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 904.091001][T20819] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 [ 904.116768][T20827] minix_free_block (loop4:10592): bit already cleared [ 904.127639][ T26] audit: type=1800 audit(1588576749.721:842): pid=20822 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 904.147476][T20847] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 904.148155][T20827] minix_free_block (loop4:9523): bit already cleared 07:19:09 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 904.169773][T20827] minix_free_block (loop4:44211): bit already cleared [ 904.177340][T20827] minix_free_block (loop4:36301): bit already cleared [ 904.186886][T20827] minix_free_block (loop4:21375): bit already cleared [ 904.196112][T20827] Trying to free block not in datazone [ 904.210976][T20827] minix_free_block (loop4:14418): bit already cleared 07:19:09 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e2b, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:09 executing program 0 (fault-call:7 fault-nth:6): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 904.224892][T20827] Trying to free block not in datazone [ 904.301269][T20857] FAULT_INJECTION: forcing a failure. [ 904.301269][T20857] name failslab, interval 1, probability 0, space 0, times 0 [ 904.348580][T20857] CPU: 1 PID: 20857 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 904.357515][T20857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.367578][T20857] Call Trace: [ 904.371155][T20857] dump_stack+0x11d/0x187 [ 904.375525][T20857] should_fail.cold+0x5/0xf [ 904.380343][T20857] __should_failslab+0x82/0xb0 [ 904.385281][T20857] should_failslab+0x5/0xf [ 904.390021][T20857] kmem_cache_alloc_node_trace+0x37/0x610 [ 904.396091][T20857] ? __hw_addr_add_ex+0x1a7/0x210 [ 904.401336][T20857] kvmalloc_node+0x6b/0x100 [ 904.405846][T20857] alloc_netdev_mqs+0x4a6/0x870 [ 904.410701][T20857] ? geneve_udp_encap_recv.cold+0x47/0x47 [ 904.416667][T20857] ? geneve_udp_encap_recv.cold+0x47/0x47 [ 904.422549][T20857] rtnl_create_link+0x176/0x500 [ 904.427586][T20857] __rtnl_newlink+0xb52/0xfb0 [ 904.432289][T20857] ? preempt_schedule_irq+0x6e/0x80 [ 904.437628][T20857] ? retint_kernel+0x1b/0x1b [ 904.442232][T20857] ? tomoyo_domain_quota_is_ok+0x292/0x2b0 [ 904.448653][T20857] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 904.454347][T20857] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 904.460340][T20857] ? tomoyo_profile+0x3f/0x50 [ 904.465018][T20857] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 904.471008][T20857] rtnl_newlink+0x5f/0x90 [ 904.475513][T20857] ? __rtnl_newlink+0xfb0/0xfb0 [ 904.480361][T20857] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 904.485654][T20857] ? __rcu_read_unlock+0x77/0x390 [ 904.490965][T20857] ? skb_clone+0x132/0x280 [ 904.495693][T20857] netlink_rcv_skb+0xaf/0x260 [ 904.500467][T20857] ? rtnl_calcit.isra.0+0x200/0x200 [ 904.505751][T20857] rtnetlink_rcv+0x22/0x30 [ 904.510383][T20857] netlink_unicast+0x390/0x4c0 [ 904.515189][T20857] netlink_sendmsg+0x4cf/0x8a0 [ 904.520018][T20857] ? netlink_unicast+0x4c0/0x4c0 [ 904.525108][T20857] sock_sendmsg+0x98/0xc0 [ 904.529968][T20857] ____sys_sendmsg+0x493/0x4c0 [ 904.534806][T20857] ___sys_sendmsg+0xb5/0x100 [ 904.539664][T20857] ? __fget_files+0xa2/0x1c0 [ 904.544265][T20857] ? __fget_light+0xc0/0x1a0 [ 904.549407][T20857] ? __fdget+0x29/0x30 [ 904.553729][T20857] ? sockfd_lookup_light+0xa5/0x100 [ 904.559136][T20857] __sys_sendmsg+0x9b/0x150 [ 904.563766][T20857] __x64_sys_sendmsg+0x4c/0x60 [ 904.568672][T20857] do_syscall_64+0xc7/0x3b0 [ 904.573313][T20857] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 904.579533][T20857] RIP: 0033:0x45c829 [ 904.583578][T20857] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 904.603597][T20857] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.613212][T20857] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 904.621185][T20857] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 904.629621][T20857] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 904.638439][T20857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 904.646653][T20857] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 07:19:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:12 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1c) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:12 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:19:12 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)}, 0x0) 07:19:12 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4eeb, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:12 executing program 0 (fault-call:7 fault-nth:7): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:12 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000002e40)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x7b, &(0x7f0000000140)={r6}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={r6, 0x10000}, &(0x7f0000000080)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bridge0\x00'}) 07:19:12 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4eec, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 906.722162][T20879] FAULT_INJECTION: forcing a failure. [ 906.722162][T20879] name failslab, interval 1, probability 0, space 0, times 0 [ 906.734968][ T26] audit: type=1800 audit(1588576752.321:843): pid=20878 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15877 res=0 [ 906.778157][T20878] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:19:12 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='dummy0\x00'}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1004000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x400c1) 07:19:12 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4eed, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 906.819473][T20879] CPU: 0 PID: 20879 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 906.828168][T20879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.838220][T20879] Call Trace: [ 906.841537][T20879] dump_stack+0x11d/0x187 [ 906.845874][T20879] should_fail.cold+0x5/0xf [ 906.850386][T20879] __should_failslab+0x82/0xb0 [ 906.855212][T20879] should_failslab+0x5/0xf [ 906.859663][T20879] kmem_cache_alloc_node_trace+0x37/0x610 [ 906.865420][T20879] kvmalloc_node+0x6b/0x100 [ 906.869947][T20879] alloc_netdev_mqs+0x5ee/0x870 [ 906.874794][T20879] ? geneve_udp_encap_recv.cold+0x47/0x47 [ 906.880519][T20879] ? geneve_udp_encap_recv.cold+0x47/0x47 [ 906.886339][T20879] rtnl_create_link+0x176/0x500 [ 906.891242][T20879] __rtnl_newlink+0xb52/0xfb0 [ 906.895942][T20879] ? debug_smp_processor_id+0x3f/0x129 [ 906.901407][T20879] ? delay_tsc+0x8a/0xb0 [ 906.905733][T20879] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 906.911645][T20879] ? tomoyo_profile+0x3f/0x50 [ 906.916438][T20879] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 906.922296][T20879] rtnl_newlink+0x5f/0x90 [ 906.926643][T20879] ? __rtnl_newlink+0xfb0/0xfb0 [ 906.931492][T20879] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 906.936501][T20879] ? __rcu_read_unlock+0x77/0x390 [ 906.941537][T20879] ? skb_clone+0x132/0x280 [ 906.946020][T20879] netlink_rcv_skb+0xaf/0x260 [ 906.950699][T20879] ? rtnl_calcit.isra.0+0x200/0x200 [ 906.955951][T20879] rtnetlink_rcv+0x22/0x30 [ 906.960374][T20879] netlink_unicast+0x390/0x4c0 [ 906.965164][T20879] netlink_sendmsg+0x4cf/0x8a0 [ 906.969939][T20879] ? netlink_unicast+0x4c0/0x4c0 [ 906.974907][T20879] sock_sendmsg+0x98/0xc0 [ 906.979245][T20879] ____sys_sendmsg+0x493/0x4c0 [ 906.984014][T20879] ___sys_sendmsg+0xb5/0x100 [ 906.988601][T20879] ? _kstrtoull+0xfc/0x130 [ 906.993019][T20879] ? __fget_files+0xa2/0x1c0 [ 906.997682][T20879] ? __fget_light+0xc0/0x1a0 [ 907.002360][T20879] ? __fdget+0x29/0x30 [ 907.006438][T20879] ? sockfd_lookup_light+0xa5/0x100 [ 907.011644][T20879] __sys_sendmsg+0x9b/0x150 [ 907.016168][T20879] __x64_sys_sendmsg+0x4c/0x60 [ 907.020946][T20879] do_syscall_64+0xc7/0x3b0 [ 907.025463][T20879] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 907.031348][T20879] RIP: 0033:0x45c829 [ 907.035309][T20879] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 907.054936][T20879] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.063390][T20879] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 907.071362][T20879] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 907.079329][T20879] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 907.087297][T20879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 907.095264][T20879] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 [ 907.122204][ T26] audit: type=1800 audit(1588576752.711:844): pid=20878 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 07:19:12 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x44, 0x14, 0x12}}, 0x10) 07:19:12 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bridge0\x00', @ifru_ivalue=0x3}) [ 907.170775][T20887] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 907.184224][T20904] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 907.294608][T20900] minix_free_block (loop4:10592): bit already cleared [ 907.303096][T20900] minix_free_block (loop4:9523): bit already cleared [ 907.309894][T20900] minix_free_block (loop4:44211): bit already cleared [ 907.317926][T20900] minix_free_block (loop4:36301): bit already cleared [ 907.326353][T20900] minix_free_block (loop4:21375): bit already cleared [ 907.334942][T20900] Trying to free block not in datazone [ 907.373548][T20900] minix_free_block (loop4:14418): bit already cleared [ 907.390971][T20900] Trying to free block not in datazone 07:19:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:15 executing program 0 (fault-call:7 fault-nth:8): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:15 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'geneve1\x00', @ifru_names='bond_slave_1\x00'}) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x17, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x40c1) 07:19:15 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x48, 0x14, 0x12}}, 0x10) 07:19:15 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1d) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)}, 0x0) [ 909.830572][T20934] FAULT_INJECTION: forcing a failure. [ 909.830572][T20934] name failslab, interval 1, probability 0, space 0, times 0 [ 909.844342][ T26] audit: type=1800 audit(1588576755.441:845): pid=20937 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15900 res=0 [ 909.876596][T20934] CPU: 0 PID: 20934 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 909.885333][T20934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.895407][T20934] Call Trace: [ 909.898703][T20934] dump_stack+0x11d/0x187 [ 909.903149][T20934] should_fail.cold+0x5/0xf [ 909.907684][T20934] __should_failslab+0x82/0xb0 [ 909.912450][T20934] should_failslab+0x5/0xf [ 909.913231][T20942] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 909.916885][T20934] __kmalloc+0x54/0x640 07:19:15 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x44, 0x12}}, 0x10) [ 909.916956][T20934] ? gtp_newlink+0x1ba/0x640 [ 909.934028][T20934] gtp_newlink+0x1ba/0x640 [ 909.938454][T20934] ? rtnl_create_link+0x10a/0x500 [ 909.943550][T20934] ? gtp_genl_del_pdp+0x260/0x260 [ 909.948603][T20934] __rtnl_newlink+0xbe5/0xfb0 [ 909.953308][T20934] ? preempt_schedule_irq+0x6e/0x80 [ 909.958514][T20934] ? retint_kernel+0x1b/0x1b [ 909.963130][T20934] ? debug_smp_processor_id+0x3f/0x129 [ 909.968589][T20934] ? delay_tsc+0x8a/0xb0 [ 909.972911][T20934] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 909.978804][T20934] ? tomoyo_profile+0x3f/0x50 [ 909.983488][T20934] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 909.989334][T20934] rtnl_newlink+0x5f/0x90 [ 909.993754][T20934] ? __rtnl_newlink+0xfb0/0xfb0 [ 909.998709][T20934] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 910.003651][T20934] ? __rcu_read_unlock+0x77/0x390 [ 910.008681][T20934] ? skb_clone+0x132/0x280 [ 910.013180][T20934] netlink_rcv_skb+0xaf/0x260 [ 910.015506][T20942] minix_free_block (loop4:10592): bit already cleared [ 910.017867][T20934] ? rtnl_calcit.isra.0+0x200/0x200 [ 910.029817][T20934] rtnetlink_rcv+0x22/0x30 [ 910.034244][T20934] netlink_unicast+0x390/0x4c0 [ 910.038327][T20942] minix_free_block (loop4:9523): bit already cleared [ 910.039028][T20934] netlink_sendmsg+0x4cf/0x8a0 [ 910.050447][T20934] ? netlink_unicast+0x4c0/0x4c0 [ 910.055387][T20934] sock_sendmsg+0x98/0xc0 [ 910.057957][T20942] minix_free_block (loop4:44211): bit already cleared [ 910.059746][T20934] ____sys_sendmsg+0x493/0x4c0 [ 910.059775][T20934] ___sys_sendmsg+0xb5/0x100 [ 910.075866][T20934] ? _kstrtoull+0xfc/0x130 [ 910.079870][T20942] minix_free_block (loop4:36301): bit already cleared [ 910.080375][T20934] ? __fget_files+0xa2/0x1c0 [ 910.091690][T20934] ? __fget_light+0xc0/0x1a0 [ 910.096277][T20934] ? __fdget+0x29/0x30 [ 910.099074][T20942] minix_free_block (loop4:21375): bit already cleared [ 910.100344][T20934] ? sockfd_lookup_light+0xa5/0x100 [ 910.100371][T20934] __sys_sendmsg+0x9b/0x150 [ 910.116841][T20934] __x64_sys_sendmsg+0x4c/0x60 [ 910.119828][T20942] Trying to free block not in datazone [ 910.121615][T20934] do_syscall_64+0xc7/0x3b0 [ 910.121638][T20934] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 910.121652][T20934] RIP: 0033:0x45c829 [ 910.121674][T20934] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 910.121691][T20934] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.131924][T20942] minix_free_block (loop4:14418): bit already cleared 07:19:15 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x48, 0x12}}, 0x10) 07:19:15 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x2, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cachefiles\x00', 0x200000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) r4 = socket(0x10, 0x2, 0x0) syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2, &(0x7f0000000140)=[{&(0x7f00000001c0)="02c0204df3ace9e22b2bd9d2c050794c679ed50e8bf06100a56d3f4819d37cb9404313d501330c652accb4ead3262ed7333d1eaf27d69cbe2ac27484473d3386baac26f17b452138", 0x48, 0xb9}, {&(0x7f0000000240)="9626bbd1c6d174050aa625f4004bf1025fae905be1cde063c18def06d9939f4f5ff306ab2ea3e2400019df30dcf687a7f14c11964fe4559169e9d8113f1f8ed63057a7996239751c6b8f39dfa7bad777dcea2a8745366670ceb5c9ab2f66e90d1ddf8678221156e02453d042c7d8aa2de64bfa13a5ad774cd6239c567959fe7ed535e3e650e1d9902bb64e58f6497a8c4db725821331ed5cfdc0326288bea4ab661036989afb0f72ff0d8743920fb652c32924bba99eead6fe397a0c8e30", 0xbe, 0x8}], 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='meta,loccookie,localcaching,smackfstransmute=,rootcontext=root,uid=', @ANYRESDEC=r0, @ANYBLOB="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", @ANYBLOB="fdd90dc22c5ef270c4d705119333ba7b3c0c94627b752eb4ebf4ce66a8a0e5b5f4965766f7706dc29be359c46030f620b3314442a319afeebf6ae4f728b09ea251e44431e8ea0fb2fc7e81566d8133189c4c3a41114611d6c1bd160eaf7c084a517a5776f1e0e5875fddc2df9dfac22b1bb78ce942bb362b218b9dad", @ANYRES64=r4]) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_ifreq(r5, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0x8, 0x4, 0x1, 0x2, 0x7, 0x80, 0x6, 0x10001, 0x6, 0x0, 0x5, 0xffff, 0x6, 0x4, 0x4, 0x25, {0xe90, 0xfffffeff}, 0x4, 0x7}}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) [ 910.137473][T20934] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 910.137482][T20934] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 910.137491][T20934] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 910.137501][T20934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 910.137513][T20934] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 07:19:15 executing program 0 (fault-call:7 fault-nth:9): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:15 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0xf) [ 910.305647][T20942] Trying to free block not in datazone [ 910.376604][T20964] FAULT_INJECTION: forcing a failure. [ 910.376604][T20964] name failslab, interval 1, probability 0, space 0, times 0 [ 910.389396][T20964] CPU: 1 PID: 20964 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 910.398070][T20964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.408120][T20964] Call Trace: [ 910.411408][T20964] dump_stack+0x11d/0x187 [ 910.415744][T20964] should_fail.cold+0x5/0xf [ 910.420308][T20964] __should_failslab+0x82/0xb0 [ 910.425145][T20964] should_failslab+0x5/0xf [ 910.429560][T20964] __kmalloc+0x54/0x640 [ 910.433800][T20964] ? gtp_newlink+0x1ba/0x640 [ 910.438400][T20964] gtp_newlink+0x1ba/0x640 [ 910.442822][T20964] ? rtnl_create_link+0x10a/0x500 [ 910.447853][T20964] ? gtp_genl_del_pdp+0x260/0x260 [ 910.452885][T20964] __rtnl_newlink+0xbe5/0xfb0 [ 910.457645][T20964] ? preempt_schedule_irq+0x6e/0x80 [ 910.462850][T20964] ? retint_kernel+0x1b/0x1b [ 910.467447][T20964] ? debug_smp_processor_id+0x3f/0x129 [ 910.472932][T20964] ? delay_tsc+0x8a/0xb0 [ 910.477245][T20964] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 910.483161][T20964] ? tomoyo_profile+0x3f/0x50 [ 910.487904][T20964] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 910.493753][T20964] rtnl_newlink+0x5f/0x90 [ 910.498084][T20964] ? __rtnl_newlink+0xfb0/0xfb0 [ 910.503011][T20964] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 910.507956][T20964] ? __rcu_read_unlock+0x77/0x390 [ 910.512979][T20964] ? skb_clone+0x132/0x280 [ 910.517402][T20964] netlink_rcv_skb+0xaf/0x260 [ 910.522084][T20964] ? rtnl_calcit.isra.0+0x200/0x200 07:19:16 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1e) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 910.527290][T20964] rtnetlink_rcv+0x22/0x30 [ 910.531708][T20964] netlink_unicast+0x390/0x4c0 [ 910.536570][T20964] netlink_sendmsg+0x4cf/0x8a0 [ 910.541344][T20964] ? netlink_unicast+0x4c0/0x4c0 [ 910.546361][T20964] sock_sendmsg+0x98/0xc0 [ 910.550868][T20964] ____sys_sendmsg+0x493/0x4c0 [ 910.555730][T20964] ___sys_sendmsg+0xb5/0x100 [ 910.560321][T20964] ? _kstrtoull+0xfc/0x130 [ 910.564739][T20964] ? __fget_files+0xa2/0x1c0 [ 910.569331][T20964] ? __fget_light+0xc0/0x1a0 [ 910.573922][T20964] ? __fdget+0x29/0x30 [ 910.577995][T20964] ? sockfd_lookup_light+0xa5/0x100 [ 910.583458][T20964] __sys_sendmsg+0x9b/0x150 [ 910.587969][T20964] __x64_sys_sendmsg+0x4c/0x60 [ 910.592729][T20964] do_syscall_64+0xc7/0x3b0 [ 910.597230][T20964] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 910.603110][T20964] RIP: 0033:0x45c829 [ 910.607044][T20964] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 910.626648][T20964] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.635049][T20964] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 910.643022][T20964] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 910.650985][T20964] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 910.658949][T20964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 910.666969][T20964] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 [ 910.778334][ T26] audit: type=1800 audit(1588576756.371:846): pid=20973 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15840 res=0 [ 910.817080][T20973] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 910.927951][ T26] audit: type=1800 audit(1588576756.521:847): pid=20973 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 910.962189][T20978] minix_free_block (loop4:10592): bit already cleared [ 910.974014][T20978] minix_free_block (loop4:9523): bit already cleared [ 910.983936][T20978] minix_free_block (loop4:44211): bit already cleared [ 910.990861][T20978] minix_free_block (loop4:36301): bit already cleared [ 910.998499][T20978] minix_free_block (loop4:21375): bit already cleared [ 911.005359][T20978] Trying to free block not in datazone [ 911.010873][T20978] minix_free_block (loop4:14418): bit already cleared [ 911.018272][T20978] Trying to free block not in datazone 07:19:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:18 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x464) 07:19:18 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000000)={0x2, "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"}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:19:18 executing program 0 (fault-call:7 fault-nth:10): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)}, 0x0) 07:19:18 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x21) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:18 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000000)={0x7, 0x2, 0x5, 0x8, 0x2ec, 0x5, 0xc}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 912.851944][T20985] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 912.875318][T20990] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 912.909292][T20992] FAULT_INJECTION: forcing a failure. [ 912.909292][T20992] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 912.914918][ T26] audit: type=1800 audit(1588576758.511:848): pid=20996 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15853 res=0 [ 912.922504][T20992] CPU: 0 PID: 20992 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 912.922525][T20992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.922529][T20992] Call Trace: [ 912.922561][T20992] dump_stack+0x11d/0x187 [ 912.967685][T20992] should_fail.cold+0x5/0xf [ 912.972320][T20992] __alloc_pages_nodemask+0xcf/0x300 [ 912.977596][T20992] cache_grow_begin+0x74/0x560 [ 912.982403][T20992] __kmalloc+0x561/0x640 [ 912.986633][T20992] ? gtp_newlink+0x1ee/0x640 [ 912.991219][T20992] gtp_newlink+0x1ee/0x640 [ 912.995624][T20992] ? rtnl_create_link+0x10a/0x500 [ 913.000642][T20992] ? gtp_genl_del_pdp+0x260/0x260 [ 913.005751][T20992] __rtnl_newlink+0xbe5/0xfb0 [ 913.010504][T20992] ? preempt_count_add+0x44/0x90 [ 913.015432][T20992] ? kernel_init_free_pages+0x72/0xa0 [ 913.020820][T20992] ? widen_string+0x48/0x190 [ 913.025424][T20992] ? debug_smp_processor_id+0x3f/0x129 [ 913.030881][T20992] ? delay_tsc+0x8a/0xb0 [ 913.035119][T20992] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 913.040997][T20992] ? tomoyo_profile+0x3f/0x50 [ 913.045692][T20992] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 913.051571][T20992] rtnl_newlink+0x5f/0x90 [ 913.055915][T20992] ? __rtnl_newlink+0xfb0/0xfb0 [ 913.060761][T20992] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 913.065812][T20992] ? __rcu_read_unlock+0x77/0x390 [ 913.070852][T20992] ? skb_clone+0x132/0x280 [ 913.075291][T20992] netlink_rcv_skb+0xaf/0x260 [ 913.079980][T20992] ? rtnl_calcit.isra.0+0x200/0x200 [ 913.085170][T20992] rtnetlink_rcv+0x22/0x30 [ 913.089600][T20992] netlink_unicast+0x390/0x4c0 [ 913.094359][T20992] netlink_sendmsg+0x4cf/0x8a0 [ 913.099140][T20992] ? netlink_unicast+0x4c0/0x4c0 [ 913.104071][T20992] sock_sendmsg+0x98/0xc0 [ 913.108463][T20992] ____sys_sendmsg+0x493/0x4c0 [ 913.113224][T20992] ___sys_sendmsg+0xb5/0x100 [ 913.117817][T20992] ? _kstrtoull+0xfc/0x130 [ 913.122320][T20992] ? __fget_files+0xa2/0x1c0 [ 913.126939][T20992] ? __fget_light+0xc0/0x1a0 [ 913.131520][T20992] ? __fdget+0x29/0x30 [ 913.135591][T20992] ? sockfd_lookup_light+0xa5/0x100 [ 913.140788][T20992] __sys_sendmsg+0x9b/0x150 [ 913.145288][T20992] __x64_sys_sendmsg+0x4c/0x60 [ 913.150111][T20992] do_syscall_64+0xc7/0x3b0 [ 913.154608][T20992] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 913.160484][T20992] RIP: 0033:0x45c829 [ 913.164451][T20992] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 913.184041][T20992] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.192455][T20992] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 913.200417][T20992] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 913.208400][T20992] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 913.216359][T20992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 913.224475][T20992] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 [ 913.246064][T20996] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:19:18 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x468) 07:19:18 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x22) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 913.357573][ T26] audit: type=1804 audit(1588576758.831:849): pid=20999 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir604331999/syzkaller.i336n0/433/file0" dev="sda1" ino=15853 res=1 [ 913.373303][T21010] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:19 executing program 0 (fault-call:7 fault-nth:11): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 913.381887][ T26] audit: type=1800 audit(1588576758.901:850): pid=20999 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 07:19:19 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:19:19 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x20000110) [ 913.483133][T21021] FAULT_INJECTION: forcing a failure. [ 913.483133][T21021] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 913.542309][ T26] audit: type=1800 audit(1588576759.141:851): pid=21027 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16003 res=0 [ 913.546340][T21021] CPU: 0 PID: 21021 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 913.569850][T21021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.579950][T21021] Call Trace: [ 913.583251][T21021] dump_stack+0x11d/0x187 [ 913.587764][T21021] should_fail.cold+0x5/0xf [ 913.592274][T21021] __alloc_pages_nodemask+0xcf/0x300 [ 913.597726][T21021] alloc_pages_current+0xca/0x170 [ 913.602832][T21021] get_zeroed_page+0x10/0x40 [ 913.607512][T21021] dev_alloc_name_ns+0xeb/0x390 [ 913.607692][T21027] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 913.612364][T21021] ? strnlen+0x46/0x50 [ 913.612407][T21021] dev_get_valid_name+0x71/0xf0 [ 913.612437][T21021] register_netdevice+0x154/0xb10 [ 913.634830][T21021] ? delay_tsc+0x8a/0xb0 [ 913.639090][T21021] gtp_newlink+0x2c9/0x640 [ 913.643513][T21021] ? gtp_genl_del_pdp+0x260/0x260 [ 913.648540][T21021] __rtnl_newlink+0xbe5/0xfb0 [ 913.653312][T21021] ? preempt_schedule_irq+0x6e/0x80 [ 913.658532][T21021] ? widen_string+0x48/0x190 [ 913.663137][T21021] ? debug_smp_processor_id+0x3f/0x129 [ 913.668591][T21021] ? delay_tsc+0x8a/0xb0 [ 913.672841][T21021] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 913.678735][T21021] ? tomoyo_profile+0x3f/0x50 [ 913.683467][T21021] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 913.689352][T21021] rtnl_newlink+0x5f/0x90 [ 913.693693][T21021] ? __rtnl_newlink+0xfb0/0xfb0 [ 913.698571][T21021] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 913.703515][T21021] ? __rcu_read_unlock+0x77/0x390 [ 913.708546][T21021] ? skb_clone+0x132/0x280 [ 913.712966][T21021] netlink_rcv_skb+0xaf/0x260 [ 913.718808][T21021] ? rtnl_calcit.isra.0+0x200/0x200 [ 913.724018][T21021] rtnetlink_rcv+0x22/0x30 [ 913.728443][T21021] netlink_unicast+0x390/0x4c0 [ 913.733226][T21021] netlink_sendmsg+0x4cf/0x8a0 [ 913.737999][T21021] ? netlink_unicast+0x4c0/0x4c0 [ 913.742942][T21021] sock_sendmsg+0x98/0xc0 [ 913.747306][T21021] ____sys_sendmsg+0x493/0x4c0 [ 913.752086][T21021] ___sys_sendmsg+0xb5/0x100 [ 913.756678][T21021] ? _kstrtoull+0xfc/0x130 [ 913.761095][T21021] ? __fget_files+0xa2/0x1c0 [ 913.765684][T21021] ? __fget_light+0xc0/0x1a0 [ 913.770327][T21021] ? __fdget+0x29/0x30 [ 913.774480][T21021] ? sockfd_lookup_light+0xa5/0x100 [ 913.779751][T21021] __sys_sendmsg+0x9b/0x150 [ 913.784302][T21021] __x64_sys_sendmsg+0x4c/0x60 [ 913.789081][T21021] do_syscall_64+0xc7/0x3b0 [ 913.793597][T21021] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 913.799485][T21021] RIP: 0033:0x45c829 [ 913.803392][T21021] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 913.823025][T21021] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.831440][T21021] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 913.839410][T21021] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 913.847381][T21021] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 913.855350][T21021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 913.863322][T21021] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 [ 913.886205][ T26] audit: type=1800 audit(1588576759.481:852): pid=21027 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 913.914476][T21037] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 913.977855][T21040] minix_free_block (loop4:10592): bit already cleared [ 913.985667][T21040] minix_free_block (loop4:9523): bit already cleared [ 913.992449][T21040] minix_free_block (loop4:44211): bit already cleared [ 913.999267][T21040] minix_free_block (loop4:36301): bit already cleared [ 914.006198][T21040] minix_free_block (loop4:21375): bit already cleared [ 914.013164][T21040] Trying to free block not in datazone [ 914.018701][T21040] minix_free_block (loop4:14418): bit already cleared [ 914.025551][T21040] Trying to free block not in datazone 07:19:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:21 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) recvfrom$x25(r1, &(0x7f0000000140)=""/151, 0x97, 0x12120, 0x0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockname$ax25(r3, &(0x7f0000000040)={{0x3, @null}, [@default, @null, @rose, @default, @null, @null, @netrom, @bcast]}, &(0x7f00000000c0)=0x48) 07:19:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{0x0}], 0x1}, 0x0) 07:19:21 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:19:21 executing program 0 (fault-call:7 fault-nth:12): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:21 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x23) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:21 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'veth0_to_bridge\x00', @ifru_flags=0x100}) [ 915.960053][ T26] audit: type=1800 audit(1588576761.551:853): pid=21058 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15935 res=0 [ 915.983210][T21057] FAULT_INJECTION: forcing a failure. [ 915.983210][T21057] name failslab, interval 1, probability 0, space 0, times 0 [ 916.003213][T21057] CPU: 0 PID: 21057 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 916.011896][T21057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.021953][T21057] Call Trace: [ 916.025251][T21057] dump_stack+0x11d/0x187 [ 916.029717][T21057] should_fail.cold+0x5/0xf [ 916.034300][T21057] __should_failslab+0x82/0xb0 [ 916.040115][T21057] should_failslab+0x5/0xf [ 916.044534][T21057] __kmalloc_track_caller+0x4c/0x640 [ 916.049826][T21057] ? kstrdup_const+0x5d/0x80 [ 916.054425][T21057] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 916.060364][T21057] ? __rcu_read_unlock+0x77/0x390 [ 916.066482][T21057] kstrdup+0x40/0x80 [ 916.070403][T21057] kstrdup_const+0x5d/0x80 [ 916.074822][T21057] kvasprintf_const+0xf7/0x150 [ 916.079693][T21057] kobject_set_name_vargs+0x4d/0xf0 [ 916.084977][T21057] dev_set_name+0x6c/0xa0 [ 916.088071][ T26] audit: type=1804 audit(1588576761.681:854): pid=21074 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir604331999/syzkaller.i336n0/435/file0" dev="sda1" ino=15935 res=1 [ 916.089334][T21057] ? __write_once_size+0x2f/0xd0 [ 916.089425][T21057] netdev_register_kobject+0x85/0x240 [ 916.122959][T21057] register_netdevice+0x825/0xb10 [ 916.128036][T21057] gtp_newlink+0x2c9/0x640 [ 916.132462][T21057] ? gtp_genl_del_pdp+0x260/0x260 [ 916.137665][T21057] __rtnl_newlink+0xbe5/0xfb0 [ 916.142364][T21057] ? widen_string+0x48/0x190 [ 916.146959][T21057] ? debug_smp_processor_id+0x3f/0x129 [ 916.152443][T21057] ? delay_tsc+0x8a/0xb0 [ 916.156693][T21057] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 916.162581][T21057] ? tomoyo_profile+0x3f/0x50 [ 916.167264][T21057] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 916.173169][T21057] rtnl_newlink+0x5f/0x90 [ 916.177517][T21057] ? __rtnl_newlink+0xfb0/0xfb0 [ 916.182378][T21057] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 916.187380][T21057] ? __rcu_read_unlock+0x77/0x390 [ 916.188879][T21058] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 916.192405][T21057] ? skb_clone+0x132/0x280 [ 916.192432][T21057] netlink_rcv_skb+0xaf/0x260 [ 916.192454][T21057] ? rtnl_calcit.isra.0+0x200/0x200 [ 916.192487][T21057] rtnetlink_rcv+0x22/0x30 [ 916.192515][T21057] netlink_unicast+0x390/0x4c0 [ 916.224209][T21057] netlink_sendmsg+0x4cf/0x8a0 [ 916.229089][T21057] ? netlink_unicast+0x4c0/0x4c0 [ 916.234039][T21057] sock_sendmsg+0x98/0xc0 [ 916.238379][T21057] ____sys_sendmsg+0x493/0x4c0 [ 916.243163][T21057] ___sys_sendmsg+0xb5/0x100 [ 916.247761][T21057] ? _kstrtoull+0xfc/0x130 [ 916.252283][T21057] ? __fget_files+0xa2/0x1c0 [ 916.256977][T21057] ? __fget_light+0xc0/0x1a0 [ 916.261572][T21057] ? __fdget+0x29/0x30 [ 916.265646][T21057] ? sockfd_lookup_light+0xa5/0x100 [ 916.270859][T21057] __sys_sendmsg+0x9b/0x150 [ 916.275466][T21057] __x64_sys_sendmsg+0x4c/0x60 [ 916.280377][T21057] do_syscall_64+0xc7/0x3b0 [ 916.284972][T21057] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 916.290859][T21057] RIP: 0033:0x45c829 [ 916.294785][T21057] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 916.314042][ T26] audit: type=1800 audit(1588576761.911:855): pid=21074 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 916.314909][T21057] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 916.340637][T21057] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 916.348613][T21057] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 07:19:22 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x404201, 0x92) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f00000017c0), 0x1cb, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0xd799, 0x7fffffff, 0x7, 0x24, r1, 0x7ff, [], r4, r5, 0x2, 0x3, 0x5}, 0x40) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:19:22 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x24) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 916.356586][T21057] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 916.364583][T21057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 916.372559][T21057] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 07:19:22 executing program 0 (fault-call:7 fault-nth:13): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:22 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000180)={'ipvlan0\x00', @ifru_map={0x2, 0x3605, 0x40, 0xf8, 0x0, 0xff}}) [ 916.506970][T21089] FAULT_INJECTION: forcing a failure. [ 916.506970][T21089] name failslab, interval 1, probability 0, space 0, times 0 [ 916.547762][T21089] CPU: 0 PID: 21089 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 916.556456][T21089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.566505][T21089] Call Trace: [ 916.569806][T21089] dump_stack+0x11d/0x187 [ 916.574221][T21089] should_fail.cold+0x5/0xf [ 916.578727][T21089] __should_failslab+0x82/0xb0 [ 916.583491][T21089] should_failslab+0x5/0xf [ 916.587908][T21089] kmem_cache_alloc_trace+0x26/0x5f0 [ 916.593232][T21089] ? kstrdup+0x65/0x80 [ 916.597311][T21089] ? kstrdup_const+0x6a/0x80 [ 916.601899][T21089] device_add+0xa2a/0x10b0 [ 916.606337][T21089] ? kobject_set_name_vargs+0xd6/0xf0 [ 916.611714][T21089] ? dev_set_name+0x74/0xa0 [ 916.616226][T21089] ? __write_once_size+0x2f/0xd0 [ 916.621186][T21089] netdev_register_kobject+0xf3/0x240 [ 916.623833][ T26] audit: type=1800 audit(1588576762.151:856): pid=21096 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16161 res=0 [ 916.626582][T21089] register_netdevice+0x825/0xb10 [ 916.626689][T21089] gtp_newlink+0x2c9/0x640 [ 916.654921][T21089] ? gtp_genl_del_pdp+0x260/0x260 [ 916.659947][T21089] __rtnl_newlink+0xbe5/0xfb0 [ 916.664676][T21089] ? preempt_count_add+0x44/0x90 [ 916.669619][T21089] ? kernel_init_free_pages+0x72/0xa0 [ 916.675019][T21089] ? widen_string+0x48/0x190 [ 916.676955][T21096] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 916.679714][T21089] ? debug_smp_processor_id+0x3f/0x129 [ 916.679909][T21089] ? delay_tsc+0x8a/0xb0 [ 916.697809][T21089] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 916.703717][T21089] ? tomoyo_profile+0x3f/0x50 [ 916.708501][T21089] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 916.714362][T21089] rtnl_newlink+0x5f/0x90 [ 916.718772][T21089] ? __rtnl_newlink+0xfb0/0xfb0 [ 916.723646][T21089] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 916.728594][T21089] ? __rcu_read_unlock+0x77/0x390 [ 916.733631][T21089] ? skb_clone+0x132/0x280 [ 916.738077][T21089] netlink_rcv_skb+0xaf/0x260 [ 916.742829][T21089] ? rtnl_calcit.isra.0+0x200/0x200 [ 916.748129][T21089] rtnetlink_rcv+0x22/0x30 [ 916.752559][T21089] netlink_unicast+0x390/0x4c0 [ 916.757340][T21089] netlink_sendmsg+0x4cf/0x8a0 [ 916.762205][T21089] ? netlink_unicast+0x4c0/0x4c0 [ 916.767167][T21089] sock_sendmsg+0x98/0xc0 [ 916.771525][T21089] ____sys_sendmsg+0x493/0x4c0 [ 916.776312][T21089] ___sys_sendmsg+0xb5/0x100 [ 916.780951][T21089] ? _kstrtoull+0xfc/0x130 [ 916.785419][T21089] ? __fget_files+0xa2/0x1c0 [ 916.790038][T21089] ? __fget_light+0xc0/0x1a0 [ 916.794670][T21089] ? __fdget+0x29/0x30 [ 916.798746][T21089] ? sockfd_lookup_light+0xa5/0x100 [ 916.803990][T21089] __sys_sendmsg+0x9b/0x150 [ 916.808539][T21089] __x64_sys_sendmsg+0x4c/0x60 [ 916.813308][T21089] do_syscall_64+0xc7/0x3b0 [ 916.817830][T21089] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 916.823724][T21089] RIP: 0033:0x45c829 [ 916.827668][T21089] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 916.847273][T21089] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 916.855687][T21089] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 916.863674][T21089] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 916.871645][T21089] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 916.879639][T21089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 916.887636][T21089] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 [ 916.922243][ T26] audit: type=1800 audit(1588576762.521:857): pid=21102 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 916.940972][T21104] minix_free_block (loop4:10592): bit already cleared 07:19:22 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0xffffffff, 0x2, 0x2, 0x5d86361a, 0xdb9, 0xa63, 0x0, 0x4}}) preadv(r0, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000000)=0x1) r2 = socket$netlink(0x10, 0x3, 0x13) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_ifreq(r2, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 916.968064][T21104] minix_free_block (loop4:9523): bit already cleared [ 916.988243][T21104] minix_free_block (loop4:44211): bit already cleared [ 917.018963][T21104] minix_free_block (loop4:36301): bit already cleared [ 917.030596][T21104] minix_free_block (loop4:21375): bit already cleared [ 917.042577][T21104] Trying to free block not in datazone [ 917.055321][T21104] minix_free_block (loop4:14418): bit already cleared [ 917.068345][T21104] Trying to free block not in datazone 07:19:24 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:24 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x8000}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{0x0}], 0x1}, 0x0) 07:19:24 executing program 0 (fault-call:7 fault-nth:14): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:24 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x25) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:24 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) restart_syscall() r2 = dup(r1) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x40, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, 'veth1_macvtap\x00'}}, {@cache_none='cache=none'}, {@privport='privport'}, {@version_L='version=9p2000.L'}, {@posixacl='posixacl'}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, 'vcan0\x00'}}, {@obj_type={'obj_type', 0x3d, '\'$'}}, {@fowner_gt={'fowner>', r4}}, {@subj_user={'subj_user', 0x3d, 'mime_typeselinuxsecurity'}}]}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000000)={'vcan0\x00', @ifru_names='veth1_macvtap\x00'}) [ 919.044333][T21133] FAULT_INJECTION: forcing a failure. [ 919.044333][T21133] name failslab, interval 1, probability 0, space 0, times 0 [ 919.060544][ T26] audit: type=1800 audit(1588576764.651:858): pid=21139 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15950 res=0 [ 919.065045][T21133] CPU: 0 PID: 21133 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 919.088067][T21133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.098121][T21133] Call Trace: [ 919.101463][T21133] dump_stack+0x11d/0x187 [ 919.105801][T21133] should_fail.cold+0x5/0xf [ 919.110336][T21133] __should_failslab+0x82/0xb0 [ 919.115100][T21133] should_failslab+0x5/0xf [ 919.119512][T21133] kmem_cache_alloc_trace+0x26/0x5f0 [ 919.124801][T21133] ? kstrdup+0x65/0x80 [ 919.128893][T21133] ? kstrdup_const+0x6a/0x80 [ 919.133487][T21133] device_add+0xa2a/0x10b0 [ 919.137967][T21133] ? kobject_set_name_vargs+0xd6/0xf0 07:19:24 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x10001) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x40000000}, 0x1c) listen(r0, 0x400) setsockopt(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000002e40)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000700)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e22, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1, 0x0, 0x46}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x7b, &(0x7f0000000140)={r4}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0xfff) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r4, 0x7ff}, &(0x7f0000000100)=0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0xa51) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000040)) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) [ 919.143342][T21133] ? dev_set_name+0x74/0xa0 [ 919.147850][T21133] ? __write_once_size+0x2f/0xd0 [ 919.152803][T21133] netdev_register_kobject+0xf3/0x240 [ 919.158180][T21133] register_netdevice+0x825/0xb10 [ 919.163222][T21133] gtp_newlink+0x2c9/0x640 [ 919.167649][T21133] ? gtp_genl_del_pdp+0x260/0x260 [ 919.172679][T21133] __rtnl_newlink+0xbe5/0xfb0 [ 919.177385][T21133] ? preempt_schedule_irq+0x6e/0x80 [ 919.182700][T21133] ? retint_kernel+0x1b/0x1b [ 919.185956][ T26] audit: type=1804 audit(1588576764.781:859): pid=21146 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir604331999/syzkaller.i336n0/437/file0" dev="sda1" ino=15950 res=1 [ 919.187299][T21133] ? debug_smp_processor_id+0x3f/0x129 [ 919.187401][T21133] ? delay_tsc+0x8a/0xb0 [ 919.220236][T21133] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 919.226134][T21133] ? tomoyo_profile+0x3f/0x50 [ 919.230815][T21133] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 919.236765][T21133] rtnl_newlink+0x5f/0x90 [ 919.241165][T21133] ? __rtnl_newlink+0xfb0/0xfb0 [ 919.246053][T21133] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 919.250996][T21133] ? __rcu_read_unlock+0x77/0x390 [ 919.252756][T21139] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 919.256044][T21133] ? skb_clone+0x132/0x280 [ 919.256172][T21133] netlink_rcv_skb+0xaf/0x260 [ 919.273730][T21133] ? rtnl_calcit.isra.0+0x200/0x200 [ 919.278999][T21133] rtnetlink_rcv+0x22/0x30 [ 919.283423][T21133] netlink_unicast+0x390/0x4c0 [ 919.288199][T21133] netlink_sendmsg+0x4cf/0x8a0 [ 919.293038][T21133] ? netlink_unicast+0x4c0/0x4c0 [ 919.298034][T21133] sock_sendmsg+0x98/0xc0 [ 919.302372][T21133] ____sys_sendmsg+0x493/0x4c0 [ 919.307217][T21133] ___sys_sendmsg+0xb5/0x100 [ 919.311821][T21133] ? _kstrtoull+0xfc/0x130 [ 919.316242][T21133] ? __fget_files+0xa2/0x1c0 [ 919.320843][T21133] ? __fget_light+0xc0/0x1a0 [ 919.325438][T21133] ? __fdget+0x29/0x30 [ 919.329597][T21133] ? sockfd_lookup_light+0xa5/0x100 [ 919.334813][T21133] __sys_sendmsg+0x9b/0x150 [ 919.339400][T21133] __x64_sys_sendmsg+0x4c/0x60 [ 919.344210][T21133] do_syscall_64+0xc7/0x3b0 [ 919.348723][T21133] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 919.354698][T21133] RIP: 0033:0x45c829 [ 919.358599][T21133] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 919.358745][ T26] audit: type=1800 audit(1588576764.951:860): pid=21146 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 919.378219][T21133] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 919.378238][T21133] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 919.378248][T21133] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 919.378258][T21133] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 919.378266][T21133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 919.378329][T21133] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 07:19:25 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x26) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:25 executing program 1: r0 = socket$inet6(0xa, 0x80000, 0xffffffff) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000080)={0x9a3, 0x8, 0x6, 0xfffffffc, 0x4, 0x4}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200, 0x0) open_by_handle_at(r3, &(0x7f0000000140)={0xb3, 0x3, "6cbaf059fbe57e0d15d3b352e802276aa46f706e7f6d3ce435346187d95519e7750c3a6e560744f5c05da427e4ac15574ae71e960091f2f01c03ef3183dc9282a737562868f74ee0a8894c258b53bf49a15f6c610f04045a1858d0ce995a76868abdfcbfe6545a26fb62b84ac91d3ae4a54305c9e631cb607ce773b4f363a48207ebbc0df84aef4fcac1ace23a952a7abda2056839b2b79bb68af51f79dd68c3a32ad105d2598236b8c40d"}, 0x200) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x5, 0x2080) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000200)={0x2, 0x81, 0x6, 0x3f8, 0x7f, 0x20}) 07:19:25 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:25 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe6f) shmget(0x3, 0x3000, 0x40, &(0x7f0000003000/0x3000)=nil) fcntl$setsig(r3, 0xa, 0x24) 07:19:25 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 919.561403][ T26] audit: type=1800 audit(1588576765.161:861): pid=21156 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15944 res=0 [ 919.583527][T21156] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:19:25 executing program 0 (fault-call:7 fault-nth:15): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 919.709842][T21168] FAULT_INJECTION: forcing a failure. [ 919.709842][T21168] name failslab, interval 1, probability 0, space 0, times 0 [ 919.722869][T21168] CPU: 0 PID: 21168 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 919.726163][ T26] audit: type=1800 audit(1588576765.261:862): pid=21156 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 919.731560][T21168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.731570][T21168] Call Trace: [ 919.731596][T21168] dump_stack+0x11d/0x187 [ 919.731619][T21168] should_fail.cold+0x5/0xf [ 919.731646][T21168] __should_failslab+0x82/0xb0 [ 919.775881][T21168] should_failslab+0x5/0xf [ 919.780299][T21168] kmem_cache_alloc+0x23/0x5e0 [ 919.785065][T21168] ? finish_task_switch+0x7b/0x260 [ 919.790180][T21168] ? kstrdup+0x65/0x80 [ 919.794248][T21168] __kernfs_new_node+0x89/0x3d0 [ 919.799641][T21168] ? map_id_range_down+0x131/0x210 [ 919.803616][T21163] minix_free_block (loop4:10592): bit already cleared [ 919.804788][T21168] kernfs_new_node+0x76/0xd0 [ 919.804814][T21168] kernfs_create_dir_ns+0x52/0xe0 [ 919.821144][T21168] sysfs_create_dir_ns+0xad/0x170 [ 919.826259][T21168] kobject_add_internal+0x187/0x5a0 [ 919.830439][T21163] minix_free_block (loop4:9523): bit already cleared [ 919.831464][T21168] kobject_add+0xd8/0x120 [ 919.831484][T21168] ? preempt_count_add+0x63/0x90 [ 919.831500][T21168] ? kobject_get+0x94/0xf0 [ 919.831525][T21168] device_add+0x27e/0x10b0 [ 919.842609][T21163] minix_free_block (loop4:44211): bit already cleared [ 919.847472][T21168] ? __write_once_size+0x2f/0xd0 [ 919.847502][T21168] netdev_register_kobject+0xf3/0x240 [ 919.869168][T21163] minix_free_block (loop4:36301): bit already cleared [ 919.873292][T21168] register_netdevice+0x825/0xb10 [ 919.873319][T21168] gtp_newlink+0x2c9/0x640 [ 919.873406][T21168] ? gtp_genl_del_pdp+0x260/0x260 [ 919.873433][T21168] __rtnl_newlink+0xbe5/0xfb0 [ 919.887632][T21163] minix_free_block (loop4:21375): bit already cleared [ 919.889592][T21168] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 919.889678][T21168] ? __this_cpu_preempt_check+0x3c/0x130 [ 919.905373][T21163] Trying to free block not in datazone [ 919.906104][T21168] ? __perf_event_task_sched_out+0x158/0xaa0 [ 919.906131][T21168] ? widen_string+0x48/0x190 [ 919.920597][T21163] minix_free_block (loop4:14418): bit already cleared [ 919.923229][T21168] ? debug_smp_processor_id+0x3f/0x129 [ 919.923247][T21168] ? delay_tsc+0x8a/0xb0 [ 919.923271][T21168] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 919.923316][T21168] ? tomoyo_profile+0x3f/0x50 [ 919.948319][T21163] Trying to free block not in datazone [ 919.950301][T21168] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 919.950363][T21168] rtnl_newlink+0x5f/0x90 [ 919.976480][T21168] ? __rtnl_newlink+0xfb0/0xfb0 [ 919.981340][T21168] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 919.986320][T21168] ? __rcu_read_unlock+0x77/0x390 [ 919.991425][T21168] ? skb_clone+0x132/0x280 [ 919.995947][T21168] netlink_rcv_skb+0xaf/0x260 [ 920.000774][T21168] ? rtnl_calcit.isra.0+0x200/0x200 [ 920.005976][T21168] rtnetlink_rcv+0x22/0x30 07:19:25 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f00000017c0), 0x1cb, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 920.010408][T21168] netlink_unicast+0x390/0x4c0 [ 920.015185][T21168] netlink_sendmsg+0x4cf/0x8a0 [ 920.019990][T21168] ? netlink_unicast+0x4c0/0x4c0 [ 920.025398][T21168] sock_sendmsg+0x98/0xc0 [ 920.029799][T21168] ____sys_sendmsg+0x493/0x4c0 [ 920.034805][T21168] ___sys_sendmsg+0xb5/0x100 [ 920.039407][T21168] ? _kstrtoull+0xfc/0x130 [ 920.043886][T21168] ? __fget_files+0xa2/0x1c0 [ 920.049099][T21168] ? __fget_light+0xc0/0x1a0 [ 920.053872][T21168] ? __fdget+0x29/0x30 [ 920.058044][T21168] ? sockfd_lookup_light+0xa5/0x100 [ 920.063259][T21168] __sys_sendmsg+0x9b/0x150 [ 920.067959][T21168] __x64_sys_sendmsg+0x4c/0x60 [ 920.073043][T21168] do_syscall_64+0xc7/0x3b0 [ 920.077580][T21168] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 920.083819][T21168] RIP: 0033:0x45c829 [ 920.087724][T21168] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 920.107353][T21168] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.115791][T21168] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 920.123824][T21168] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 920.131823][T21168] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 920.139824][T21168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 920.147824][T21168] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 07:19:25 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{0x0}], 0x1}, 0x0) 07:19:25 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x27) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:25 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000001240)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001380)='/dev/vsock\x00', 0x101000, 0x0) write$P9_RLERROR(r2, &(0x7f00000013c0)=ANY=[@ANYBLOB="2c00000007010023005e65746831ba73656c66747275737465647472757374656473656c665b5e2e2d2d2d5d"], 0x2c) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r4 = socket(0x10, 0x2, 0x0) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/96, 0x60}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/136, 0x88}, {&(0x7f00000011c0)=""/19, 0x13}], 0x4, 0x80000000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) listen(r1, 0xfffffffe) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x0, 0x4, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pread64(r7, &(0x7f0000000040)=""/13, 0xd, 0x10000) [ 920.227224][T21168] kobject_add_internal failed for gtp41 (error: -12 parent: net) [ 920.245693][T21182] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:25 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x41, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x18000001, 0xeb, 0x32}) 07:19:25 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x28) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 920.303352][T21189] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 920.313638][ T26] audit: type=1800 audit(1588576765.901:863): pid=21193 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16258 res=0 07:19:26 executing program 0 (fault-call:7 fault-nth:16): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 920.394672][ T26] audit: type=1804 audit(1588576765.911:864): pid=21193 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir604331999/syzkaller.i336n0/439/file0" dev="sda1" ino=16258 res=1 07:19:26 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101401, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 920.449279][ T26] audit: type=1800 audit(1588576766.041:865): pid=21199 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16290 res=0 [ 920.475115][T21203] FAULT_INJECTION: forcing a failure. [ 920.475115][T21203] name failslab, interval 1, probability 0, space 0, times 0 [ 920.489304][T21203] CPU: 0 PID: 21203 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 920.502097][T21203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.514149][T21203] Call Trace: [ 920.517457][T21203] dump_stack+0x11d/0x187 [ 920.521822][T21203] should_fail.cold+0x5/0xf [ 920.523566][T21199] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 920.527483][T21203] __should_failslab+0x82/0xb0 [ 920.527502][T21203] should_failslab+0x5/0xf [ 920.527515][T21203] kmem_cache_alloc+0x23/0x5e0 [ 920.527536][T21203] ? security_kernfs_init_security+0x7c/0x90 [ 920.527570][T21203] ? rb_insert_color+0x108/0x340 [ 920.562556][T21203] __kernfs_new_node+0x89/0x3d0 [ 920.567714][T21203] ? mutex_unlock+0xe/0x40 [ 920.572836][T21203] ? kernfs_add_one+0xfa/0x320 [ 920.577615][T21203] kernfs_new_node+0x76/0xd0 [ 920.582223][T21203] __kernfs_create_file+0x5b/0x1c0 [ 920.587449][T21203] sysfs_add_file_mode_ns+0x163/0x310 [ 920.593188][T21203] sysfs_create_file_ns+0xa3/0xf0 [ 920.598696][T21203] device_create_file+0x92/0x120 [ 920.603868][T21203] device_add+0x3cb/0x10b0 [ 920.608323][T21203] ? __write_once_size+0x2f/0xd0 [ 920.613276][T21203] netdev_register_kobject+0xf3/0x240 [ 920.618774][T21203] register_netdevice+0x825/0xb10 [ 920.623827][T21203] gtp_newlink+0x2c9/0x640 [ 920.628319][T21203] ? gtp_genl_del_pdp+0x260/0x260 [ 920.633376][T21203] __rtnl_newlink+0xbe5/0xfb0 [ 920.638176][T21203] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 920.644170][T21203] ? __this_cpu_preempt_check+0x3c/0x130 [ 920.649973][T21203] ? __perf_event_task_sched_out+0x158/0xaa0 [ 920.656009][T21203] ? widen_string+0x48/0x190 [ 920.660632][T21203] ? debug_smp_processor_id+0x3f/0x129 [ 920.666188][T21203] ? delay_tsc+0x8a/0xb0 [ 920.671416][T21203] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 920.677310][T21203] ? tomoyo_profile+0x3f/0x50 [ 920.682350][T21203] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 920.688225][T21203] rtnl_newlink+0x5f/0x90 [ 920.692836][T21203] ? __rtnl_newlink+0xfb0/0xfb0 [ 920.697709][T21203] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 920.702657][T21203] ? __rcu_read_unlock+0x77/0x390 [ 920.707696][T21203] ? skb_clone+0x132/0x280 [ 920.712139][T21203] netlink_rcv_skb+0xaf/0x260 [ 920.716897][T21203] ? rtnl_calcit.isra.0+0x200/0x200 [ 920.722112][T21203] rtnetlink_rcv+0x22/0x30 [ 920.726712][T21203] netlink_unicast+0x390/0x4c0 [ 920.731494][T21203] netlink_sendmsg+0x4cf/0x8a0 [ 920.736391][T21203] ? netlink_unicast+0x4c0/0x4c0 [ 920.741335][T21203] sock_sendmsg+0x98/0xc0 [ 920.745713][T21203] ____sys_sendmsg+0x493/0x4c0 [ 920.750593][T21203] ___sys_sendmsg+0xb5/0x100 [ 920.755250][T21203] ? _kstrtoull+0xfc/0x130 [ 920.759667][T21203] ? __fget_files+0xa2/0x1c0 [ 920.764262][T21203] ? __fget_light+0xc0/0x1a0 [ 920.768861][T21203] ? __fdget+0x29/0x30 [ 920.773031][T21203] ? sockfd_lookup_light+0xa5/0x100 [ 920.778235][T21203] __sys_sendmsg+0x9b/0x150 [ 920.782757][T21203] __x64_sys_sendmsg+0x4c/0x60 [ 920.787600][T21203] do_syscall_64+0xc7/0x3b0 [ 920.792116][T21203] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 920.798005][T21203] RIP: 0033:0x45c829 [ 920.801966][T21203] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 920.810196][ T26] audit: type=1800 audit(1588576766.402:866): pid=21199 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 920.821638][T21203] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.821690][T21203] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 920.855504][T21203] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 920.863497][T21203] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 920.871472][T21203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 920.879446][T21203] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 [ 920.948788][T21208] minix_free_block (loop4:10592): bit already cleared [ 920.976411][T21208] minix_free_block (loop4:9523): bit already cleared [ 920.984563][T21208] minix_free_block (loop4:44211): bit already cleared [ 920.993812][T21208] minix_free_block (loop4:36301): bit already cleared [ 921.002517][T21208] minix_free_block (loop4:21375): bit already cleared [ 921.009324][T21208] Trying to free block not in datazone [ 921.017119][T21208] minix_free_block (loop4:14418): bit already cleared [ 921.026618][T21208] Trying to free block not in datazone 07:19:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:28 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000080)={0x3}) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:28 executing program 0 (fault-call:7 fault-nth:17): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:28 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) bind$isdn(r2, &(0x7f0000000000)={0x22, 0x97, 0x0, 0x2, 0x80}, 0x6) 07:19:28 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x29) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:28 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x28) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 922.780141][ T26] audit: type=1800 audit(1588576768.372:867): pid=21230 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16193 res=0 [ 922.793607][T21227] FAULT_INJECTION: forcing a failure. [ 922.793607][T21227] name failslab, interval 1, probability 0, space 0, times 0 [ 922.827312][T21230] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 922.830685][T21227] CPU: 1 PID: 21227 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 922.844418][T21227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.854464][T21227] Call Trace: [ 922.857770][T21227] dump_stack+0x11d/0x187 [ 922.862108][T21227] should_fail.cold+0x5/0xf [ 922.866630][T21227] __should_failslab+0x82/0xb0 [ 922.871535][T21227] should_failslab+0x5/0xf [ 922.875973][T21227] kmem_cache_alloc+0x23/0x5e0 [ 922.880755][T21227] ? security_kernfs_init_security+0x7c/0x90 [ 922.886738][T21227] ? rb_insert_color+0x108/0x340 [ 922.891682][T21227] __kernfs_new_node+0x89/0x3d0 [ 922.896541][T21227] ? mutex_unlock+0xe/0x40 [ 922.900969][T21227] ? kernfs_add_one+0xfa/0x320 [ 922.905743][T21227] kernfs_new_node+0x76/0xd0 [ 922.910378][T21227] __kernfs_create_file+0x5b/0x1c0 [ 922.915502][T21227] sysfs_add_file_mode_ns+0x163/0x310 [ 922.920894][T21227] sysfs_create_file_ns+0xa3/0xf0 [ 922.925928][T21227] device_create_file+0x92/0x120 [ 922.930868][T21227] device_add+0x3cb/0x10b0 [ 922.935406][T21227] ? __write_once_size+0x2f/0xd0 [ 922.940360][T21227] netdev_register_kobject+0xf3/0x240 [ 922.945766][T21227] register_netdevice+0x825/0xb10 [ 922.950818][T21227] gtp_newlink+0x2c9/0x640 [ 922.950895][T21233] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 922.955244][T21227] ? gtp_genl_del_pdp+0x260/0x260 [ 922.955265][T21227] __rtnl_newlink+0xbe5/0xfb0 [ 922.955305][T21227] ? preempt_schedule_irq+0x6e/0x80 [ 922.978519][T21227] ? retint_kernel+0x1b/0x1b [ 922.983122][T21227] ? debug_smp_processor_id+0x3f/0x129 [ 922.988671][T21227] ? delay_tsc+0x8a/0xb0 [ 922.992974][T21227] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 922.998873][T21227] ? tomoyo_profile+0x3f/0x50 [ 923.003665][T21227] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 923.009522][T21227] rtnl_newlink+0x5f/0x90 [ 923.013889][T21227] ? __rtnl_newlink+0xfb0/0xfb0 [ 923.018748][T21227] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 923.023776][T21227] ? __rcu_read_unlock+0x77/0x390 [ 923.028805][T21227] ? skb_clone+0x132/0x280 [ 923.033263][T21227] netlink_rcv_skb+0xaf/0x260 [ 923.038034][T21227] ? rtnl_calcit.isra.0+0x200/0x200 [ 923.043263][T21227] rtnetlink_rcv+0x22/0x30 [ 923.047689][T21227] netlink_unicast+0x390/0x4c0 [ 923.052461][T21227] netlink_sendmsg+0x4cf/0x8a0 [ 923.057232][T21227] ? netlink_unicast+0x4c0/0x4c0 [ 923.062169][T21227] sock_sendmsg+0x98/0xc0 [ 923.066506][T21227] ____sys_sendmsg+0x493/0x4c0 [ 923.071304][T21227] ___sys_sendmsg+0xb5/0x100 [ 923.076023][T21227] ? _kstrtoull+0xfc/0x130 [ 923.080449][T21227] ? __fget_files+0xa2/0x1c0 [ 923.085044][T21227] ? __fget_light+0xc0/0x1a0 [ 923.089737][T21227] ? __fdget+0x29/0x30 [ 923.093886][T21227] ? sockfd_lookup_light+0xa5/0x100 [ 923.099148][T21227] __sys_sendmsg+0x9b/0x150 [ 923.103673][T21227] __x64_sys_sendmsg+0x4c/0x60 [ 923.108445][T21227] do_syscall_64+0xc7/0x3b0 [ 923.112953][T21227] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 923.118849][T21227] RIP: 0033:0x45c829 [ 923.123529][T21227] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 923.143155][T21227] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.151630][T21227] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 923.159705][T21227] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 923.167765][T21227] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 07:19:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0xb69a) r1 = gettid() tkill(r1, 0x36) r2 = gettid() tkill(0x0, 0xb) r3 = syz_open_procfs(r2, &(0x7f0000001300)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f00000012c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/208, 0xd0}, {&(0x7f0000000080)=""/99, 0x63}, {&(0x7f0000001240)=""/100, 0x64}], 0x4, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @mcast1}, 0x1c) listen(r0, 0x400) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000001340)={{0xa, 0x4e22, 0x2853, @private2, 0x200}, {0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0xf800, [0x1, 0x1f, 0x9, 0x9, 0x8, 0x7, 0x3, 0x61a7]}, 0x5c) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xfffffffffffffe6c) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) setsockopt(r5, 0x0, 0x8, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) 07:19:28 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) socket$inet_dccp(0x2, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x141042, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000100)={'L-', 0x80000000}, 0x16, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0) timer_create(0x8, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000040)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0721deef00008000000000000000000003965f43c4a2fb6d50840620049dada720f897f650b0d13b730f001604aa6cf7f0c2208aee57ca1999dfc1743c7e7f8cf204341d459e4331e96e29e80f5e3d21559ddc574d8d2e4352ea0c2842c3a787004af1ba9aecfd7bb7bb913f15a2fbb240cbb2027b515428529b23fe3048199ee8d61a51f58d4e7a4b5e0e3440b77bd3aafe0426867533e0e23258e59193c9764a3e10225c6f419048d99d3e238b057f000000a8d4c27489e7c1b0859773e979f5257d0d542c45b8e7a7d1b26175387ed81e1b2751754cdf726812a6c9191d7d1b000083801fd0963ac0775b4c387b83a683d0acb4619dab435d920e4cbebe2fd184e7a46a58f38ccf628d674a21d02a2b6065df5d951bb33f1fd541561d3017f12d6083902e32690800c6ab53f11638bbc17cd6cbe012000001000000a6fd6240000000000000004e98af0362e88851c48bce4cb0e056641afce2b0e6411df2faaa412189df3b3fdbd8ed66522f510300f0e258922dcf41dd93e4e09b185362c173740ec87505462e6f4f8f383ae0e7a044fddb94ba56cadd9e25783cc40421357cdd7f04c80140f9d9700000004e3123b287aabd8c7563ca810f5c172e770e60c04e6c14565d7f89c88c87063fb18b71ae88a7dca1d09bda796b29097edc34254b45a3f7a5630f76308398fbf73da6dea604f27065f8e09d83fa6876bd026b374640dade04c5c3982ff2b2200895dd7afe956b4d8456e55a489fb107b5033bfa10f7590c8a7326a054c44a0d21b3a1cb5bf5b6639b8098c7be45896be745691d27026c08fd9f"], 0x247) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x141042, 0x0) socket$unix(0x1, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) [ 923.175732][T21227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 923.183771][T21227] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 [ 923.257732][T21249] minix_free_block (loop4:10592): bit already cleared [ 923.266928][T21249] minix_free_block (loop4:9523): bit already cleared [ 923.295509][T21252] minix_free_block (loop5:10592): bit already cleared [ 923.306773][T21249] minix_free_block (loop4:44211): bit already cleared [ 923.313649][T21252] minix_free_block (loop5:9523): bit already cleared [ 923.321539][T21252] minix_free_block (loop5:44211): bit already cleared [ 923.336427][T21252] minix_free_block (loop5:36301): bit already cleared [ 923.344643][T21252] minix_free_block (loop5:21375): bit already cleared [ 923.351489][T21249] minix_free_block (loop4:36301): bit already cleared [ 923.351569][T21252] Trying to free block not in datazone [ 923.363880][T21252] minix_free_block (loop5:14418): bit already cleared [ 923.371205][T21252] Trying to free block not in datazone [ 923.373605][T21249] minix_free_block (loop4:21375): bit already cleared [ 923.386598][T21248] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:29 executing program 0 (fault-call:7 fault-nth:18): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 923.435296][T21226] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 923.439163][T21249] Trying to free block not in datazone [ 923.468432][T21249] minix_free_block (loop4:14418): bit already cleared 07:19:29 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x10001) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x40000000}, 0x1c) listen(r0, 0x400) setsockopt(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000002e40)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000700)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e22, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1, 0x0, 0x46}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x7b, &(0x7f0000000140)={r4}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0xfff) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r4, 0x7ff}, &(0x7f0000000100)=0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0xa51) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000040)) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) [ 923.499084][T21249] Trying to free block not in datazone 07:19:29 executing program 1: r0 = socket$inet6(0xa, 0x4, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000001, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:29 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$sock_ifreq(r2, 0x8995, &(0x7f0000000180)={'vlan0\x00', @ifru_names='bond_slave_1\x00'}) [ 923.588748][T21257] FAULT_INJECTION: forcing a failure. [ 923.588748][T21257] name failslab, interval 1, probability 0, space 0, times 0 [ 923.620740][T21257] CPU: 1 PID: 21257 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 923.629523][T21257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 923.639851][T21257] Call Trace: [ 923.643241][T21257] dump_stack+0x11d/0x187 [ 923.647596][T21257] should_fail.cold+0x5/0xf [ 923.652279][T21257] __should_failslab+0x82/0xb0 [ 923.657054][T21257] should_failslab+0x5/0xf [ 923.661566][T21257] __kmalloc_track_caller+0x4c/0x640 [ 923.666856][T21257] ? kstrdup_const+0x5d/0x80 [ 923.671463][T21257] kstrdup+0x40/0x80 [ 923.675394][T21257] kstrdup_const+0x5d/0x80 [ 923.679829][T21257] __kernfs_new_node+0x5b/0x3d0 [ 923.684688][T21257] ? kernfs_next_descendant_post+0xbe/0x130 [ 923.690887][T21257] ? mutex_unlock+0xe/0x40 [ 923.695336][T21257] ? kernfs_activate+0x13c/0x170 [ 923.700287][T21257] kernfs_new_node+0x76/0xd0 [ 923.705000][T21257] kernfs_create_link+0x79/0x140 [ 923.710089][T21257] sysfs_do_create_link_sd.isra.0+0x82/0x120 [ 923.716088][T21257] sysfs_create_link+0x56/0x90 [ 923.720988][T21257] device_add+0x4f1/0x10b0 [ 923.725427][T21257] ? __write_once_size+0x2f/0xd0 [ 923.730414][T21257] netdev_register_kobject+0xf3/0x240 [ 923.735909][T21257] register_netdevice+0x825/0xb10 [ 923.741007][T21257] gtp_newlink+0x2c9/0x640 [ 923.745426][T21257] ? gtp_genl_del_pdp+0x260/0x260 [ 923.750582][T21257] __rtnl_newlink+0xbe5/0xfb0 [ 923.755396][T21257] ? preempt_schedule_irq+0x6e/0x80 [ 923.760604][T21257] ? retint_kernel+0x1b/0x1b [ 923.765208][T21257] ? debug_smp_processor_id+0x3f/0x129 [ 923.770682][T21257] ? delay_tsc+0x8a/0xb0 [ 923.774962][T21257] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 923.780862][T21257] ? tomoyo_profile+0x3f/0x50 [ 923.785605][T21257] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 923.791603][T21257] rtnl_newlink+0x5f/0x90 [ 923.796098][T21257] ? __rtnl_newlink+0xfb0/0xfb0 [ 923.801047][T21257] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 923.805996][T21257] ? __rcu_read_unlock+0x77/0x390 [ 923.811074][T21257] ? skb_clone+0x132/0x280 [ 923.815506][T21257] netlink_rcv_skb+0xaf/0x260 [ 923.820196][T21257] ? rtnl_calcit.isra.0+0x200/0x200 [ 923.825408][T21257] rtnetlink_rcv+0x22/0x30 [ 923.829833][T21257] netlink_unicast+0x390/0x4c0 [ 923.834618][T21257] netlink_sendmsg+0x4cf/0x8a0 [ 923.839406][T21257] ? netlink_unicast+0x4c0/0x4c0 [ 923.844356][T21257] sock_sendmsg+0x98/0xc0 [ 923.848693][T21257] ____sys_sendmsg+0x493/0x4c0 [ 923.853470][T21257] ___sys_sendmsg+0xb5/0x100 [ 923.858097][T21257] ? _kstrtoull+0xfc/0x130 [ 923.862519][T21257] ? __fget_files+0xa2/0x1c0 [ 923.867121][T21257] ? __fget_light+0xc0/0x1a0 [ 923.871718][T21257] ? __fdget+0x29/0x30 [ 923.875793][T21257] ? sockfd_lookup_light+0xa5/0x100 [ 923.881058][T21257] __sys_sendmsg+0x9b/0x150 [ 923.885591][T21257] __x64_sys_sendmsg+0x4c/0x60 [ 923.890364][T21257] do_syscall_64+0xc7/0x3b0 [ 923.894875][T21257] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 923.900774][T21257] RIP: 0033:0x45c829 [ 923.904671][T21257] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 923.924329][T21257] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.932742][T21257] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 923.940837][T21257] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 923.948816][T21257] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 923.956792][T21257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 923.964817][T21257] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 07:19:31 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x29) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:31 executing program 0 (fault-call:7 fault-nth:19): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:31 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) rmdir(&(0x7f0000000040)='./file0\x00') listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x6, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f0000001380)=[{&(0x7f0000000080)=""/100, 0x64}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/85, 0x55}, {&(0x7f0000000280)=""/56, 0x38}, {&(0x7f00000002c0)=""/142, 0x8e}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x6, 0x0) fsmount(r2, 0x1, 0x8d) 07:19:31 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2a) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:31 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_flags=0x8000}) 07:19:31 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 925.817792][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 925.817888][ T26] audit: type=1800 audit(1588576771.412:871): pid=21291 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15977 res=0 [ 925.826692][T21291] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 925.919937][T21297] FAULT_INJECTION: forcing a failure. [ 925.919937][T21297] name failslab, interval 1, probability 0, space 0, times 0 [ 925.956785][T21301] minix_free_block (loop4:10592): bit already cleared [ 925.982099][T21304] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 926.018963][ T26] audit: type=1800 audit(1588576771.532:872): pid=21298 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15971 res=0 [ 926.026066][T21297] CPU: 1 PID: 21297 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 926.046522][T21297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.047293][T21301] minix_free_block (loop4:9523): bit already cleared [ 926.057879][T21297] Call Trace: [ 926.057906][T21297] dump_stack+0x11d/0x187 [ 926.057940][T21297] should_fail.cold+0x5/0xf [ 926.057961][T21297] __should_failslab+0x82/0xb0 [ 926.057979][T21297] should_failslab+0x5/0xf [ 926.058079][T21297] kmem_cache_alloc+0x23/0x5e0 [ 926.090683][T21297] ? kstrdup+0x65/0x80 [ 926.094761][T21297] __kernfs_new_node+0x89/0x3d0 [ 926.099628][T21297] ? kernfs_next_descendant_post+0xbe/0x130 [ 926.105793][T21297] ? mutex_unlock+0xe/0x40 [ 926.110218][T21297] ? kernfs_activate+0x13c/0x170 [ 926.115168][T21297] kernfs_new_node+0x76/0xd0 [ 926.119767][T21297] kernfs_create_link+0x79/0x140 [ 926.124717][T21297] sysfs_do_create_link_sd.isra.0+0x82/0x120 [ 926.130726][T21297] sysfs_create_link+0x56/0x90 [ 926.135487][T21297] device_add+0x4f1/0x10b0 [ 926.139921][T21297] ? __write_once_size+0x2f/0xd0 [ 926.144868][T21297] netdev_register_kobject+0xf3/0x240 [ 926.150639][T21297] register_netdevice+0x825/0xb10 [ 926.154974][T21301] minix_free_block (loop4:44211): bit already cleared [ 926.155753][T21297] gtp_newlink+0x2c9/0x640 [ 926.166883][T21297] ? gtp_genl_del_pdp+0x260/0x260 [ 926.171914][T21297] __rtnl_newlink+0xbe5/0xfb0 07:19:31 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_addrs=@generic={0x6, "e35e27356a2adae7b6025cb24c30"}}) [ 926.175666][ T26] audit: type=1800 audit(1588576771.572:873): pid=21291 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 926.176612][T21297] ? preempt_schedule_irq+0x6e/0x80 [ 926.176638][T21297] ? retint_kernel+0x1b/0x1b [ 926.206672][T21297] ? __read_once_size.constprop.0+0xd/0x20 [ 926.212488][T21297] ? __tsan_read8+0x61/0x110 [ 926.216900][T21301] minix_free_block (loop4:36301): bit already cleared [ 926.217089][T21297] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 926.228471][T21304] minix_free_block (loop5:10592): bit already cleared [ 926.229699][T21297] ? tomoyo_profile+0x3f/0x50 [ 926.229720][T21297] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 926.229774][T21297] rtnl_newlink+0x5f/0x90 [ 926.248365][T21304] minix_free_block (loop5:9523): bit already cleared [ 926.251746][T21297] ? __rtnl_newlink+0xfb0/0xfb0 [ 926.251767][T21297] rtnetlink_rcv_msg+0x1d0/0x4e0 [ 926.251788][T21297] ? __rcu_read_unlock+0x77/0x390 [ 926.251808][T21297] ? skb_clone+0x132/0x280 [ 926.251900][T21297] netlink_rcv_skb+0xaf/0x260 [ 926.252005][T21297] ? rtnl_calcit.isra.0+0x200/0x200 [ 926.269171][T21304] minix_free_block (loop5:44211): bit already cleared [ 926.273357][T21297] rtnetlink_rcv+0x22/0x30 [ 926.273396][T21297] netlink_unicast+0x390/0x4c0 [ 926.273424][T21297] netlink_sendmsg+0x4cf/0x8a0 [ 926.279874][T21301] minix_free_block (loop4:21375): bit already cleared [ 926.282566][T21297] ? netlink_unicast+0x4c0/0x4c0 [ 926.282598][T21297] sock_sendmsg+0x98/0xc0 [ 926.295460][T21301] Trying to free block not in datazone [ 926.298945][T21297] ____sys_sendmsg+0x493/0x4c0 [ 926.298975][T21297] ___sys_sendmsg+0xb5/0x100 [ 926.305089][T21304] minix_free_block (loop5:36301): bit already cleared [ 926.308458][T21297] ? _kstrtoull+0xfc/0x130 [ 926.308486][T21297] ? __fget_files+0xa2/0x1c0 [ 926.323602][ T26] audit: type=1800 audit(1588576771.822:874): pid=21298 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="/" dev="loop5" ino=1 res=0 [ 926.324466][T21297] ? debug_smp_processor_id+0x3f/0x129 [ 926.324481][T21297] ? delay_tsc+0x8a/0xb0 07:19:32 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) setsockopt(r0, 0x5, 0x20000006, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getpeername(r1, &(0x7f00000000c0)=@in={0x2, 0x0, @empty}, &(0x7f0000001140)=0x80) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000140)=""/4096, &(0x7f0000000040)=0x1000) [ 926.324505][T21297] ? sockfd_lookup_light+0xa5/0x100 [ 926.324525][T21297] __sys_sendmsg+0x9b/0x150 [ 926.324595][T21297] __x64_sys_sendmsg+0x4c/0x60 [ 926.340173][T21301] minix_free_block (loop4:14418): bit already cleared [ 926.346079][T21297] do_syscall_64+0xc7/0x3b0 [ 926.346104][T21297] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 926.346141][T21297] RIP: 0033:0x45c829 [ 926.357961][T21304] minix_free_block (loop5:21375): bit already cleared [ 926.372463][T21297] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 926.372473][T21297] RSP: 002b:00007f8975086c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.372489][T21297] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 926.372499][T21297] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 926.372509][T21297] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 926.372519][T21297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 926.372596][T21297] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f89750876d4 [ 926.409188][T21301] Trying to free block not in datazone [ 926.433628][T21304] Trying to free block not in datazone [ 926.517079][T21304] minix_free_block (loop5:14418): bit already cleared [ 926.533666][T21304] Trying to free block not in datazone 07:19:32 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2b) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:32 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000040)={0x3b, 0xb, [], [@calipso={0x7, 0x48, {0x3, 0x10, 0x1f, 0x4, [0x6, 0xf, 0xfffffffffffffff7, 0x6, 0x20, 0x0, 0x5, 0x215]}}, @pad1, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x40}, @enc_lim={0x4, 0x1, 0x4f}]}, 0x60) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:32 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x7) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@del={0xf8, 0x11, 0x400, 0x70bd2a, 0x25dfdbfe, {{'aegis128-aesni\x00'}, [], [], 0x400, 0x2000}, [{0x8, 0x1, 0x7}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x9}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008005}, 0x42) 07:19:32 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x29) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 926.802869][ T26] audit: type=1800 audit(1588576772.402:875): pid=21330 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15939 res=0 [ 926.850120][ T26] audit: type=1800 audit(1588576772.442:876): pid=21335 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15988 res=0 [ 926.866154][T21332] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 926.887897][T21330] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 926.900589][T21335] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 926.974600][ T26] audit: type=1800 audit(1588576772.572:877): pid=21330 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 926.983182][T21344] minix_free_block (loop4:10592): bit already cleared [ 927.005261][T21332] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 927.008908][T21344] minix_free_block (loop4:9523): bit already cleared [ 927.023472][T21344] minix_free_block (loop4:44211): bit already cleared [ 927.030428][T21344] minix_free_block (loop4:36301): bit already cleared [ 927.037317][T21344] minix_free_block (loop4:21375): bit already cleared [ 927.044484][T21344] Trying to free block not in datazone [ 927.050078][T21344] minix_free_block (loop4:14418): bit already cleared [ 927.057845][T21344] Trying to free block not in datazone [ 927.106084][ T26] audit: type=1800 audit(1588576772.622:878): pid=21335 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="/" dev="loop5" ino=1 res=0 [ 927.124020][T21343] minix_free_block (loop5:10592): bit already cleared [ 927.140390][T21343] minix_free_block (loop5:9523): bit already cleared [ 927.147092][T21343] minix_free_block (loop5:44211): bit already cleared [ 927.170653][T21343] minix_free_block (loop5:36301): bit already cleared [ 927.177437][T21343] minix_free_block (loop5:21375): bit already cleared [ 927.230381][T21343] Trying to free block not in datazone [ 927.235866][T21343] minix_free_block (loop5:14418): bit already cleared [ 927.254778][T21343] Trying to free block not in datazone 07:19:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0xffff) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) 07:19:34 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x40007) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:19:34 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2c) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:34 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000180)={'ipvlan0\x00', @ifru_map={0x2, 0x3605, 0x40, 0xf8, 0x0, 0xff}}) 07:19:34 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f00000017c0), 0x1cb, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101800, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0x101, @private1={0xfc, 0x1, [], 0x1}, 0x6626}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0x8000, @private2, 0xe5d}], 0x68) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 929.034073][T21357] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 929.062644][ T26] audit: type=1800 audit(1588576774.662:879): pid=21358 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16321 res=0 07:19:34 executing program 1: r0 = socket$inet6(0xa, 0x80000, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x6e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x3b) [ 929.082844][T21359] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 929.119177][T21358] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:19:34 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000180)={'veth0_to_team\x00', @ifru_names='bond_slave_1\x00'}) [ 929.185055][T21378] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 929.201920][T21380] minix_free_block (loop4:10592): bit already cleared [ 929.208799][T21380] minix_free_block (loop4:9523): bit already cleared [ 929.215620][ T26] audit: type=1800 audit(1588576774.802:880): pid=21358 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 07:19:34 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000180)={'ipvlan0\x00', @ifru_map={0x2, 0x3605, 0x40, 0xf8, 0x0, 0xff}}) [ 929.235619][T21380] minix_free_block (loop4:44211): bit already cleared [ 929.242606][T21380] minix_free_block (loop4:36301): bit already cleared [ 929.252222][T21380] minix_free_block (loop4:21375): bit already cleared [ 929.265331][T21380] Trying to free block not in datazone [ 929.275471][T21380] minix_free_block (loop4:14418): bit already cleared 07:19:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 929.286115][T21380] Trying to free block not in datazone 07:19:34 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2d) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 929.503567][T21409] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 929.590928][T21414] minix_free_block (loop4:10592): bit already cleared [ 929.597845][T21414] minix_free_block (loop4:9523): bit already cleared [ 929.605237][T21414] minix_free_block (loop4:44211): bit already cleared [ 929.612322][T21414] minix_free_block (loop4:36301): bit already cleared [ 929.621630][T21414] minix_free_block (loop4:21375): bit already cleared [ 929.628436][T21414] Trying to free block not in datazone [ 929.634731][T21414] minix_free_block (loop4:14418): bit already cleared [ 929.642121][T21414] Trying to free block not in datazone 07:19:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:37 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000180)={'ipvlan0\x00', @ifru_map={0x2, 0x3605, 0x40, 0xf8, 0x0, 0xff}}) 07:19:37 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x202) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) read$alg(r3, &(0x7f0000000180)=""/146, 0x92) socket$bt_rfcomm(0x1f, 0x3, 0x3) accept4(r2, &(0x7f0000000080)=@alg, &(0x7f0000000140)=0x80, 0x80800) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x6000, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)={0x1, {{0x2, 0x4e22, @remote}}, 0x0, 0x5, [{{0x2, 0x4e23, @remote}}, {{0x2, 0x4e21, @private=0xa010101}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e24, @broadcast}}]}, 0x310) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:37 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x7, 0x40, 0x7}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=r3, &(0x7f00000003c0)=0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)="c815517f9abcfe6cfd242473dcf62acf228a1e6bc6e4bd98a3dd67bb0942e79c8c3d3b379ea8db11b39cf8ad6338932c7a3caa5686a788339127dc247c4ead147a6f9e08a5b29671302bd60849289c79f4e9f074f49d5731862f9b6103db2ea259beb4567d8013cc0b2adffaccc6a21340afc659489b9ddd0c6e439a8c873bd9c99bc231a16a5a", 0x87}, {&(0x7f00000000c0)="e05ab6ed08bebfbcb9d8fd3c3dea0484cccf579d30bc1026d0", 0x19}, {&(0x7f0000000100)="cb9013bb9157d76bb1a1108130fa6987603a32da3aed45ab23052c1520f7056e7d3a86c6b2f2b4d7b35f2b953f6852e8323e1b1b4ef2f379fb0d1dbbd3739d267d78e4ea067d1d7b9b53da6f916709f40d47d838ae3aaf5e8e4efa3bd8a057ab1c681f956385ec1ecb57743becbc54f93b957643d0c3bc80", 0x78}, {&(0x7f00000001c0)="9b341696aa3a963d45bc504687af30c44991c025e67d5c7adcd1b630d13050167984833950573c1bca33fb93ada1fc8ec64d4be4d00c5f41f413094efcd459bdbe063c215734fac54434083a6c8ac5ddef0f1c6ac015ad8f91db8aab9e2483e4a93ed1d68ede26eaefa6b7e0722b312454cebf3cbdbc90d9c5d8b1c30d2949e6574476b8a2e7855de9521fefac39d27d2102119b9259d22c200e5b76ad3c54c1787958fb33da750872727793a350059ec788cafdfabc55160be437fe16421bfc857e6b1c6582809e2f93a802aa6b6193e593eb9359b1e4f3940e0615902e1ba06c91b8058a1f1fe9b9dd07181b4263d87f", 0xf1}], 0x4, 0x6) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:19:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:37 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2e) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:37 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2d) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 932.126578][T21426] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 932.136594][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 932.136610][ T26] audit: type=1800 audit(1588576777.732:883): pid=21430 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16025 res=0 [ 932.168061][T21430] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:19:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 932.186564][T21441] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:37 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r3 = socket(0x3, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) fstat(r3, &(0x7f0000000000)) [ 932.271825][ T26] audit: type=1800 audit(1588576777.872:884): pid=21430 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 932.306269][T21446] minix_free_block (loop4:10592): bit already cleared [ 932.345078][T21453] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 932.353474][T21446] minix_free_block (loop4:9523): bit already cleared [ 932.358923][T21454] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 932.374486][ T26] audit: type=1800 audit(1588576777.922:885): pid=21450 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16005 res=0 07:19:38 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000080)={@hci={0x1f, 0x2, 0x1}, {}, &(0x7f0000000040), 0x60}, 0xa0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r4, &(0x7f00000017c0), 0x1cb, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='cpuacct.usage_user\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000d, 0x80010, r5, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r6, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f00000001c0)="a216bd6409db7df04f07b9eea718526347d35c0e843422afc66b8289095c0a59db82f0b0b8ea0fa4d80833e241e0dec6ad32856435f268cc032dc45d593b11ada26c2b4c8d5df58aa4f42935ebc1c4c3b90ecc8426773ed7d506e4e33e19a5624e74311e104cde5a616a551a2cfa4b5d715442ec6ea5d44938f117155a3ad132bdd9f8b7170112c0ca4e16035b1e481234b7ca2fb42a2532a76e1558f7a5299406ac6c46a386b2b092f9fde46fa35b751d31f9") ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r7 = accept(r6, &(0x7f0000000280)=@generic, &(0x7f0000000140)=0x80) getsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000300), &(0x7f0000000340)=0x4) [ 932.375535][T21446] minix_free_block (loop4:44211): bit already cleared [ 932.400351][T21446] minix_free_block (loop4:36301): bit already cleared [ 932.407202][T21446] minix_free_block (loop4:21375): bit already cleared [ 932.414447][T21446] Trying to free block not in datazone [ 932.420053][T21446] minix_free_block (loop4:14418): bit already cleared [ 932.427094][T21446] Trying to free block not in datazone [ 932.439857][T21450] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 932.466869][ T26] audit: type=1804 audit(1588576778.052:886): pid=21461 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir685764969/syzkaller.ernzOa/533/file0" dev="sda1" ino=16005 res=1 07:19:38 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x23) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 932.521114][T21467] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:38 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="d9275be81831a9033d410f4a1c8b480000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="44af71d131fc54609a6bd1fb643aff64f544d13e12b2a989f4c12656fbaa6da2069146e1ffba12", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000240)={r4, @local, @multicast1}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x8001, 0x8, 0x2, 0x65c2}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040854}, 0x4800) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000100)={0xd0, &(0x7f0000000000)=""/208}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet_buf(r6, 0x0, 0x28, &(0x7f00000001c0)=""/95, &(0x7f0000000140)=0x5f) ioctl$sock_ifreq(0xffffffffffffffff, 0x8938, &(0x7f0000000440)={'veth1_to_team\x00', @ifru_data=&(0x7f0000000400)="86498d5bb80cb9f37b2c0cb1907756429ee66788b8604abce5fd30a9f3c14c54"}) [ 932.717904][ T26] audit: type=1800 audit(1588576778.312:887): pid=21480 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16014 res=0 [ 932.756334][T21480] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 932.853818][ T26] audit: type=1800 audit(1588576778.452:888): pid=21480 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="/" dev="loop5" ino=1 res=0 [ 932.871554][T21485] minix_free_block (loop5:10592): bit already cleared [ 932.878449][T21485] minix_free_block (loop5:9523): bit already cleared [ 932.900086][T21485] minix_free_block (loop5:44211): bit already cleared [ 932.906879][T21485] minix_free_block (loop5:36301): bit already cleared [ 932.918773][T21485] minix_free_block (loop5:21375): bit already cleared [ 932.926575][T21485] Trying to free block not in datazone [ 932.932665][T21485] minix_free_block (loop5:14418): bit already cleared [ 932.939478][T21485] Trying to free block not in datazone 07:19:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:40 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2f) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:40 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xa20000, 0x1, 0x10000, r1, 0x0, &(0x7f0000000080)={0x9b090a, 0x80000001, [], @p_u8=&(0x7f0000000040)=0x8}}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000000)) 07:19:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:40 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x22) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:40 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r3 = socket(0x10, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) accept(r5, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000140)={0x3b, 0x25, [], [@calipso={0x7, 0x10, {0x2, 0x2, 0xeb, 0x1, [0x6]}}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x0, 0x93, "80f567ece88302a84e3cdd077b43f2b58444469cb65459c1109342cd8d02910b113270546e9f9b182506de8e9e5a1c34c315ae339243e5ebfccd51edc59690dc3302384812483a6577ba19d64cd88787a599298d25c5bb024a3209920d2d91e69805dadff7669818f4125ce9f57a0593c99d7b182b1355898ef521d86aae3768066355607c29899cf0c1a55dd01ce6a1bc71fa"}, @ra={0x5, 0x2, 0x6}, @generic={0x5, 0x77, "1e5474dbf4230f2ccb8a9d42fbed73e0fde654d73d6f0f31759b3df5aebe7fa3f33bc85ee540198de9fe83d7f4d52a84e5eed068fb128c39672a9c1211de7d3fe03a71f6bdcfdb407f2800dbe3a6c4d51f97ffcf064414984bf4eef3158111ac9b54fb22c014989239acc48babe95d01a6584e9a814f90"}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x138) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 935.216883][T21497] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 935.241783][T21503] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:40 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xffffffffe06acbdf) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_map={0x13, 0x8, 0x1000, 0x6b, 0xff, 0x70}}) [ 935.252985][ T26] audit: type=1800 audit(1588576780.842:889): pid=21504 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16042 res=0 [ 935.301439][ T26] audit: type=1800 audit(1588576780.872:890): pid=21505 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16043 res=0 [ 935.309079][T21504] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 935.334746][T21505] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:19:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 935.421438][ T26] audit: type=1800 audit(1588576781.012:891): pid=21505 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 935.459257][T21522] minix_free_block (loop4:10592): bit already cleared 07:19:41 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @rand_addr=0x64010100}, 0x6}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r3}) setsockopt(r4, 0x0, 0x6, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 935.486041][T21522] minix_free_block (loop4:9523): bit already cleared [ 935.496704][ T26] audit: type=1800 audit(1588576781.062:892): pid=21504 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="/" dev="loop5" ino=1 res=0 [ 935.512792][T21527] minix_free_block (loop5:10592): bit already cleared 07:19:41 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000000)=""/152) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 935.534267][T21522] minix_free_block (loop4:44211): bit already cleared [ 935.542701][T21527] minix_free_block (loop5:9523): bit already cleared [ 935.563831][T21522] minix_free_block (loop4:36301): bit already cleared [ 935.574589][T21522] minix_free_block (loop4:21375): bit already cleared [ 935.581436][T21527] minix_free_block (loop5:44211): bit already cleared [ 935.584922][T21522] Trying to free block not in datazone [ 935.594157][T21522] minix_free_block (loop4:14418): bit already cleared [ 935.601019][T21527] minix_free_block (loop5:36301): bit already cleared [ 935.608770][T21522] Trying to free block not in datazone [ 935.622866][T21527] minix_free_block (loop5:21375): bit already cleared [ 935.645558][T21527] Trying to free block not in datazone [ 935.662869][T21527] minix_free_block (loop5:14418): bit already cleared [ 935.678597][T21542] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:41 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000180)={'bond0\x00', @ifru_names='geneve1\x00'}) 07:19:41 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x901, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000140)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 935.694464][T21527] Trying to free block not in datazone [ 935.712458][T21543] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:43 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x30) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:43 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0xe, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:43 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x82600, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000040)={0x1, 0x6}) 07:19:43 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) preadv(r2, &(0x7f00000017c0), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000140)=""/4096) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 938.329454][ T26] audit: type=1800 audit(1588576783.912:893): pid=21567 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16056 res=0 [ 938.343070][T21565] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 938.376568][T21567] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:19:44 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getpeername$tipc(r3, &(0x7f00000001c0), &(0x7f0000000200)=0x10) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="a38c4ce05466d34c04c6c14b4a3c243903856a176b65ac02a376c24241d2f52de6ba9bf0e5a67742319061a0cc6c7c65f9e9b1a2ab77bc15b9cf81262633e7bd3a1213fd5c35a26c94bdd6dc401bce009e65d7b8abf5679c3b6b23e3bf8ad6eac1cb7bc0ccc116174de69234728fd415c8ea51b4d69c3a3617df4b43668f7df26b160ac05c2c1ab159e87ef10e295b4ba717af45007180e2c532ee912cd5030463075504068f9fd52d7dbe8ff98fbb5234e55c53cc99ef006a21d146f0485a63d9a8023548b664841bd76b4111b44d4f018fa0bc29b1feb657be3775e0e856dc660fe732cf81880f0170a56a5d2b89ff", 0xf0}], 0x1, 0x0, 0x0, 0x40}], 0x1, 0x110) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:19:44 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80c1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f00000017c0), 0x0, 0x4) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000000c0)={r4, 0x9d214141d5eb8012}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 07:19:44 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x17) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 938.444004][T21570] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:44 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000002e40)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x7b, &(0x7f0000000140)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x80000001, 0x4}, &(0x7f0000000040)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 938.499257][ T26] audit: type=1800 audit(1588576784.082:894): pid=21567 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 938.505904][T21587] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 938.556238][T21581] minix_free_block (loop4:10592): bit already cleared [ 938.598923][T21581] minix_free_block (loop4:9523): bit already cleared [ 938.626552][T21597] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 938.653396][T21581] minix_free_block (loop4:44211): bit already cleared [ 938.654698][ T26] audit: type=1800 audit(1588576784.242:895): pid=21600 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16054 res=0 [ 938.677279][T21581] minix_free_block (loop4:36301): bit already cleared 07:19:44 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x6, 0x7, 0x2, 0x2}, {0x6, 0x36, 0x2f, 0x3}, {0x59b, 0xff, 0x3f, 0x41b90ebd}, {0xbb0d, 0x2, 0x8, 0x8}]}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, r2, 0x2, 0x73, 0x1000, 0x401}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000080)={@none, 0x8, 0x1f}) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) [ 938.722692][T21602] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 938.746904][T21581] minix_free_block (loop4:21375): bit already cleared [ 938.797423][T21607] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 938.820932][T21581] Trying to free block not in datazone [ 938.850631][T21581] minix_free_block (loop4:14418): bit already cleared [ 938.869988][ T26] audit: type=1800 audit(1588576784.452:896): pid=21600 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="/" dev="loop5" ino=1 res=0 [ 938.918713][T21581] Trying to free block not in datazone [ 938.952537][T21602] minix_free_block (loop5:10592): bit already cleared [ 938.996738][T21602] minix_free_block (loop5:9523): bit already cleared [ 939.024475][T21602] minix_free_block (loop5:44211): bit already cleared 07:19:44 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x31) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 939.053205][T21602] minix_free_block (loop5:36301): bit already cleared [ 939.081786][T21602] minix_free_block (loop5:21375): bit already cleared [ 939.088582][T21602] Trying to free block not in datazone [ 939.109240][T21602] minix_free_block (loop5:14418): bit already cleared [ 939.117040][T21602] Trying to free block not in datazone [ 939.165418][ T26] audit: type=1800 audit(1588576784.752:897): pid=21621 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16045 res=0 [ 939.195192][T21621] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 939.288059][ T26] audit: type=1800 audit(1588576784.872:898): pid=21621 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 939.315877][T21626] minix_free_block (loop4:10592): bit already cleared [ 939.330469][T21626] minix_free_block (loop4:9523): bit already cleared [ 939.337267][T21626] minix_free_block (loop4:44211): bit already cleared [ 939.359769][T21626] minix_free_block (loop4:36301): bit already cleared [ 939.366563][T21626] minix_free_block (loop4:21375): bit already cleared [ 939.374804][T21626] Trying to free block not in datazone [ 939.383569][T21626] minix_free_block (loop4:14418): bit already cleared [ 939.391176][T21626] Trying to free block not in datazone 07:19:47 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:47 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x9) 07:19:47 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002e40)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r7}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000300)={r7, 0x3}, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000000)={'wg1\x00', r8}) 07:19:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:47 executing program 5 (fault-call:6 fault-nth:0): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:19:47 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x32) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 941.443495][ T26] audit: type=1800 audit(1588576787.033:899): pid=21637 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15925 res=0 [ 941.450176][T21637] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 941.522828][T21649] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 941.571660][ T26] audit: type=1800 audit(1588576787.163:900): pid=21637 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 941.628459][T21642] FAULT_INJECTION: forcing a failure. [ 941.628459][T21642] name failslab, interval 1, probability 0, space 0, times 0 [ 941.643868][T21642] CPU: 1 PID: 21642 Comm: syz-executor.5 Not tainted 5.7.0-rc1-syzkaller #0 [ 941.652555][T21642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.662705][T21642] Call Trace: [ 941.666060][T21642] dump_stack+0x11d/0x187 [ 941.670397][T21642] should_fail.cold+0x5/0xf [ 941.674920][T21642] __should_failslab+0x82/0xb0 [ 941.679678][T21642] should_failslab+0x5/0xf [ 941.684101][T21642] __kmalloc+0x54/0x640 [ 941.688323][T21642] ? rw_copy_check_uvector+0x259/0x280 [ 941.693855][T21642] ? mntput_no_expire+0xae/0x540 [ 941.698802][T21642] rw_copy_check_uvector+0x259/0x280 [ 941.704112][T21642] import_iovec+0x61/0x220 [ 941.708567][T21642] copy_msghdr_from_user+0xa4/0xe0 [ 941.713712][T21642] recvmsg_copy_msghdr+0x48/0x90 [ 941.718652][T21642] ___sys_recvmsg+0x74/0x100 [ 941.723338][T21642] ? __fget_light+0xc0/0x1a0 [ 941.727918][T21642] ? __fdget+0x29/0x30 [ 941.732001][T21642] do_recvmmsg+0x17a/0x540 [ 941.736433][T21642] ? __this_cpu_preempt_check+0x3c/0x130 [ 941.742076][T21642] __sys_recvmmsg+0x1f1/0x200 [ 941.746740][T21642] ? fput+0x20/0x30 [ 941.750559][T21642] __x64_sys_recvmmsg+0x82/0xb0 [ 941.755490][T21642] do_syscall_64+0xc7/0x3b0 [ 941.759986][T21642] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 941.765928][T21642] RIP: 0033:0x45c829 [ 941.769864][T21642] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 941.789453][T21642] RSP: 002b:00007f93b4e05c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 941.797856][T21642] RAX: ffffffffffffffda RBX: 00000000004fb240 RCX: 000000000045c829 [ 941.806007][T21642] RDX: 0000000000000500 RSI: 0000000020003540 RDI: 0000000000000005 [ 941.813965][T21642] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 07:19:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:47 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket(0x6, 0x4, 0x100) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000080)={'syzkaller1\x00', {0x2, 0x4e22, @loopback}}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) [ 941.821936][T21642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 941.829906][T21642] R13: 000000000000089c R14: 00000000004cb4d3 R15: 00007f93b4e066d4 [ 941.859721][T21650] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:47 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'virt_wifi0\x00', &(0x7f0000000000)=@ethtool_gfeatures={0x3a, 0x5, [{}, {}, {}, {}, {}]}}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x4000) [ 941.892070][T21651] minix_free_block (loop4:10592): bit already cleared [ 941.905879][T21651] minix_free_block (loop4:9523): bit already cleared [ 941.912774][T21651] minix_free_block (loop4:44211): bit already cleared [ 941.920030][T21651] minix_free_block (loop4:36301): bit already cleared [ 941.927111][T21651] minix_free_block (loop4:21375): bit already cleared 07:19:47 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) [ 941.946315][T21651] Trying to free block not in datazone [ 941.958504][T21651] minix_free_block (loop4:14418): bit already cleared [ 941.976660][T21651] Trying to free block not in datazone 07:19:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 942.036582][T21685] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:47 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x33) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 942.086883][T21693] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 942.208894][ T26] audit: type=1800 audit(1588576787.793:901): pid=21702 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15857 res=0 [ 942.222120][T21702] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 942.313070][ T26] audit: type=1800 audit(1588576787.903:902): pid=21702 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 942.333144][T21706] minix_free_block (loop4:10592): bit already cleared [ 942.348973][T21706] minix_free_block (loop4:9523): bit already cleared [ 942.356687][T21706] minix_free_block (loop4:44211): bit already cleared [ 942.364083][T21706] minix_free_block (loop4:36301): bit already cleared [ 942.371389][T21706] minix_free_block (loop4:21375): bit already cleared [ 942.378203][T21706] Trying to free block not in datazone [ 942.384463][T21706] minix_free_block (loop4:14418): bit already cleared [ 942.391806][T21706] Trying to free block not in datazone 07:19:50 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x80000000, 0x8000004, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:50 executing program 5 (fault-call:6 fault-nth:1): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:19:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:50 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x34) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:50 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000180)="88", 0x1, r3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setfsuid(r5) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r7) keyctl$chown(0x4, r3, r5, r7) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 944.663250][ T26] audit: type=1800 audit(1588576790.253:903): pid=21717 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16062 res=0 [ 944.693815][T21717] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 944.701572][T21721] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:50 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3) ptrace$peekuser(0x3, 0x0, 0x9) [ 944.764073][T21728] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 944.810746][ T26] audit: type=1800 audit(1588576790.403:904): pid=21717 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 944.835658][T21730] minix_free_block (loop4:10592): bit already cleared [ 944.843608][T21730] minix_free_block (loop4:9523): bit already cleared [ 944.853516][T21730] minix_free_block (loop4:44211): bit already cleared 07:19:50 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x800, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 944.860606][T21730] minix_free_block (loop4:36301): bit already cleared [ 944.868152][T21730] minix_free_block (loop4:21375): bit already cleared [ 944.878699][T21730] Trying to free block not in datazone [ 944.884519][T21730] minix_free_block (loop4:14418): bit already cleared [ 944.894165][T21730] Trying to free block not in datazone 07:19:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:19:50 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x35) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:50 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000040)=0x5) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f00000017c0), 0x1cb, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x0, 0x400801) ioctl$USBDEVFS_DISCSIGNAL(r6, 0x8010550e, &(0x7f0000000240)={0x9, &(0x7f0000000180)="1f434d4e305a209e781e09240f12d4cc883c5b9c51dec1dd4bdfe4fe92b8691516243e837c556fb90ba9bfe4230a36d44cd5b6665674757034d09cff17440c057d714375ec2f0ef5316a0060b834837be499931f29c13d60fd3a8b30cfed26eddf"}) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000140)=0x54) 07:19:50 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x40000) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000cab000)=0xc) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040), 0x10) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f0000000000)) [ 945.085643][ T26] audit: type=1800 audit(1588576790.673:905): pid=21758 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16074 res=0 [ 945.113325][T21758] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 945.218736][T21767] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:50 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockname$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000080)) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 945.253539][ T26] audit: type=1800 audit(1588576790.843:906): pid=21758 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 945.334017][T21766] minix_free_block (loop4:10592): bit already cleared [ 945.340914][T21766] minix_free_block (loop4:9523): bit already cleared [ 945.364467][T21772] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 945.375217][T21766] minix_free_block (loop4:44211): bit already cleared [ 945.402106][T21766] minix_free_block (loop4:36301): bit already cleared [ 945.413150][T21766] minix_free_block (loop4:21375): bit already cleared [ 945.429480][T21766] Trying to free block not in datazone [ 945.445115][T21766] minix_free_block (loop4:14418): bit already cleared [ 945.451996][T21766] Trying to free block not in datazone 07:19:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x3}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:19:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xf, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:53 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f00000017c0), 0x1cb, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xffffffff) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)=0x3) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f00000002c0)={{&(0x7f0000000300)=""/125, 0x7d}, &(0x7f00000000c0), 0x27}, 0x20) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000280)={0x5, 0x7}) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000200)={{0x2, 0x4e22, @rand_addr=0x64010101}, {0x1, @link_local}, 0x2, {0x2, 0x4e24, @private=0xa010101}, 'ip6_vti0\x00'}) 07:19:53 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x36) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:53 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x639cb619) r3 = inotify_init() r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, &(0x7f00000000c0)=0x8) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000280)=0x102) inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0xfe) r7 = inotify_init() r8 = inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x80000000) inotify_rm_watch(r3, r8) inotify_rm_watch(r2, r8) [ 947.724516][ T26] audit: type=1800 audit(1588576793.313:907): pid=21789 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16095 res=0 [ 947.757841][T21789] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:19:53 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x24}, 0x1c) listen(r0, 0x400) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setfsuid(r2) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r2, r3) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={0x1, @null, @bpq0='bpq0\x00', 0x67c9, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x0, 0x4, 0x0, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x480480, 0x0) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) 07:19:53 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in=@empty, @in=@initdev}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:19:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 947.834864][ T26] audit: type=1800 audit(1588576793.423:908): pid=21789 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 947.863991][T21805] minix_free_block (loop4:10592): bit already cleared [ 947.903208][T21805] minix_free_block (loop4:9523): bit already cleared [ 947.927240][T21805] minix_free_block (loop4:44211): bit already cleared [ 947.934392][T21805] minix_free_block (loop4:36301): bit already cleared [ 947.937114][T21811] Unknown ioctl 35083 [ 947.941573][T21805] minix_free_block (loop4:21375): bit already cleared 07:19:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1017}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 947.952455][T21805] Trying to free block not in datazone [ 947.958027][T21805] minix_free_block (loop4:14418): bit already cleared [ 947.972240][T21805] Trying to free block not in datazone 07:19:53 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000002e40)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x7b, &(0x7f0000000140)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={r3, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x7, 0x8000, 0x4, 0x80000001, 0x8000}, &(0x7f00000000c0)=0x98) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0x400) r5 = open(&(0x7f0000000040)='./file0\x00', 0xcb51346c7edd201e, 0x2) write$char_usb(r5, &(0x7f0000000080)="be34b407c033794c7e50d739fb3c9a4aaaeec47200b9", 0x16) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x0, 0x4, 0x0, 0x0) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 947.997647][T21820] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:53 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x37) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 948.052992][T21825] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 948.207562][ T26] audit: type=1800 audit(1588576793.793:909): pid=21837 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16090 res=0 [ 948.217508][T21837] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 948.326961][ T26] audit: type=1800 audit(1588576793.913:910): pid=21837 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 948.343697][T21841] minix_free_block (loop4:10592): bit already cleared [ 948.352445][T21841] minix_free_block (loop4:9523): bit already cleared [ 948.359204][T21841] minix_free_block (loop4:44211): bit already cleared [ 948.367030][T21841] minix_free_block (loop4:36301): bit already cleared [ 948.374698][T21841] minix_free_block (loop4:21375): bit already cleared [ 948.382092][T21841] Trying to free block not in datazone [ 948.387642][T21841] minix_free_block (loop4:14418): bit already cleared [ 948.395862][T21841] Trying to free block not in datazone 07:19:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x48, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:56 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e21, 0xffff, @dev={0xfe, 0x80, [], 0x2d}}, {0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, [], 0x1}, 0x1ff}, 0xffff, [0x3, 0x7f, 0xfffffff8, 0x3, 0xffffffaa, 0x1, 0x6, 0x25df]}, 0x5c) getresgid(&(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) syz_mount_image$exfat(&(0x7f0000000180)='exfat\x00', &(0x7f00000001c0)='./file0\x00', 0x7fff, 0x6, &(0x7f0000000400)=[{&(0x7f0000000740)="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", 0x1000, 0x8}, {&(0x7f0000000200)="58c862fca27d3e79c6638aac832baead6bf6d1e371fadc2f901c304afb6b22c79563a03dde4f2585debd536922397a59d6bce4e8f862b82450e307e675b1e661307ede6780", 0x45, 0x1f}, {&(0x7f0000001740)="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", 0x1000, 0x1}, {&(0x7f0000002e80)="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", 0x1000, 0x82}, {&(0x7f0000000340)="4ca3928763440eadf5229d0f08019df598351b309403a5e33c1b056447f5e54f4185f92934d12578d2ab973c66587baaf33c790bccb02d0c63cd66818eccfe2f207cc3f88e69b53aa4ea9bdd4924d7d09ec652f3da6dd161f083a83885f2d9c367940ff9fbad0ca235cdb783234d3485088bf574c43c77b73dde139c9b23ac758f762556ec82e003ea2a26d321f3abe564cb1a5fe150bf930cc60898f21bf48affc6ae017bb3f740360a355efe6b834d", 0xb0, 0x9}, {&(0x7f0000000280)="9d6d7330d185686bdd833d775577597826517ef0b73a4d532f0fd5d556b5", 0x1e, 0x9}], 0x2010800, &(0x7f0000000580)={[{@fmask={'fmask', 0x3d, 0x800}}, {@gid={'gid', 0x3d, r2}}, {@errors_continue='errors=continue'}, {@fmask={'fmask', 0x3d, 0x4f1}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@umask={'umask', 0x3d, 0x8000}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@codepage={'codepage', 0x3d, 'iso8859-15'}}], [{@smackfsroot={'smackfsroot', 0x3d, 'self'}}, {@subj_user={'subj_user', 0x3d, ':'}}]}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) fallocate(r0, 0x40, 0x20, 0x3436) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000002e40)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x7b, &(0x7f0000000140)={r6}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={r6, 0x1}, 0x8) listen(r0, 0x400) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r7, 0x0, 0x4, 0x0, 0x0) connect$inet(r7, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000100)={0x0, 0x51, 0x5, 0x7, 0x8}) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f00000017c0), 0x0, 0x9) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000080)={0x8001006, 0x80000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000000)={0x7f, 0x4, 0x5, 0x100, 0x6}, 0x14) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0)=0xfff, 0x4) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:19:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x200024d5}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:19:56 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x38) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 950.781634][ T26] audit: type=1800 audit(1588576796.373:911): pid=21851 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16105 res=0 [ 950.816189][T21851] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:19:56 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f00000000c0)={0x0, 0x3}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r4, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000140)={0x400, 0x5, 0x9}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000200)={0x0, 0x100, 0xee2, &(0x7f00000001c0)=0x101}) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000000)="da4f0557b5f23123db0eae4b50fec9931ebe3702d69579d39fb028fb1724360da88cc1c506ba00844fd11068ff17392c107cc6ef1d21a104c46b21cf0a5260edbdafde91859e0b9ffad72e5959f19f033dbf537764294058a6d8bb162d09da6506e30b0add20210e74e87a2788f37d9d47fb298e711147b93d78c9d1f068a95a18363233bc02eeaaa4bc92582ae1166b97eb6245bd898e1ea8662a12589f", 0x9e) [ 950.966291][ T26] audit: type=1800 audit(1588576796.553:912): pid=21851 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 950.998188][T21875] minix_free_block (loop4:10592): bit already cleared 07:19:56 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x3fd, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x400, 0x410400) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 951.046625][T21875] minix_free_block (loop4:9523): bit already cleared 07:19:56 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f00000000c0)={0x5, "a294d61b61d73ab2abbdf283f6b56ce15c327725a13662b67de6286059626536f4d4231575dc8ae570500d3d4af29b62c2fd88c8dc107004ca9880273fa0c33f2fdcc7f7a636474587298b4e4328a18155f4423b9b43ddfa0ec1399532fe92e16d4c97fab9241dd584ea61e388787f1034eb2a1ddaf5e5daff84a930381457ca"}) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000040)={0x8, 0x9, 0x4, 0x20000, 0x8, {0x0, 0x2710}, {0x1, 0xc, 0x5, 0x63, 0x7, 0xff, "c99c8485"}, 0x2f3d, 0x3, @planes=&(0x7f0000000000)={0x4, 0x10000, @fd=r2, 0x4}, 0x1, 0x0, r1}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0xc, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 07:19:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x7ffff000}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 951.096321][T21875] minix_free_block (loop4:44211): bit already cleared 07:19:56 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x2b, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {0x12}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000140)={0x7, 0x2, 0x4, 0x7, 0x2, [{0xddd, 0x4000000000000000, 0xffffffff, [], 0x780}, {0x18, 0xa7, 0xc543, [], 0x2}]}) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x8, 0x60000) [ 951.180114][T21875] minix_free_block (loop4:36301): bit already cleared [ 951.196107][T21875] minix_free_block (loop4:21375): bit already cleared [ 951.228018][T21875] Trying to free block not in datazone [ 951.244850][T21875] minix_free_block (loop4:14418): bit already cleared [ 951.267881][T21892] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 951.282139][T21875] Trying to free block not in datazone 07:19:59 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:19:59 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80000, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000040)=""/158) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:19:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:19:59 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x92) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:59 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x2, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:19:59 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000602b02002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="08000210", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="699b8ccf4b7ae16e48df62749c34125e0918b837835482d1d1c168e7d24e35d171b2515069d6adba46ee01545043d83e35b2086392b28c9c618504f74be824204e3f954a58cc43a17c40ce71def3a36e69529ddefc277be067643900"/102], 0x48}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @loopback, 0xffff, 0x200, 0x1, 0x0, 0x2a9, 0x8, r3}) preadv(r0, &(0x7f00000017c0), 0x1cb, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r4, &(0x7f0000000140), 0x0, 0x7) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0x8, 0x3, 0x1}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$sock_ifreq(r7, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 953.932635][ T26] audit: type=1800 audit(1588576799.523:913): pid=21922 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16121 res=0 [ 953.951679][T21922] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:19:59 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x3, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 954.056405][ T26] audit: type=1800 audit(1588576799.623:914): pid=21922 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 954.065210][T21936] minix_free_block (loop4:10592): bit already cleared [ 954.082932][T21936] minix_free_block (loop4:9523): bit already cleared [ 954.090349][T21936] minix_free_block (loop4:44211): bit already cleared [ 954.097857][T21936] minix_free_block (loop4:36301): bit already cleared 07:19:59 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x300) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:19:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 954.105340][T21936] minix_free_block (loop4:21375): bit already cleared [ 954.112281][T21936] Trying to free block not in datazone [ 954.117894][T21936] minix_free_block (loop4:14418): bit already cleared [ 954.125255][T21936] Trying to free block not in datazone [ 954.133800][T21940] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:19:59 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x4, 0x3, 0x40, 0x4}, {0x1d5, 0x1, 0x8, 0x1}]}) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setfsuid(r5) write$FUSE_ATTR(r2, &(0x7f0000002380)={0x78, 0x0, 0x4, {0xda9, 0x3, 0x0, {0x6, 0x9, 0x32, 0x8, 0x6a87, 0x8, 0x3, 0xfff, 0x7, 0x8, 0x8, r5, 0x0, 0xfffffffb, 0x80}}}, 0x78) writev(r3, &(0x7f0000002340)=[{&(0x7f0000000140)="edd879b5d26fca14c544b6170bd81e9f8f3e7095179f6c9155f3526186f7eb1f90d8d8acf97fc9a194dcb6c8f1e236a49875ccb17f691d8723a3c4c166133f690cd96a59d6dc92b9e55c4fb48c8b6bc251b65840f9ccf0a7c0ea4fb4ef057533ef91f8340156fb497db6bd23bf14976317a318fc1a1d88d958c87746a8d6fc9ca807f63d8581e0c0e24a77d94ffec555e79633acca151f6341ec5156c3ac53feb79872a5ddc7d1a38716d9f142d73aad33732eb5c3911e8746eb40d0f711bb0c38f019f26052ce4ac96efc27ffb2518525497dbeebc2715ea8f5a1d853cf419d2b8b075bf6ed91dd3933ef6586c54488983c", 0xf2}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="22c53a07b347eb8d83e91ef818b9f9e7e7787f4cd4a3e37852c0c5b732b824e9914d2d43efb581e0bcdd5944b6d9333bf84d0dc6e3d29ecf1276a23ef2e56fc944defdc0cd6f8bbf7b445b6c0553e6e0ec6ebd4aa6f0ae2c10ea6f7e33fed7c871e6c56b9b77ec7ddffe93d81be2c7f5fdf8d4bfd207ecc9f7935cfb1395bee19336b82cdc6019d48e6f263865d9655a882b26fa8d11669efcb8b4aff07e2a2cede81772bbbc8579a8a9055954b90dec33a06829ab95748c2389e8a2899250a57e13ff588a2f2dc6034c790251a617030a9fd91e173a06b0eef8226b122ca607", 0xe0}, {&(0x7f0000001340)="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", 0x1000}], 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:19:59 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xa, 0xff, 0x2, 0x81, 0x0, 0x4, 0x11f}]}) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:19:59 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$RTC_WIE_ON(r2, 0x700f) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) [ 954.360962][ T26] audit: type=1800 audit(1588576799.953:915): pid=21971 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16132 res=0 [ 954.387618][T21974] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 954.403955][T21973] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 954.479153][T21981] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 954.495488][T21973] minix_free_block (loop4:10592): bit already cleared [ 954.505876][ T26] audit: type=1800 audit(1588576800.083:916): pid=21971 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 954.543720][T21973] minix_free_block (loop4:9523): bit already cleared [ 954.559654][T21973] minix_free_block (loop4:44211): bit already cleared [ 954.566444][T21973] minix_free_block (loop4:36301): bit already cleared [ 954.589042][T21973] minix_free_block (loop4:21375): bit already cleared [ 954.595828][T21973] Trying to free block not in datazone [ 954.601766][T21973] minix_free_block (loop4:14418): bit already cleared [ 954.608774][T21973] Trying to free block not in datazone 07:20:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:02 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:02 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x4, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:02 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f00000000c0)=0x73, 0x4) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) syz_open_dev$ttys(0xc, 0x2, 0x0) 07:20:02 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x500) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:02 executing program 3: clone(0x8295b880, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "6b57d5070798d2a9", "0c22dbea9bb92b9151ea828da9523db1", "5b19d53f", "173a718cc6fec8d3"}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_ifreq(r2, 0x8995, &(0x7f0000000040)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="631e65232adbe1ffa9c4fd45068cb8599f702e18ec92da3919d1ab66444cfe64"}) r5 = openat$cgroup_subtree(r4, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r6 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x39b) fdatasync(r7) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockopt$inet6_dccp_buf(r8, 0x21, 0xe, &(0x7f0000000140)=""/135, &(0x7f0000000200)=0x87) tee(r5, r6, 0x8001, 0x2) 07:20:02 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7d) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000180)={'veth0\x00', @ifru_data=&(0x7f0000000000)="a607c48e91ce9e3b82d87392faec56090c43befe350b38d1773d0a7c17272408"}) [ 957.039822][ T26] audit: type=1800 audit(1588576802.623:917): pid=22004 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16151 res=0 [ 957.085417][T22004] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:20:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x240240, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000140)={0xc, {0x99, "d9bfdced375a58b2f3dbc69878e9055c01012052bb0ee92e33f2c4a9832de6af7ec7a86e324eed5ca4e7e7f8d18dde69d3873a73b6217c1bdbb59a59b00c162e5291ec9c4a13593b36b938630467d135ebde0d216e6d21578d7967ba428491429b642de87c3888444115aea4620fdae2b0fa0f299466413d9381261faa079c368e0834591fe1af2988ca60f1861767b80a934d3e9b92b53606"}}, 0x9f) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x86, 0x4, 0x3}) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) [ 957.173035][T22021] minix_free_block (loop4:10592): bit already cleared [ 957.180648][T22021] minix_free_block (loop4:9523): bit already cleared [ 957.187457][T22021] minix_free_block (loop4:44211): bit already cleared [ 957.194514][T22021] minix_free_block (loop4:36301): bit already cleared [ 957.198283][ T26] audit: type=1800 audit(1588576802.793:918): pid=22004 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 07:20:02 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x5, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 957.201424][T22021] minix_free_block (loop4:21375): bit already cleared [ 957.230523][T22021] Trying to free block not in datazone [ 957.239023][T22021] minix_free_block (loop4:14418): bit already cleared [ 957.245992][T22021] Trying to free block not in datazone 07:20:02 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xa01, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x3) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mq_open(&(0x7f0000000040)='\x00', 0x800, 0x91, &(0x7f0000000080)={0xeb, 0x4, 0x100, 0xfffffffffffffffc}) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) fcntl$setsig(r1, 0xa, 0x23) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x7, 0x480080) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000140)={0x1}) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x80c0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f00000001c0)={0xf2, 0x0, 0x6}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') preadv(r5, &(0x7f00000017c0), 0x1cb, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x100001, 0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x3000003, 0x40010, r5, 0x82000000) getsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000001340), &(0x7f0000000100)=0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:20:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:02 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x600) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 957.525308][ T26] audit: type=1800 audit(1588576803.113:919): pid=22053 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16161 res=0 [ 957.582628][T22054] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 957.688783][ T26] audit: type=1800 audit(1588576803.273:920): pid=22053 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 957.710926][T22054] minix_free_block (loop4:10592): bit already cleared [ 957.717718][T22054] minix_free_block (loop4:9523): bit already cleared [ 957.728729][T22054] minix_free_block (loop4:44211): bit already cleared [ 957.738000][T22054] minix_free_block (loop4:36301): bit already cleared [ 957.746502][T22054] minix_free_block (loop4:21375): bit already cleared [ 957.755105][T22054] Trying to free block not in datazone [ 957.762410][T22054] minix_free_block (loop4:14418): bit already cleared [ 957.770743][T22054] Trying to free block not in datazone 07:20:05 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:05 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'vlan1\x00', @ifru_ivalue=0x6}) 07:20:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x85, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x6, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:05 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) setregid(r3, r5) r6 = socket(0x10, 0x2, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r8, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r8, 0x5382, &(0x7f0000000040)) 07:20:05 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x700) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 960.114674][ T26] audit: type=1800 audit(1588576805.703:921): pid=22069 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16172 res=0 07:20:05 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)="70d942317cf3487bba939ac7301db67f4440ed5eaaaccab52026ba9a68dc24d394825a", 0x23, r3}, 0x68) [ 960.164777][T22079] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 960.253442][ T26] audit: type=1800 audit(1588576805.843:922): pid=22069 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 960.273645][T22079] minix_free_block (loop4:10592): bit already cleared [ 960.312354][T22079] minix_free_block (loop4:9523): bit already cleared [ 960.323250][T22094] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:20:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x7, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xa3, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:06 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x24, r4, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r4, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x7}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xf800}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1c0}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0xc34e, 0x3ff, 0x2, 0x5]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x2008081}, 0x40801) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:20:06 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = gettid() r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) connect$netrom(r4, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) tkill(r3, 0x36) capset(&(0x7f0000000000)={0x20080522, r3}, &(0x7f0000000040)={0x0, 0x5, 0x7ff, 0x8, 0x1, 0xaf70}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 960.363587][T22079] minix_free_block (loop4:44211): bit already cleared [ 960.388521][T22094] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 960.398129][T22079] minix_free_block (loop4:36301): bit already cleared [ 960.464013][T22079] minix_free_block (loop4:21375): bit already cleared [ 960.495839][T22079] Trying to free block not in datazone [ 960.505034][T22079] minix_free_block (loop4:14418): bit already cleared 07:20:06 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x84f0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd5c8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20008081) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 960.512518][T22079] Trying to free block not in datazone [ 960.569613][T22117] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:20:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:20:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x1cb, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 07:20:08 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x900) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:08 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x8, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 963.188978][ T26] audit: type=1800 audit(1588576808.784:923): pid=22133 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16189 res=0 [ 963.220329][T22136] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:20:08 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x8, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 963.240198][T22133] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 963.246198][T22144] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:20:08 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x29, 0x2, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000140)={0x9f0000, 0x101, 0x40, r3, 0x0, &(0x7f00000000c0)={0x98091f, 0xfffffff8, [], @string=&(0x7f0000000080)=0xff}}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffd, 0x8, 0x6, @scatter={0x1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/1, 0x1}]}, &(0x7f0000000200)="29199ca8515bc89e", &(0x7f0000000240)=""/155, 0xdebb, 0x0, 0xffffffffffffffff, &(0x7f0000000300)}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f00000017c0), 0x1cb, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000040)='ppp0\x00', 0x0, r6) setsockopt(r4, 0x0, 0x4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @private=0xa010100}, 0x10) [ 963.343783][ T26] audit: type=1800 audit(1588576808.934:924): pid=22133 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 963.345501][T22152] minix_free_block (loop4:10592): bit already cleared 07:20:09 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f00000000c0)=0x2, 0x81, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x2, 0x1) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000200)={{0xf9, 0xd1}, 'port1\x00', 0x1, 0x20024, 0x8, 0x9c, 0x800, 0x2, 0x200, 0x0, 0x1, 0x7}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000180)=0xc) ioctl$sock_ifreq(r2, 0x8929, &(0x7f00000001c0)={'bond0\x00', @ifru_names='ip6_vti0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000000)={0x6458, 0x8, 0x0, 'queue0\x00', 0x8}) [ 963.397807][T22152] minix_free_block (loop4:9523): bit already cleared [ 963.404588][T22152] minix_free_block (loop4:44211): bit already cleared [ 963.413961][T22152] minix_free_block (loop4:36301): bit already cleared [ 963.421158][T22152] minix_free_block (loop4:21375): bit already cleared [ 963.434737][T22152] Trying to free block not in datazone [ 963.440337][T22152] minix_free_block (loop4:14418): bit already cleared 07:20:09 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfc, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:09 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0xa00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 963.447149][T22152] Trying to free block not in datazone 07:20:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x9, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 963.585607][ T26] audit: type=1800 audit(1588576809.174:925): pid=22173 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16337 res=0 [ 963.612827][T22173] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 963.692950][T22180] minix_free_block (loop4:10592): bit already cleared [ 963.705375][ T26] audit: type=1800 audit(1588576809.294:926): pid=22173 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 963.724615][T22180] minix_free_block (loop4:9523): bit already cleared [ 963.771675][T22180] minix_free_block (loop4:44211): bit already cleared [ 963.778460][T22180] minix_free_block (loop4:36301): bit already cleared [ 963.805670][T22180] minix_free_block (loop4:21375): bit already cleared [ 963.817443][T22180] Trying to free block not in datazone [ 963.823277][T22180] minix_free_block (loop4:14418): bit already cleared [ 963.831055][T22180] Trying to free block not in datazone 07:20:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:11 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x44a00, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:20:11 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:11 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xc, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x3, 0x1, 0x7df2, 0x1000, 0x2}) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_ifreq(r2, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) socket$caif_stream(0x25, 0x1, 0x3) 07:20:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0xa, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:11 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0xb00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 966.307347][ T26] audit: type=1800 audit(1588576811.894:927): pid=22199 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16223 res=0 [ 966.333617][T22199] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:20:12 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) chmod(&(0x7f0000000000)='./file0\x00', 0xab) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x440) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:20:12 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) preadv(r1, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000140)={0x5, 0x0, [{}, {}, {}, {}, {}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x7fffffff) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x4e, 0x4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r5}, 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)={r5, 0x44, "b9dc59481e639c25b46422659b4cf98a975d244d609005cf3028d720641466540f188fc9394379b65b6612e4cd7a4dbc312aed007c433093921e1f707a6e63918ca9f358"}, &(0x7f00000000c0)=0x4c) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x282002) 07:20:12 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 966.460812][ T26] audit: type=1800 audit(1588576812.054:928): pid=22199 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 07:20:12 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4ff, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:12 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0xb, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 966.615277][T22225] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 966.627298][T22213] minix_free_block (loop4:10592): bit already cleared [ 966.644262][T22213] minix_free_block (loop4:9523): bit already cleared 07:20:12 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 966.661669][T22213] minix_free_block (loop4:44211): bit already cleared [ 966.679544][T22213] minix_free_block (loop4:36301): bit already cleared [ 966.719949][T22213] minix_free_block (loop4:21375): bit already cleared [ 966.772120][T22213] Trying to free block not in datazone [ 966.793312][T22213] minix_free_block (loop4:14418): bit already cleared [ 966.840556][T22213] Trying to free block not in datazone 07:20:14 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0xc, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:14 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:14 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000000)={0x1, 0xfffffffa, 0xfffffff8, 0x7c7, 0x2, 0x941b, 0x8}) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) 07:20:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x4, 0x4}, {0xff, 0x8}, 0x0, 0x2, 0x74}) clone(0x20980200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setfsuid(r7) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r9) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{0x2, 0x0, r5, r7, r9, 0x1aa, 0x5838}, 0x5958, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) setsockopt(r0, 0xb595, 0x9, &(0x7f0000000080)="75bdafab1ae85e189200de848e79e128dcf746f8fa54757a12603c4609562c4295e1595ec7cd7852f87448e39c6e8acbf1d57d22285d77e89d536087bba16b1c6092ecf3e8c00f05e64a719d122888c0a01fa5e9bb742f57212643c3851af8aa7c3e0d3a836c1d33bc646f2616376baddc4221f2be4fbe78ac5db4882a", 0x7d) [ 969.388652][ T26] audit: type=1800 audit(1588576814.984:929): pid=22264 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16259 res=0 [ 969.422588][T22264] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 969.458598][T22265] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 969.512764][ T26] audit: type=1800 audit(1588576815.104:930): pid=22264 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 969.591069][T22289] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 969.601189][T22282] minix_free_block (loop4:10592): bit already cleared 07:20:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x600, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 969.665431][T22282] minix_free_block (loop4:9523): bit already cleared 07:20:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0xd, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:15 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) [ 969.724879][T22282] minix_free_block (loop4:44211): bit already cleared [ 969.769469][T22282] minix_free_block (loop4:36301): bit already cleared [ 969.799678][T22282] minix_free_block (loop4:21375): bit already cleared 07:20:15 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x0, 0x6, 0xd1bc, 0x100, 0x3, "a4f6bfa342e533f0"}) 07:20:15 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x102) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000080)=r5) [ 969.820719][T22282] Trying to free block not in datazone [ 969.836015][T22282] minix_free_block (loop4:14418): bit already cleared [ 969.852790][T22282] Trying to free block not in datazone 07:20:15 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0xd00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:15 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:20:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 969.925742][T22308] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 969.948021][T22312] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 970.143232][ T26] audit: type=1800 audit(1588576815.734:931): pid=22335 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16222 res=0 [ 970.171892][T22335] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 970.236615][ T26] audit: type=1800 audit(1588576815.824:932): pid=22335 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 970.263904][T22340] minix_free_block (loop4:10592): bit already cleared [ 970.271039][T22340] minix_free_block (loop4:9523): bit already cleared [ 970.277765][T22340] minix_free_block (loop4:44211): bit already cleared [ 970.289054][T22340] minix_free_block (loop4:36301): bit already cleared [ 970.295916][T22340] minix_free_block (loop4:21375): bit already cleared [ 970.303935][T22340] Trying to free block not in datazone [ 970.310093][T22340] minix_free_block (loop4:14418): bit already cleared [ 970.317078][T22340] Trying to free block not in datazone 07:20:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:17 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0xe, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:17 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xff2, @remote, 0x10004}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) sendto$inet6(r0, &(0x7f00000001c0)="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", 0x134, 0x44010, &(0x7f0000000180)={0xa, 0x4e24, 0x7fff, @ipv4={[], [], @loopback}, 0x3}, 0x1c) 07:20:17 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r3 = dup(r2) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x210000, 0x0) 07:20:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x900, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:17 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0xe00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 972.462383][ T26] audit: type=1800 audit(1588576818.054:933): pid=22350 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16360 res=0 [ 972.467846][T22350] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 972.496691][T22353] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 972.577884][T22363] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 972.578625][T22364] minix_free_block (loop4:10592): bit already cleared [ 972.596733][T22364] minix_free_block (loop4:9523): bit already cleared [ 972.603496][T22364] minix_free_block (loop4:44211): bit already cleared [ 972.610543][T22364] minix_free_block (loop4:36301): bit already cleared [ 972.617414][T22364] minix_free_block (loop4:21375): bit already cleared [ 972.617804][ T26] audit: type=1800 audit(1588576818.154:934): pid=22350 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 972.624823][T22364] Trying to free block not in datazone [ 972.647646][T22364] minix_free_block (loop4:14418): bit already cleared [ 972.654755][T22364] Trying to free block not in datazone 07:20:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0xf, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:18 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0xf00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:18 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)) r4 = socket(0x10, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c4}, 0x4004800) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)={r7}) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:20:18 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 972.844831][T22385] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 972.863871][T22386] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 972.864113][ T26] audit: type=1800 audit(1588576818.454:935): pid=22384 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16354 res=0 07:20:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xc00, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 972.903009][T22389] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 972.991601][T22389] minix_free_block (loop4:10592): bit already cleared [ 973.007224][T22389] minix_free_block (loop4:9523): bit already cleared [ 973.014740][T22389] minix_free_block (loop4:44211): bit already cleared [ 973.022219][T22389] minix_free_block (loop4:36301): bit already cleared [ 973.022671][T22396] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 973.029840][T22389] minix_free_block (loop4:21375): bit already cleared [ 973.046990][ T26] audit: type=1800 audit(1588576818.584:936): pid=22384 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 973.049133][T22389] Trying to free block not in datazone [ 973.074902][T22389] minix_free_block (loop4:14418): bit already cleared [ 973.088801][T22389] Trying to free block not in datazone [ 973.119013][T22406] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:20:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x10, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:21 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1100) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xe00, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:21 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f00000017c0), 0x1cb, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x2fb, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x2}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x4, 0x6, 0x2}, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x7ff}}, 0x10) 07:20:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 975.497426][T22425] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 975.528161][ T26] audit: type=1800 audit(1588576821.114:937): pid=22429 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16068 res=0 07:20:21 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:20:21 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000040)=0x2000269) setsockopt(r1, 0xff, 0x5, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000002e40)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x7b, &(0x7f0000000140)={r6}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x401, 0x5, 0x80, 0xb515, 0xc4}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={r7, 0xc4, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, [], 0x1}, 0x4}, @in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x40, @private0, 0x800}, @in6={0xa, 0x4e21, 0x8001, @ipv4={[], [], @local}, 0x7}, @in6={0xa, 0x4e24, 0x4, @remote, 0x955c}, @in6={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, [], 0x1}, 0x1}, @in6={0xa, 0x4e23, 0x401, @empty, 0x8}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={r6, 0x6}, 0x8) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 975.555610][T22426] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 975.591233][T22435] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 975.624600][T22444] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:20:21 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) r3 = dup2(0xffffffffffffffff, r2) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x2, 0x7, 0x6, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='veth0_to_bond\x00'}) 07:20:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x11, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 975.668680][T22435] minix_free_block (loop4:10592): bit already cleared [ 975.687465][ T26] audit: type=1800 audit(1588576821.274:938): pid=22429 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 975.706669][T22435] minix_free_block (loop4:9523): bit already cleared 07:20:21 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}]}}}]}, 0x3c}}, 0x0) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:20:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xf00, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 975.767332][T22435] minix_free_block (loop4:44211): bit already cleared [ 975.793697][T22460] bond0: option mode: unable to set because the bond device has slaves [ 975.803719][T22460] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 975.815084][T22435] minix_free_block (loop4:36301): bit already cleared [ 975.854850][T22435] minix_free_block (loop4:21375): bit already cleared [ 975.871019][T22435] Trying to free block not in datazone [ 975.896133][T22435] minix_free_block (loop4:14418): bit already cleared [ 975.932866][T22435] Trying to free block not in datazone 07:20:24 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:24 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, [0xab7, 0xc3, 0x1, 0xa55a]}) 07:20:24 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xc0, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}, {{&(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000240)="2f3a356463f738976ff57706a3f1561a269a368cd8e2b4d60b4bf4cd577b26c094abbb5e949006975549ee02598ed4e6da1e06e649280e25adc1c9eadf6196f376f19a9bc86fb37e16e74a94ee39e313ae44f94d01fe0718417ef984cf56df198b833a110e43d4759e6cef7ca8a3e7b4d65d7398b53cbe5c1423692e707464e6acd7d9edd727e657e7831abaebbe5a51bb39e5c483630ff6a891b01828ddd58803675f19f4e323d69bdfc6e2c8", 0xad}, {&(0x7f0000000340)="f2541bf5d15695a1e748fab811e379c20e4be110160d8b7b2ccf01ff49dee6f24c1ee039a6c9602c1e", 0x29}, {&(0x7f0000000380)="be0f93849e1b235f5d5795c872bd51b471e966bf5b99e3abd199c1a01507055739009997db91c1b0748fb8944c68de32735a404132fadd7e8055747899d637b9809e829d6c1842e53873a8ab5df99a1780bc3f5a1191a45cecb41952cbd5d899f5cab88e942e19037f83932a7654339d1f7f28878ee66524e1870ce808ea099ec9112cce8507491e4ed6f5d944052c4456390af63f81bf6c0bfbde58b3c179a737158ccb87023f4685e3246cfd7cfaefd843bd2a7f540eb041527a85951893fc5cb32b5a", 0xc4}, {&(0x7f0000000500)="2d034a8c2770ba4b35c115a4eee70d1676871cbdcd505aec9d7e70b511b2b6cee1fa79f5d7401cc4665663f3083aad1bef325daccb90eb0f2e772294da5a15dc69baaf9a0c71c5f789f455118414e58f35d34b99132a2ae5cef2b2099c6d45bc57259aa9cc1f60046e10d89a429e610a8e22d7444bebbf11783a92e9c186dd79344e5547592dec3a871d27e231ea5b9e7257b979f423d7c6e601cfa15744f437b172cad6d2fb83155d88a8f8200bbd10fbab365fc4e1bbf8b7d7062c58c2c34ac91c", 0xc2}, {&(0x7f0000000600)="de7ff0ad8f1f2c5369bc94210102ac012438d383bf7df99fa1fbdf54fc129333a2a1c3d2360cfb67ea8de9896f9409d12ec767da506e37341c19f0d61ff4d0916de0ad81363fc6d99e26a8c32c0b62cda56a3f1a8ca02f2f71211e24b95b925b393fd7944066258b6e264f831eb9d50afbaa4a34dbbb4a9fdf139af3", 0x7c}, {&(0x7f0000000740)="944faaa6faecd17350133fd960ccc9a5429d22de2067cade14ec73ff8418f72234f2f10caeba5adcfcf1893a8dadba3c91141a191552899ba88e8072209cad52701aecbe5b56218535e066161ffeae8266d683b0f997b0ac814d0ebafccaed81ecb2748c38cf678efcf028a0084a346becd900db4f5e2140d4b1cd6d858a63caac2cbfed6b1118485f539f42cb1e9192b8521639714b12bd996caba1cc95aaae09fabf505340ffd80a304658cc0916645e097a3a", 0xb4}, {&(0x7f0000000800)="9a90960391690c03be80256165865979f6c51b813ed15e2bddd97b767e7692620e4ce0e744f69922e4a7d3d1af965396976fb0318e2a2098b3451cb3e60faacd31ad8ead6cd4674226d287f699227899e5c9f4edc3db45919e49ade2a702ae172ba0aad56dddaa58f016fde8579f350bb8c62203ea86a1d5c4728fdf8e8a1f706b8fb2bf6b3506a3927dadd98170794591d556aa6fa47d4879e25c2a1a357debfbe04abcd0d0ce98bbf32bce0da54fa934c167dd448e476301ac1698427fead903fc41ac7fc5a3f4008b4ddd6fec28f864de35bb5b905dceaeb56b3e3828fefbdace3cccd3902066eabfa48d9e56", 0xee}, {&(0x7f0000000680)="a8f40a1ef9860e9ed1e1c1a65123e2561dff68f7ca96dfe860e21ed8c361950fa64ea6fe3c9f6cc79f3b1d193d8d86d2b888664a5aeb7da7bb586c230e96bfb677097409", 0x44}, {&(0x7f0000000900)="2309e0a6556e134d35396a90868a3cb3cb56e7e0861d1ba6341c3a7736dc687114549aeed0ea91afce01e2e5c4e2d016220b295a63dd4175f1cac652999ae80d2696813c03e3", 0x46}, {&(0x7f0000000480)="2ae84027a4e23331feb16774cff044fbd9b5014389eedbae8e27f70d5d2bc3e571e8f09e86bd32dcc88d02250707f03b0f20241d9c9a74da58150a", 0x3b}], 0xa, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x50}}], 0x2, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x4002080) socket$inet(0x2, 0x80001, 0x84) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x7b, &(0x7f0000000140)={r5}, 0x8) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000b40)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r5, @in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x3}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r6, 0x3f, 0x4, 0x9951, 0x7fff, 0x1}, 0x14) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:20:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x12, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:24 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1200) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x1f00, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 978.590617][ T26] audit: type=1800 audit(1588576824.184:939): pid=22490 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16290 res=0 [ 978.623350][T22488] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:20:24 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x10, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r3 = accept4$inet6(r2, 0x0, &(0x7f0000000080), 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0x4}, @window={0x3, 0x8, 0x200}, @window={0x3, 0x0, 0xb54}, @sack_perm], 0x4) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x2001, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='bond0\x00', 0x0, r5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r6, &(0x7f00000017c0), 0x1cb, 0x0) read$FUSE(r6, &(0x7f00000001c0), 0x1000) 07:20:24 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockopt$netlink(r2, 0x10e, 0x5, &(0x7f0000000040)=""/61, &(0x7f0000000080)=0x3d) [ 978.629440][T22490] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 978.642911][T22494] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 978.713205][ T26] audit: type=1800 audit(1588576824.304:940): pid=22490 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 07:20:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x2000, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:24 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000180)="88", 0x1, r3) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)='^*\x00') [ 978.758322][T22506] minix_free_block (loop4:10592): bit already cleared [ 978.793744][T22506] minix_free_block (loop4:9523): bit already cleared [ 978.836541][T22506] minix_free_block (loop4:44211): bit already cleared [ 978.862331][T22506] minix_free_block (loop4:36301): bit already cleared 07:20:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x13, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 978.899481][T22528] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 978.904200][T22506] minix_free_block (loop4:21375): bit already cleared 07:20:24 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xe) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 978.941924][T22506] Trying to free block not in datazone [ 978.955399][T22529] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 978.967644][T22506] minix_free_block (loop4:14418): bit already cleared [ 979.022563][T22506] Trying to free block not in datazone 07:20:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:27 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000002e40)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000280)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)="a0", 0x1}], 0x1}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x7b, &(0x7f0000000140)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r4, 0x6}, &(0x7f00000001c0)=0x8) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r6 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x10000) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r7, &(0x7f0000000200)=[{&(0x7f0000000300)=""/193, 0xc1}], 0x1, 0x2000000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r7, 0x28, &(0x7f00000000c0)}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) 07:20:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x3f00, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000440)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x4, 0x0, 0x101}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x400) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f0000000380)=[{0x0, 0x0, 0x1000}], 0x9b) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)={0x1, 0x0, [{0x2, 0x8, 0x6, 0x9, 0x2}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r4, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r4, 0xc004aea7, &(0x7f0000000240)=0xffff) semtimedop(r2, &(0x7f0000000040)=[{0x5, 0x7e90, 0x1000}, {0x2, 0xbd, 0x800}, {0x1, 0x4, 0x1800}, {0x4, 0xf5a9, 0x800}, {0x1, 0x0, 0x1800}, {0x3, 0x752}, {0x2, 0x101, 0x800}], 0x7, &(0x7f0000000080)) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x0, 0x4, 0x0, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x300, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r6, 0x8010550e, &(0x7f0000000200)={0xea, &(0x7f0000000140)="1ddd7840bc5cbf7180f59e62ceb04cc182fcf52478b40b8d5d53c9a3f3b80dd7b9776085c2d3eb7db46600ddf7fa7df8ef0312566682a1d3e04b7f2b4151fe90b6fd1152790941ffb37a82e44e4c42c108df9aea70bda56463f13b4dd1a439dc9ac543f9673e687b6485289d35d1c4239429e1d91cc142a3c23b3e9c67581b6fd6381654d2e01489eea7319401f0f64015554d219c6fcb90826bac4af2940fcf1980959fab9b381217a9065d8ce1aa8850b86a0baf7c"}) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:20:27 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1300) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:27 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x14, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 981.652410][T22554] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 981.668323][ T26] audit: type=1800 audit(1588576827.265:941): pid=22559 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16267 res=0 [ 981.707764][T22565] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 981.826853][T22565] minix_free_block (loop4:10592): bit already cleared [ 981.836189][ T26] audit: type=1800 audit(1588576827.435:942): pid=22559 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 07:20:27 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000080)={0x9c0000, 0xb7, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00905, 0x8, [], @ptr=0xffffffff}}) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf250f0000001c000680080001003f00000004000200040002000800010006000000"], 0x30}, 0x1, 0x0, 0x0, 0x10810}, 0x4040) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:20:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 981.879833][T22565] minix_free_block (loop4:9523): bit already cleared 07:20:27 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x15, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 981.936570][T22565] minix_free_block (loop4:44211): bit already cleared 07:20:27 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x404000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getpeername$packet(r7, &(0x7f0000001bc0)={0x11, 0x0, 0x0}, &(0x7f0000001c00)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002600)={&(0x7f0000001c40)={0x98c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x4}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3f070ad3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x32c}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9152}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xc302}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c, 0x4, [{0x49c, 0x0, 0x2, 0x10001}, {0x1b, 0x17, 0x4f, 0x2}, {0x20, 0x6, 0x81, 0x4}, {0x1f, 0xf8, 0xfd, 0x5}, {0x1f, 0xf9, 0x20, 0x8}, {0x8, 0x20, 0x8, 0x5}, {0x5f20, 0x81, 0x80, 0x1000}, {0x40, 0x20, 0xc8, 0x8}, {0x8000, 0xff, 0xff, 0x8}]}}}]}}, {{0x8, 0x1, r6}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x140}}, {0x8, 0x6, r8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x400, 0x9, 0x0, 0x1}, {0x0, 0x7, 0x4, 0x7fff}, {0x200, 0x9, 0x6d, 0x6}, {0x4, 0x7, 0x1, 0x8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x81}}}]}}]}, 0x98c}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4c800) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x44000) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 981.994300][T22565] minix_free_block (loop4:36301): bit already cleared [ 982.054604][T22565] minix_free_block (loop4:21375): bit already cleared [ 982.100618][T22565] Trying to free block not in datazone [ 982.118272][T22565] minix_free_block (loop4:14418): bit already cleared 07:20:27 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) listen(r0, 0x7) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000002e40)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)="a9246473d7dc5e043925db74920208e42e11c4c43c8c7db0e8830aef09064076b1e9cd1ba9decae06b", 0x29}], 0x1}}], 0x1, 0x9) sendmmsg$inet_sctp(r5, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x7b, &(0x7f0000000140)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={r7, @in={{0x2, 0x4e24, @empty}}, 0x7ff, 0x80000000, 0x7f, 0x7ff, 0x5}, &(0x7f0000000080)=0x98) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 982.149695][T22565] Trying to free block not in datazone 07:20:27 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1400) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 982.345306][ T26] audit: type=1800 audit(1588576827.935:943): pid=22600 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16262 res=0 [ 982.433381][T22600] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 982.503596][ T26] audit: type=1800 audit(1588576828.095:944): pid=22600 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 982.514418][T22605] minix_free_block (loop4:10592): bit already cleared [ 982.560615][T22605] minix_free_block (loop4:9523): bit already cleared [ 982.567315][T22605] minix_free_block (loop4:44211): bit already cleared [ 982.586094][T22605] minix_free_block (loop4:36301): bit already cleared [ 982.593238][T22605] minix_free_block (loop4:21375): bit already cleared [ 982.600795][T22605] Trying to free block not in datazone [ 982.606336][T22605] minix_free_block (loop4:14418): bit already cleared [ 982.613789][T22605] Trying to free block not in datazone [ 982.624852][T22600] syz-executor.4 (22600) used greatest stack depth: 10336 bytes left 07:20:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4800, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:30 executing program 3: clone(0x848af200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r3 = semget$private(0x0, 0x4000000009, 0x0) semop(r3, &(0x7f0000000380)=[{0x0, 0x0, 0x1000}], 0x9b) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$GETVAL(r3, 0x3, 0xc, &(0x7f00000001c0)=""/4096) 07:20:30 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @empty, 0x3f}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f00000017c0), 0x1cb, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0x0, 0x2, 0x8, r2, 0x0, &(0x7f0000000040)={0x9a0908, 0x3c, [], @ptr}}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) listen(r0, 0x400) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x0, 0x4, 0x0, 0x0) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:20:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x16, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:30 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1500) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 984.724959][ T26] audit: type=1800 audit(1588576830.315:945): pid=22616 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16284 res=0 [ 984.757375][T22616] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 984.759004][T22619] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 984.844617][ T26] audit: type=1800 audit(1588576830.435:946): pid=22616 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 984.899206][T22619] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:20:30 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x400) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000140)={0x5, {{0xa, 0x4e21, 0x4, @loopback, 0xfffffffa}}, {{0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x21}, 0x8}}}, 0x108) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:20:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4c00, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 985.022841][T22629] minix_free_block (loop4:10592): bit already cleared 07:20:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x500, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 985.075634][T22629] minix_free_block (loop4:9523): bit already cleared 07:20:30 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000000)={0x1}) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x20) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x8915, &(0x7f0000000180)={'veth1_to_batadv\x00', @ifru_names='veth0_virt_wifi\x00'}) [ 985.119982][T22629] minix_free_block (loop4:44211): bit already cleared [ 985.144694][T22629] minix_free_block (loop4:36301): bit already cleared [ 985.160225][T22629] minix_free_block (loop4:21375): bit already cleared [ 985.185427][T22629] Trying to free block not in datazone [ 985.203645][T22629] minix_free_block (loop4:14418): bit already cleared 07:20:30 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00', r5}) sendmsg(r2, &(0x7f0000000640)={&(0x7f0000000080)=@can={0x1d, r6}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="d9d02a942d61af50bb1a18a8b25ad6b2b7f5512e429e042d1e32701e0fbc15899c4df0e4772b8388ae7bd789d4fcc2ef4c2091e0b59787009081785d8b6a3ce5f40a3553dbd755c754f6e3935a5a33edd89ab676533ad4fba42a9501bbb92df2e6913d3b48cf2f9f29313f40c196cdfb635babeb104598e2bbf653307ec36a1db85c3fb3f45840c3bdd455ad636697733c8afbdd280cba2ad9fd838da89ec1ec7ec99608a844d9ae9a99aed48a2bf3f367cf58ac86e1fd5331b091ce48c07bc961be861ac0f41acb4a0ac70919c567b23ea25f4f4db002d4151b67ec193a25465e119693279d900266ebc4d38df816c9b7d175384393", 0xf6}, {&(0x7f0000000240)}], 0x2, &(0x7f00000002c0)=[{0xb8, 0x117, 0xe1d9, "dec729367d6373d9767df80bb175ac22ba3602d6cae32d0526b8b91f7fe1a77afba343a036f6d740835e77fc299eaccf8e328eafed7307d90bba8871c8aed9f474a3c21634fe57df7a19cd9442edee836207afacc9cceeaa975d89ebc2ea34eb93ea06b4c348e471b98213b3f2df78b1a75246ffdecd21251c4c2bd13d7a44a55a2f77374cc8cda7ab38f2cbc6adb79f9395095aacd651b3b6aeb7931e3846c0ae32c3c9ad"}, {0x108, 0x1, 0x2, "fb376934ffcfba8bdb949f6a0931448efc4070e6051ed643d7ac159e5d5344f30abb02812eb156f99a86d413119fe12dc5435bcd73c8d6f7a170114a81053e9fb99ab1b40bc2270fb054fb20ea4e317a1f080cc7682c8ce228a12dce2d142da6d348f27732351b557a32e40f991bf708934498d67917a4c79cc698f1286818f9657fdfc5e0a85d51433d63ea1b2e2003f237af74d0a367981f75804bdaa1c0561d1120c1290d0ecf8274a87a7de4fd08072c1462855f81c13fd9dafc8e18e11ca40aa3a71c3d5f95d55630ad963ba15a503b7b4f08ee2bedb206d1e3b2d2cefcbc02e599b31d40d302fa870f48931aa39a32edef3c478571"}, {0xd0, 0xff, 0x5e1c, "942c0d436f60f1e6d741373cf90001fa331537c7a4e402ecec3ae22dbe335122d732828aa06dde21101948b71e6918a2ede1f477afe1cd3c79deb153ebf98e5f469f8daa1955242fa0d74d8d24dda8ff2af7685cdbdd1e3e7fe10bed51cc43318d4a69436122e8f85f376edc61b7dee474beb5ca7f95116d30126f805dd3fbbf76b55e2fee36812bce04be390cd7dcaa5f2ec77c80f71ad8a766498f1769f9a7f66cf4936969834c7a6634e43a573e8d80e745006cb32cf2911fc3"}, {0xd0, 0x10f, 0x34ef, "5b17484d44dd1314a01933cd2dd735e770e983c92b3c7cf605f96d8f43ac61abc27060c4fcceb2751f4e1bc81c5235829e06a2e29ab90836300965b4f5ab76c3aef6c6c81eaf389f05e690572253d05e88e98a82f8dece1c583284f275217d31929511a4f67f19ef7edeba7c6c348cd8afaddec17916eff3a198a32e42ff0682398ce316b4a72a2f4fc51e6b5f0334289c0fb7c223ad628b058b08c7e40f62cc7b217cd456eb1a7464f77fe1bf752dec6af3715e906935dd0e4489dd9035f2"}], 0x360}, 0x1) 07:20:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 985.229179][T22629] Trying to free block not in datazone 07:20:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:33 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1600) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:33 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x500, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:33 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:20:33 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x6401, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x2, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x0, @multicast, 'team_slave_0\x00'}}, 0x1e) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20180000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x453, 0x400, 0x70bd26, 0x25dfdbff, "e5fd7f2602ca7c1bb6aeb57db7248c07dbe8cb4281c96c497bf8a11a75f53970f3f5501faecb5334a411c13157c74594f0ede63919b3db9d664f4784b2177396292a793c3fd713aa50a8785573e8c2eae4b8e4325fb924e2f87563064158ef69484e9fd8b4bbe7fa0ee26c855490", [""]}, 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) preadv(r5, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r5, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:20:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6000, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:33 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 987.818187][T22690] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 987.835737][ T26] audit: type=1800 audit(1588576833.425:947): pid=22691 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16307 res=0 [ 987.863880][T22691] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:20:33 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) signalfd(r3, &(0x7f0000000000)={[0x80000001]}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 987.997604][ T26] audit: type=1800 audit(1588576833.555:948): pid=22691 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 07:20:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6558, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:33 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x50000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 988.105025][T22712] minix_free_block (loop4:10592): bit already cleared [ 988.141356][T22719] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 988.152483][T22712] minix_free_block (loop4:9523): bit already cleared [ 988.185017][T22712] minix_free_block (loop4:44211): bit already cleared [ 988.203201][T22726] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 988.225056][T22712] minix_free_block (loop4:36301): bit already cleared [ 988.282516][T22712] minix_free_block (loop4:21375): bit already cleared [ 988.299949][T22712] Trying to free block not in datazone [ 988.305545][T22712] minix_free_block (loop4:14418): bit already cleared [ 988.312612][T22712] Trying to free block not in datazone 07:20:33 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1700) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010002}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 988.513698][ T26] audit: type=1800 audit(1588576834.106:949): pid=22739 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16382 res=0 [ 988.543513][T22739] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 988.613952][ T26] audit: type=1800 audit(1588576834.206:950): pid=22739 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 988.620069][T22745] minix_free_block (loop4:10592): bit already cleared [ 988.664591][T22745] minix_free_block (loop4:9523): bit already cleared [ 988.678309][T22745] minix_free_block (loop4:44211): bit already cleared [ 988.685190][T22745] minix_free_block (loop4:36301): bit already cleared [ 988.693028][T22745] minix_free_block (loop4:21375): bit already cleared [ 988.700738][T22745] Trying to free block not in datazone [ 988.706346][T22745] minix_free_block (loop4:14418): bit already cleared [ 988.724119][T22745] Trying to free block not in datazone 07:20:36 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6800, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:36 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r2) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r7) r8 = getgid() setgroups(0x5, &(0x7f00000000c0)=[r2, r3, r5, r7, r8]) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r9 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r9, 0x0, 0x4, 0x0, 0x0) connect$inet(r9, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:20:36 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x397) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x0, 0x0, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'gretap0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040840}, 0x4000000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r7, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x1e800000, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000025}, 0xc001) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r8) getresuid(&(0x7f0000001380)=0x0, &(0x7f00000013c0), &(0x7f0000001400)) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r11) r12 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) sendmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)="6928c5748e46d2f3ded6af6564ce6e5ec2cce40676fb452eb2e54b9f50cd3adaa1d6f52ea70828c5b55cc2186e11710033e59295f7325d26", 0x38}, {&(0x7f0000000380)="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", 0x1000}], 0x2, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r4, r9, r11}}}, @rights={{0x20, 0x1, 0x1, [r3, r1, r1, r12]}}], 0x80, 0x20004080}, 0x200408c4) 07:20:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010003}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:36 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1800) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 990.868679][ T26] audit: type=1800 audit(1588576836.466:951): pid=22750 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16308 res=0 [ 990.882123][T22750] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 990.930937][T22755] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 07:20:36 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x640800, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) getsockopt$netlink(r3, 0x10e, 0x0, &(0x7f00000000c0)=""/148, &(0x7f00000001c0)=0x94) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 991.016923][ T26] audit: type=1800 audit(1588576836.576:952): pid=22750 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 991.058460][T22762] minix_free_block (loop4:10592): bit already cleared [ 991.073067][T22762] minix_free_block (loop4:9523): bit already cleared [ 991.090436][T22762] minix_free_block (loop4:44211): bit already cleared [ 991.105562][T22762] minix_free_block (loop4:36301): bit already cleared 07:20:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6c00, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 991.153555][T22762] minix_free_block (loop4:21375): bit already cleared 07:20:36 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c8, 0x2f8, 0x98, 0x98, 0x0, 0x390, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0x178, 0x1a0, 0x0, {}, [@common=@inet=@recent1={{0x108, 'recent\x00'}, {0x6, 0x0, 0x8, 0x1, 'syz1\x00', 0xcb, [0x13412def36f7c0b0, 0xffffff00, 0x0, 0xff000000]}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x9, 0x3}}}, {{@ip={@multicast2, @local, 0xff, 0x0, 'team_slave_0\x00', 'netpci0\x00', {}, {0xff}, 0x88, 0x3, 0x10}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffffffff, 0x3, @empty, 0x4e23}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x7, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xa3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}]}]}, 0x54}}, 0x20000010) r2 = socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000044c0)=[{{&(0x7f0000000780)={0xa, 0x4e24, 0x81, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x104}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f00000007c0)="f52644ffe1799d4c98988a7aaf904e7f379e9dafbbf5d79d993398e488b99cf94f4d464849adbd1842a49f405f9fe8d1b4cc0c0e30e641abc758642000", 0x3d}, {&(0x7f0000000800)="2d8a4c1ff05b4c29f04fa14416074966b8435f05a82b16ca4b00e2d7a3617240088758a5525e2ef94d90c2ac7ed66a752bacf9a9caab79a8272b8bd6838e02369d6879d7cb7dce86ebd69c298e97f778a184bad7c2457024d6d22b7404b489ac2ce091a01c1051db0b8403619a3356bee7ee0a7e546ff96aec97d91f2d913ef05c42fa3112d20366f553a0f44345ac5a108a1bf910a910e7fabe89a0ac6e51c9c675d950711db44715f73a0b4fb642959c9db6c2492f28ea279140", 0xbb}, {&(0x7f00000008c0)="0df13c5ab444883cdd8554850f7f9b62545da3a159dcabb201c621eff94145db2510aa254b50d2b242d305ecc1ed951a031ebf92b105307d46eb37e264f26b72eda171a8ec0baf934fbbde665e80ad3c42a88e16dec3fb348877c3e50f5993fb2e3e5ce9499053bdad90e8af93f67a38ce6887edb019affa6267b4ae8372bf213bd4a94a3d7333b9725b1ae7f4e0e332a1eab82286245d57e75f1be267db94fb4daaa70e51416a58cd0a32df461d5c84e3cabfdc441916fc1da0542add05bcac789cf2ccdadc8750d7deedd26a824f0324ccfb7f5bf1e294821b8caa8cc808e19c5b8877555fd9d607bfa3b00e7075728c8fcb556e09808c", 0xf8}, {&(0x7f00000009c0)="92b1f2bf79ffb3fe8ee193faf2d045c8e2a178d26994deb99a12d76cc0ce2a9a17732aee8cac5bc8656b3899e9e83392c6694b6b0563da39829e61da1f85c51ff79fce1350af", 0x46}, {&(0x7f0000000a40)="e94ab5e5f1685f589bae3bdf762d1268f2341478cf1be55a3b6616807a38ced316bf3c998120104d5fbee9e17a65dcf99805852b5b47c480941caf17321eb5cd35f9c76c12a40c53efe211a7f2efa0b6586e5a75643ab37e07f5d112eece750541777faa81d8aebd277de3dd6106ee0613fa6c8023190b15b6ea7fcfc4eb511782967844f56a3017d65bdb2721a448eb75a58700f9ff0a78a9ed115239c23575", 0xa0}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="b26f69f06d8a98274dcae4cf1fa79fa4bd06d66c1191c6cf22e894ee4562df16ee010a49ebfacb39336b4af8a660b63c8521bf9be533cb9e2b5a6d8c098b373c491fa84fc71d0ba5c8407d29a377185e1c34cd865d095b4b567fc2cd2d4e169f8f201dc6f8ea0de9332e86d22e22359fedcbd34a7e59af8e02aab42c254c986b40ed23dec367ec496dfaf0e212b4d68ca19c051ce77c3ca6d8ba374fc3e36681937a", 0xa2}, {&(0x7f0000001bc0)="c607066235febf403c784e8620ca73cf33270ec471859dc238f80bda46d13608a291cefb46339211fef9151cbba90b7632ea673a69e9f4991b7334c169eaec4a04ecd557aa69bfdfa64f71c1f381729ceff282d4fd64f13578d90d9f39d77281245902b7890735c09c8d5aa2fe03400dcad4d9e627533363bd00bcbc4eb5bbb0d9d11d6befb779eb94f80cd6155e00eea4367332915e9b70c85fedb66a3d1da02539fd021b992a1b9723cc0d57612949be05a8f6f9ed08a47d8bd4815a3bfffbaecbe1747518a6982a6c56ab1ce387ce5e648a0c5513bce545fb7995409eaf0d7d72fbda69054c53b873108edb6a", 0xee}, {&(0x7f0000001cc0)="f74f923b1f6dcd78e35b9b22641a2379d2ff93dc5a1dbb9995693f73dbf36c846a33f7c3564d9c70949601268b61e207b2870bda94d45b194071411fa6be88b8ad841f", 0x43}, {&(0x7f0000001d40)="33557fe051540a431ef09b76f3122834750beeb868d92122e9193b2620a4a728cd5296586339a9a92f8777d375f11f969bc70c4058e2bcc0025cf67d26f54792cf309bb75610e6003e6521015623dfd9fd", 0x51}], 0xa}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001e80)="4d143e24506c90b89a312d8a1afd131404b0604bde2ddd6bd94cf509365ad80b9b53b896e2b03cc516c03ad53b7747ceb4e1e55372dbc80db0442249da57c74c90c17eeec908645d0877415a57b566cf82999797f6564d", 0x57}, {&(0x7f0000001f00)="81819a55db84e3d91c9e5648f60fd78bf4bd30372b31821be9bf8f1065c2e5e5d6ff9069a8c1247ec5287f56aa886cd239248a5d39d4dd796d9e627d96846fd20f8161d4710aba9295b531bf07ba21f484805f65fd692675011a7e0fc5610609e1217d5771f1bf5b9774312b62ec18db8d81339e390fe9f11f9d5c1f63e86545a01c792eac79dc56963b45fa8fe1ce94d3e6872a18c562932af2c35a", 0x9c}, {&(0x7f0000001fc0)="c846b872001b5c3229cd5b6a401878f5706efc6b754c4e5c39e995cfb92b6f5feaa2ee7e9b70af04f7333448421e13e4b25a94420dcd5a30f4557020e9e5fd61a31adcd43eb8559989bbcc7bc60f2ccab001df979013772562deeadd81814ff10084176fb6b55473b80cca2854f1be827c8a37ebd7727ba91cd71eb9ef7211a7fb570215916175f088c3dfb87d180a40", 0x90}, {&(0x7f0000002080)="5acb69a370ef60399d97fc42b3d828e4416ee50732410479f4753a7cca6b4ca5c100837f872d8d6f1f370c5b729404135cc9c90dac1dc494569d7c92d9e9657d43e172946b925a2a508c491e86ad45cdf40f92a693542417", 0x58}, {&(0x7f0000002100)="0058f9dba243048f8f808fdda116dacfeafb0f0615052de8a07d101849d512acbbae10a9970d7c433a4dcea0c16e93748d84e328d6d68c9836679760093976e2f8c2f542052827449f377ccaa92667d9badbf0f3b376ffced0b627717c66687cb52dfd5b71ecba3ef6baba8a12", 0x6d}, {&(0x7f0000002180)="0c6606b38b3f9be8608b64862f566d391c801e8b9e1582cab905d403ebf706c0cb0a7885c092c3e30ecf62b3b9cff6b488d2e1d092795d5f1556d5db36ba818ac94f62ba95b02118fa64eedd294101f404baf4338099a73d67a0cad9fad0422f57194bede6fa9c856658a3cbe3b81547e4e66752354b87fb4c2995dc53a4bc606278b0e9f5e7eba3971330bad981fb14b5f0bfd2d02a2de3702001f38795f836", 0xa0}], 0x6}}, {{&(0x7f00000022c0)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9}, 0x1c, &(0x7f0000002580)=[{&(0x7f0000002300)="c4903126ef7e6e0395e442d1edd0808c6912645c75109c81278635bd299d5e483e6311bb34d5a121f6ceb80fa4b548a74eaed67bdd8fc53163e01934d7eec10d7d73b6cd71081771208816f45208d3957cd5021e018cea449a74f956e982dd9907220d093a8532cfb039084c2e1619a47e650dc8ce601e130225d2d4a3b4f4162cecbea4d131b2f89e12a256fdcaad557a51415225c3983e5c43d8bbaac350e5053e0ba2364ffcb11fad94024fc200b2d3a3", 0xb2}, {&(0x7f00000023c0)="6c182f8330c285d32a27eedf3d6a67c6acfcebd4ed7595d1bdc7a0d3330843c1508f1386736958707d3dc78e19a3133e0f3415b1247be7fccf7500481f0d3c3dfa349578ae8563476d7a0785e493eb2f4310432cda138234d52d4e9c2a0e75086212d995ef0f935e36ee063aafdf586b08b630d64c9d976f969db741190555bfc36421b1d370cee973a044b755c3dca8c63043427b2aef4783a9701d270bc34ab542643fc1498488c7965879a5acd9ab99c252dcfb7e33cccc7b9f8e4928", 0xbe}, {&(0x7f0000002480)="256a4b7be22fb307d0f495711883c89d30d43a74a1383c1f6a2213875eaa5f10286db3282592b19dd6145b2ddd80ee0d2423a2e3722f29e4e0d10490dd20250108018523998c080f8d0b2a5963169ca27ae89136e9917c88b3f9d0afd0e3c425c153c1b02330165b8617038dc8b965d94bf302649cab5a6582f7bcc1993c", 0x7e}, {&(0x7f0000002500)="d5e08b1f4c2a2c268e4c350607d9c3608d3944923d798e51606ed719de732a8f39d9082eb83f9437a6ff851ff561acf9260950c9908e72ecdfc50c7f0a864f78d632cad3328fa673701fbc567b0ace0e8537f5e3d1ed7e647fc447bb3dde3fd546c26e12828abc366e004f4dfb42b8b8d7498192375508", 0x77}], 0x4}}, {{&(0x7f00000025c0)={0xa, 0x4e23, 0x5, @mcast1, 0x60}, 0x1c, &(0x7f0000003a00)=[{&(0x7f0000002600)="38038a87e4fcaf1fa36becf6138dce94b554a97927fe2ce796c955", 0x1b}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000003640)="a48f41538023296020a8dcf9f8ef61fc07b6d732c4c4211dda6c1aed43b49ddae2fa9ffb94f289901db5ac7aefa43dc8e6ad6c5eed38f2987cfba40dd411f0fa1639cf254a6f479e37d24ba597456e07a103a612189d5f4cc8fc4c9d0540b6ba46b82536bb942aaab9940aa00c42d3a22a94c0ebef7c3a9264d6c59ec157238b5ba20e5974eb260ffa1a695eb9222550961f7bf1e9073bc3d67c6db1c5cfea9ae0dcd067cf6a71c19b654a07ded3019c29b418c3a68f90d94ad7c9a5e7253e16f5e25b48596966a3eb782003cedf5627752b994c38fc268bbacd0c8796ca9658167235ab75d3b39389714f040d306aaaea013d7172", 0xf5}, {&(0x7f0000003740)="77c2eb03e0790ac9f9b057a8894dc6ece56162e2114b2a8c7fd7f6863524a629d8512a189808603314bd315c23d35d63b2b598c7a3638b7a737974c35380017dbe27b72ac3e363c3782a08457ea864c23d0a", 0x52}, {&(0x7f00000037c0)="f784b3f1b0c6cc5f37f17417543dd5a763462e60b3ad38e603ecc4637bd0a2bef00531effaef3014bc2f9ca70a9d9e00ccebde872d2b339c7a69ca85aef62450d066c3c67178b24cc9dd9892b0e2f517e0472f04e8aac315144447ad2f7dd80a", 0x60}, {&(0x7f0000003840)="2e5d205ab02c7f77dd8a761c0ae74696df5131eb53c90cbe5a45a55cb35c9afc10594047e6a32aee49d4e13c806836b947efe2dede267cd171499531af5d57f403d2d6a31d0c8330b789c6247ade14960ba3f44470a09d3aeae6d3418dceee1d59d5f7b52acefc4c2ee41a758636b00c1665a8bfe54f356b908d85fd55f5d9562e984ad6c7c6340b268414f8738fe74b5cc4a6b5a3fef58a1ec2f5260cbcd6e63aa5964541bfeb64462eef02b0c9ed2942330447f08898121df34e36c408604de437e571fc0721c7317d6814575bcbe72b8ef5", 0xd3}, {&(0x7f0000003940)="4d4c5254848c433e94d18cf48c196b8e12e5c62abbca3641ca7dfd9696c2219367146add567a3a85e8e932abfbc26175600c43facc8219c0c08e8c5494dcefdad7390be72b835ede89702a9f3c20688e5b71941fe467b3d7e7f59e1eb3b5320cb32508b3339a5ea5b9cdd8c2e1cbe619ea524ddefb5b019af737d1d33aa50d8fcd1f950191a4f87b7a3e4b23669ad40079e812b38bba66cce5e300b51e", 0x9d}], 0x7, &(0x7f0000003a80)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x0, 0x8, 0x1, 0x7, 0x0, [@ipv4={[], [], @rand_addr=0x64010102}, @empty, @loopback, @mcast2]}}}, @dstopts={{0x78, 0x29, 0x37, {0x3c, 0xb, [], [@generic={0xf8, 0x18, "f6e5516c4c0ac6d69f1785cf97924e209208abd0c5a81000"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x0, 0x1f, [0x7fff, 0x5, 0x1000, 0x1]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim, @ra={0x5, 0x2, 0x2}]}}}, @hopopts={{0xd8, 0x29, 0x36, {0x5, 0x17, [], [@ra={0x5, 0x2, 0x947}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x844d2db376cda7ee, 0x2, 0x6, 0x8800, [0xecb]}}, @generic={0x9, 0x85, "2c4f49bd119e56d3d89ad159e11f8a443537199bae6716d0ff7e10a545d6eba94a7ba6d5bdb58286f7df2a609782cab70561496e2695f12eead28d06aaaa0c1d9b8c3f12598f7c0fba63e0bed32db8103f1700c8f53d41fc04f3497fbabda58b68518c96a4161a8e8f0838dd4d3acfcec5791ee151c29e0661cb2daa1147439a04003c7445"}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x1000}, @jumbo={0xc2, 0x4, 0xffff9cdf}, @jumbo={0xc2, 0x4, 0xc21}]}}}, @rthdrdstopts={{0x98, 0x29, 0x37, {0x3b, 0x10, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0x5a, "ce7a65915891c1b99c5f2e33030754f647f9ae39ce69308a04468e3cb292da7bcaad34977fdf3576e5afe437f0320b537e92252672b7df76053dce987f8151dfe9e7156a41f029f4e73e051d3e7efea746e66bc9d3c835c86ae4"}, @padn={0x1, 0x1, [0x0]}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x67, 0x0, [], [@enc_lim={0x4, 0x1, 0x6}]}}}], 0x260}}, {{&(0x7f0000003d00)={0xa, 0x4e20, 0x7fff, @mcast2, 0x9}, 0x1c, &(0x7f0000004200)=[{&(0x7f0000003d40)="4e4dd1c622d7fb7a29ce1dc5a9c71291d58f7b7a15b03cf9cc9d7748bf5253f3121fc317fef66713f0f62f11a66f886ef040ea0e0a596f67f7e574a9f28b2b2b362acf5f7156b225fd4414f1994c4012d8e893807a7bbf68dadcb3a7327c32efdedab22089713594c3de66095f7819299dc9747594251e1c838cb5ab64933ade14050d4f2a0943ce511496d52837e207e1", 0x91}, {&(0x7f0000003e00)="d6307bcd3a204adb9865fb449440d0a1891625cf00b26c83757efa3f90e083513b1be670aa6c78ea3003896e7f9f1e9b42b2d9ae138a963954ba923387fda1d6bd7c67bd91c602cc62f2dfd45110a66f6cf016de3e35320eb9fda852d1f717366cbec55ca8f4d3059c648eb8d52a426483ab2be74c920b35a503bfb92edac0efb8d26076ffd3663b3c280abb1701dfc537264e93cca537", 0x97}, {&(0x7f0000003ec0)="71dd384857ddb2ad5d7ee4f0753fb7ec4573173bbb90e3c80ff1edeec59f0a890df6e33b8c18cd97eba453e716a1f843f74c307474d292d40a3c77943f946605aaeaff1ef1b3e87faf7691c8d2af891a35bfb4061b000c383b38ab1294ed88b2cd09acd97f2c307ccce2d4b3e0c37f3a7e25a2e6b3260b1ba5bcade1d8defbd3b81b8fe8e45ed669bbb31779a0fcd85034da5e27168238a8ed906949f61beb72", 0xa0}, {&(0x7f0000003f80)="e27b3716acc02e9b6e58119fe61223f541990104f0806e12880dfb7b9cc04904dc14edfea9a3a8b8ba00e043507c878748dcc61aa4aef768fc72652bc3d746974c3080321b2bad392c7bf24a1045b0e223c1fef5d611df75a6194ca606fbd3f1e06bc3df812c7a030b0de400c1ad4c32b3bf59744af25b57d7835b64c70e72d9fb0b1e20eb31c037d45a06d6ae1b5c43b402aff0c812157271adc0680ad5ccdbacee8982cfced6d9eeddffe6b9f9bc0ac335f0a9", 0xb4}, {&(0x7f0000004040)="6dc0da791e118925ff9f14265a7b9f321e1fbb8679b4dd03347b38f082e3a2c927e8a47910bf4d570d36662ea1cb837f9860880b5a2ec396f542086ecf0cfd7e927d820074f179d2a4d29daba757c5701c1ef45bae26501777c231a6405a7a11423143814881eef4d6ded86f3280beba8e5d64a66176e05589d47e9e032378a35b253d755e3e900c670b9918e201145863e0e6a269b43156e5b6e772330cca", 0x9f}, {&(0x7f0000004100)="65d0acdc44ccad84fa7e7b5c93a2a678737c3f86da4de39850d8b4f55f6ab0361ac6e2a8147f434ae92b1739a79b4f2adc20c0f380e39c1b608eca4cd37d524209000996674a3604a4bb81513f11e8d9adeae873c6edcdba7126b0d1629a7c11377e9f5797310461a0e79e07ce7890e20091656485a061ba2ff7ee6a6d8d21e4bec51086aac13fc19406886d87f6b13e8a9cbd070c7dcb8208f803ab08fb14d8f5ef100419c2b5e7f5f1ee7f828f46642d0b1ba9b02ed8bfd3a9e4e2907083b10c7d0d7b30fdf0f7ee62220c3c4fc522", 0xd0}], 0x6, &(0x7f0000004280)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x87, 0x2, [], [@enc_lim={0x4, 0x1, 0x20}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x35}}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x16, 0xa, 0x2, 0x40, 0x0, [@local, @private1={0xfc, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x27}, @private0={0xfc, 0x0, [], 0x1}, @remote]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x89, 0x2, 0x1, 0x2, 0x0, [@mcast2]}}}, @rthdrdstopts={{0xb8, 0x29, 0x37, {0x88, 0x13, [], [@generic={0x1, 0x97, "c29007e3973a182fcd9b93aaf5f90ca9ce3454114f474a6ef70399929230b5b8022654f0e446b8cd397d51a7dc4c66a589f637404da4cae4c4ba15329162254f133d655874d75e9c6cd950e31f2aa4617bea95742ce2ee76427085cf9a82fa675efef3a793d4e72aba0c8bc7d182e2eaf1d7dba80ac12385ead89e42811ef04f20de4c1da4cfb0cdece52d258415af8f3f378531eb7f65"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8001}}, @tclass={{0x14, 0x29, 0x43, 0x7f}}, @dstopts={{0x38, 0x29, 0x37, {0x3a, 0x3, [], [@hao={0xc9, 0x10, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x33}}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x11}}], 0x210}}], 0x5, 0x850) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:20:36 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x16c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$sock_ifreq(r2, 0x8995, &(0x7f0000000180)={'team_slave_0\x00', @ifru_names='bond_slave_1\x00'}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) [ 991.239585][T22780] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 991.250827][T22762] Trying to free block not in datazone [ 991.257069][T22762] minix_free_block (loop4:14418): bit already cleared [ 991.265333][T22762] Trying to free block not in datazone 07:20:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010004}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:36 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1900) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 991.482173][ T26] audit: type=1800 audit(1588576837.076:953): pid=22806 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16319 res=0 [ 991.523387][T22806] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 991.615624][ T26] audit: type=1800 audit(1588576837.206:954): pid=22806 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 991.657367][T22812] minix_free_block (loop4:10592): bit already cleared [ 991.664149][T22812] minix_free_block (loop4:9523): bit already cleared [ 991.690163][T22812] minix_free_block (loop4:44211): bit already cleared [ 991.706911][T22812] minix_free_block (loop4:36301): bit already cleared [ 991.713685][T22812] minix_free_block (loop4:21375): bit already cleared [ 991.725940][T22812] Trying to free block not in datazone [ 991.731852][T22812] minix_free_block (loop4:14418): bit already cleared [ 991.741831][T22812] Trying to free block not in datazone 07:20:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:39 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) recvmsg$can_j1939(r3, &(0x7f00000018c0)={&(0x7f0000000140)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/97, 0x61}, {&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/133, 0x85}, {&(0x7f0000000380)=""/1, 0x1}, {&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/176, 0xb0}, {&(0x7f0000001500)=""/213, 0xd5}, {&(0x7f0000001600)=""/249, 0xf9}], 0x9, &(0x7f00000017c0)=""/210, 0xd2}, 0x20) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:20:39 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x12) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x400002, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3f, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0xfb, "6290f45961634a5cc6c3eda55d719c5e34b52bc0929d214b9a85a45bdc1fa9a7", 0x3}) socket$bt_hidp(0x1f, 0x3, 0x6) r6 = socket(0x10, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r7, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000140)) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getpeername$unix(r6, &(0x7f0000000000), &(0x7f0000000080)=0x6e) 07:20:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x7400, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010005}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:39 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1a00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 994.132208][T22824] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 994.135370][ T26] audit: type=1800 audit(1588576839.726:955): pid=22825 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16338 res=0 [ 994.175451][T22825] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 994.198178][T22830] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 994.250554][T22843] minix_free_block (loop4:10592): bit already cleared [ 994.257494][T22843] minix_free_block (loop4:9523): bit already cleared [ 994.264292][T22843] minix_free_block (loop4:44211): bit already cleared [ 994.271216][ T26] audit: type=1800 audit(1588576839.866:956): pid=22825 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 994.292869][T22843] minix_free_block (loop4:36301): bit already cleared 07:20:39 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000080)=0xe3) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:20:39 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1b00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010006}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 994.300400][T22843] minix_free_block (loop4:21375): bit already cleared [ 994.308140][T22843] Trying to free block not in datazone [ 994.313731][T22843] minix_free_block (loop4:14418): bit already cleared [ 994.321606][T22843] Trying to free block not in datazone 07:20:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x7a00, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:40 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setfsuid(r6) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r8) write$FUSE_CREATE_OPEN(r2, &(0x7f00000001c0)={0xa0, 0xfffffffffffffff5, 0x6, {{0x6, 0x2, 0x3, 0x400, 0x8001, 0xf2b, {0x0, 0x9, 0x89, 0x73b0fb1b, 0x7, 0x10000, 0x25e, 0x54, 0x9, 0x7f, 0x10001, r6, r8, 0x1ff, 0x8}}, {0x0, 0x16}}}, 0xa0) [ 994.574213][ T26] audit: type=1800 audit(1588576840.166:957): pid=22859 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16376 res=0 [ 994.612285][T22863] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:20:40 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x138, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x630}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf66}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x58bb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7fff}}, ["", ""]}, 0x24}}, 0x40001) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c) listen(r3, 0x400) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x0, 0x4, 0x0, 0x0) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 994.661414][T22862] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 994.703916][T22863] minix_free_block (loop4:10592): bit already cleared [ 994.735926][ T26] audit: type=1800 audit(1588576840.326:958): pid=22859 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 994.754514][T22863] minix_free_block (loop4:9523): bit already cleared [ 994.767876][T22863] minix_free_block (loop4:44211): bit already cleared [ 994.778097][T22872] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 994.806160][T22863] minix_free_block (loop4:36301): bit already cleared [ 994.812939][T22863] minix_free_block (loop4:21375): bit already cleared [ 994.855864][T22863] Trying to free block not in datazone [ 994.861340][T22863] minix_free_block (loop4:14418): bit already cleared [ 994.875913][T22863] Trying to free block not in datazone 07:20:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010009}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x8100, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:42 executing program 3: clone(0x191f9080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'hsr0\x00', @ifru_settings={0x1, 0x1, @cisco=&(0x7f0000000000)={0x4, 0x1f}}}) 07:20:42 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1c00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:42 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='k\x00', @ANYRES16=r8, @ANYBLOB="ee0d0018012b13dbdf25070000000801804000000000"], 0x3}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r8, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x4008001) 07:20:42 executing program 3: clone(0xca084000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x5, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 997.225169][ T26] audit: type=1800 audit(1588576842.817:959): pid=22898 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16344 res=0 [ 997.263038][T22898] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:20:43 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x480000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x1, r2}) listen(r0, 0x400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 997.374609][ T26] audit: type=1800 audit(1588576842.967:960): pid=22898 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 997.408971][T22919] minix_free_block (loop4:10592): bit already cleared 07:20:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xa300, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 997.454556][T22919] minix_free_block (loop4:9523): bit already cleared [ 997.478146][T22924] IPVS: ftp: loaded support on port[0] = 21 [ 997.491974][T22919] minix_free_block (loop4:44211): bit already cleared 07:20:43 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b01000c}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 997.510266][T22926] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 997.512924][T22919] minix_free_block (loop4:36301): bit already cleared [ 997.575469][T22919] minix_free_block (loop4:21375): bit already cleared [ 997.586093][T22919] Trying to free block not in datazone [ 997.603676][T22919] minix_free_block (loop4:14418): bit already cleared [ 997.625834][T22919] Trying to free block not in datazone 07:20:43 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) syz_emit_ethernet(0xde, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x25, 0x4, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @timestamp_prespec={0x44, 0x54, 0x1a, 0x3, 0x4, [{@loopback, 0x3ff}, {@multicast1, 0x5}, {@multicast1, 0x1}, {@rand_addr=0x64010101}, {@loopback, 0x4}, {@empty, 0x6}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xc3}, {@remote, 0x80000001}]}, @ssrr={0x89, 0x13, 0xd4, [@multicast1, @loopback, @loopback, @loopback]}, @ssrr={0x89, 0x13, 0x41, [@local, @remote, @dev={0xac, 0x14, 0x14, 0x2f}, @local]}, @noop, @ra={0x94, 0x4, 0x1}]}}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback=0xac141439, @rand_addr, {[@ssrr={0x89, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @noop, @rr={0x7, 0xb, 0xfd, [@empty, @loopback]}, @ra={0x94, 0x4}]}}}}}}}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x45, &(0x7f0000000180)="5284fc8b919cf08a351e910a73b6745ffbbaea72bc8abb642a245ce4", 0x1c) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @mcast1, 0x1000aae}, 0x1c) listen(r0, 0x400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:20:43 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1d00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 997.855459][T22924] IPVS: ftp: loaded support on port[0] = 21 [ 997.867670][T22966] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 997.882453][ T26] audit: type=1800 audit(1588576843.477:961): pid=22967 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16370 res=0 [ 997.885369][ T2571] tipc: TX() has been purged, node left! [ 997.922818][T22967] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 997.992124][ T26] audit: type=1800 audit(1588576843.587:962): pid=22967 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 998.010490][T22971] minix_free_block (loop4:10592): bit already cleared [ 998.017888][T22971] minix_free_block (loop4:9523): bit already cleared [ 998.024621][T22971] minix_free_block (loop4:44211): bit already cleared [ 998.031533][T22971] minix_free_block (loop4:36301): bit already cleared [ 998.038386][T22971] minix_free_block (loop4:21375): bit already cleared [ 998.045309][T22971] Trying to free block not in datazone [ 998.051156][T22971] minix_free_block (loop4:14418): bit already cleared [ 998.059527][T22971] Trying to free block not in datazone 07:20:45 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xf000, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:45 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b01000f}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:45 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x60}) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@broadcast, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) 07:20:45 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1e00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:45 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000180)="88", 0x1, r3) prctl$PR_SET_SECUREBITS(0x1c, 0xb) r4 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="e2cb5c449cf297960223891247ef87a68934290b6718265e5ee623ad4b80391754faaae49489dbaef9c320e80afda0910f9395dbcefac65e55291675c795cb49ae35cf4b4b810e752d9a868cfa9cc87117db4836db6f10c872cff999a344949e02aaf53e97abf5fcea7912461e42d86984b95dc22907daf52488c45a50715b678f414a32ab4bbb3ee6991d9f062385a1367cc9e988406ca21a0517dba9dc6217af7cf095aaa891334835656440aaa9f3e4870d5f291bd72e89b7e53a3f7889d0ed906475c29297e6044d8c0a007b68037a2f76548fcacac11265817ece3b5a7ad2226a385373f16d6577134b37831c52c9df1914d000", 0xf6, r3) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000180)="88", 0x1, r5) keyctl$dh_compute(0x17, &(0x7f0000000280)={r6, 0x0, r6}, 0x0, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000180)="88", 0x1, r7) r9 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r8, r9, r8}, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, 0x0, r9}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f00000003c0)={&(0x7f0000000280)={'nhpoly1305-avx2\x00'}, &(0x7f00000002c0)="2a174805ae0cc133c0e1fc04d74e3a4de2931ed279f87dd3c336d5f8c19eaac62f3304074404b2151ec025187f6beb33f620f9e2003487a6c88056c2dc4a042a7b99522518840df32dbc72db91f146e000ccf72184a72e871bd7f79d6406f660d03e3ae06b4817e8d13b6825099dcd6128220bc447bae85bbc67704945f862128e88cd8384376d9ac09ecc9f34e9f6ea2d7050b6b3fd8e49ca0b5c4de0cdf4bb44b2184fa6a656d63d8c5f41f74201c7d8532a184a57211129c5495a00dcebfe846fa5e072b6f73b033c6d652674cc8644df43b81415a3", 0xd7}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 1000.234784][ T26] audit: type=1800 audit(1588576845.827:963): pid=22985 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16374 res=0 [ 1000.248307][T22985] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1000.298436][T22990] MPI: mpi too large (187712 bits) [ 1000.363465][T22990] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1000.378132][ T26] audit: type=1800 audit(1588576845.977:964): pid=22985 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 1000.403492][T22993] minix_free_block (loop4:10592): bit already cleared 07:20:46 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010012}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 1000.410464][T22993] minix_free_block (loop4:9523): bit already cleared [ 1000.431660][T22993] minix_free_block (loop4:44211): bit already cleared [ 1000.446113][T22993] minix_free_block (loop4:36301): bit already cleared [ 1000.454355][T22993] minix_free_block (loop4:21375): bit already cleared 07:20:46 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x8000, @empty, 0x100}, 0x1c) listen(r0, 0x400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000080)=""/46, &(0x7f00000000c0)=0x2e) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0x1, 0x85}, {0x7, 0x8001}]}, 0x14, 0x1) [ 1000.461467][T22993] Trying to free block not in datazone [ 1000.467251][T22993] minix_free_block (loop4:14418): bit already cleared [ 1000.474100][T22993] Trying to free block not in datazone 07:20:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfc00, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:46 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1d00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:46 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1f00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 1000.639825][ T26] audit: type=1800 audit(1588576846.237:965): pid=23017 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16381 res=0 07:20:46 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xb8, 0x9, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xbc3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0xb8}}, 0x8084) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 1000.687394][T23017] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1000.723372][T23020] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1000.748626][ T26] audit: type=1800 audit(1588576846.257:966): pid=23020 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16342 res=0 [ 1000.812810][T23020] minix_free_block (loop4:10592): bit already cleared [ 1000.820372][ T26] audit: type=1800 audit(1588576846.417:967): pid=23030 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 1000.840849][T23020] minix_free_block (loop4:9523): bit already cleared [ 1000.868763][ T26] audit: type=1800 audit(1588576846.467:968): pid=23017 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 1000.903832][T23034] minix_free_block (loop3:10592): bit already cleared [ 1000.918690][T23020] minix_free_block (loop4:44211): bit already cleared [ 1000.961101][T23034] minix_free_block (loop3:9523): bit already cleared [ 1000.971423][T23020] minix_free_block (loop4:36301): bit already cleared [ 1000.992316][T23034] minix_free_block (loop3:44211): bit already cleared [ 1001.000420][T23020] minix_free_block (loop4:21375): bit already cleared [ 1001.014480][T23034] minix_free_block (loop3:36301): bit already cleared [ 1001.022695][T23020] Trying to free block not in datazone [ 1001.034085][T23020] minix_free_block (loop4:14418): bit already cleared [ 1001.042464][T23034] minix_free_block (loop3:21375): bit already cleared [ 1001.057463][T23020] Trying to free block not in datazone [ 1001.063128][T23034] Trying to free block not in datazone [ 1001.075285][T23034] minix_free_block (loop3:14418): bit already cleared [ 1001.110210][T23034] Trying to free block not in datazone 07:20:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:48 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setfsuid(r5) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@rand_addr=0x64010101, 0x4e22, 0x2, 0x4e22, 0x1, 0x0, 0xa0, 0x0, 0x32, r3, r5}, {0x91a, 0x4, 0xb9, 0x5, 0x6, 0x401, 0x1, 0x8d01}, {0x401, 0x2, 0x29, 0x401}, 0x1, 0x6e6bba, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4d6, 0x3c}, 0xa, @in=@multicast2, 0x34ff, 0x4, 0x1, 0x3f, 0x38550875, 0x80, 0x4}}, 0xe8) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x0, 0x4, 0x0, 0x0) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:20:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfeff, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:48 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010015}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:48 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2000) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:48 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1d00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 1003.278349][ T26] audit: type=1800 audit(1588576848.878:969): pid=23048 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16360 res=0 [ 1003.321373][T23048] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1003.347111][T23049] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1003.404499][ T26] audit: type=1800 audit(1588576848.888:970): pid=23049 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16354 res=0 [ 1003.450428][T23070] minix_free_block (loop4:10592): bit already cleared [ 1003.472989][T23077] minix_free_block (loop3:10592): bit already cleared [ 1003.487160][T23077] minix_free_block (loop3:9523): bit already cleared [ 1003.513971][T23070] minix_free_block (loop4:9523): bit already cleared [ 1003.527277][T23077] minix_free_block (loop3:44211): bit already cleared 07:20:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xff04, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 1003.559852][ T26] audit: type=1800 audit(1588576849.058:971): pid=23049 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 1003.559922][T23070] minix_free_block (loop4:44211): bit already cleared [ 1003.584166][T23077] minix_free_block (loop3:36301): bit already cleared 07:20:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010018}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 1003.612659][T23077] minix_free_block (loop3:21375): bit already cleared [ 1003.619703][ T26] audit: type=1800 audit(1588576849.058:972): pid=23048 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 1003.638192][T23077] Trying to free block not in datazone [ 1003.685468][T23077] minix_free_block (loop3:14418): bit already cleared [ 1003.732093][T23077] Trying to free block not in datazone [ 1003.739026][T23070] minix_free_block (loop4:36301): bit already cleared [ 1003.772854][T23070] minix_free_block (loop4:21375): bit already cleared [ 1003.799541][T23070] Trying to free block not in datazone [ 1003.811124][T23070] minix_free_block (loop4:14418): bit already cleared [ 1003.827619][T23070] Trying to free block not in datazone 07:20:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:49 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2100) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:49 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010015}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b01001b}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 1004.113291][T23105] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1004.220632][T23114] minix_free_block (loop4:10592): bit already cleared [ 1004.235415][T23114] minix_free_block (loop4:9523): bit already cleared [ 1004.250402][T23114] minix_free_block (loop4:44211): bit already cleared [ 1004.257406][T23114] minix_free_block (loop4:36301): bit already cleared [ 1004.264304][T23114] minix_free_block (loop4:21375): bit already cleared [ 1004.272390][T23114] Trying to free block not in datazone [ 1004.288707][T23114] minix_free_block (loop4:14418): bit already cleared [ 1004.303821][T23114] Trying to free block not in datazone 07:20:51 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xff7f, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:51 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b01001e}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:51 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1e00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:51 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2200) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 1006.379327][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1006.379342][ T26] audit: type=1800 audit(1588576851.978:975): pid=23129 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16018 res=0 [ 1006.423570][T23133] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1006.444251][T23135] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:20:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfffe, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 1006.463742][ T26] audit: type=1800 audit(1588576852.008:976): pid=23131 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16036 res=0 [ 1006.543399][T23133] minix_free_block (loop4:10592): bit already cleared [ 1006.557310][ T26] audit: type=1800 audit(1588576852.158:977): pid=23129 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 1006.583945][T23135] minix_free_block (loop3:10592): bit already cleared [ 1006.590841][T23133] minix_free_block (loop4:9523): bit already cleared [ 1006.598911][T23135] minix_free_block (loop3:9523): bit already cleared [ 1006.606370][T23133] minix_free_block (loop4:44211): bit already cleared [ 1006.614075][ T26] audit: type=1800 audit(1588576852.178:978): pid=23131 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 1006.633790][T23135] minix_free_block (loop3:44211): bit already cleared [ 1006.647877][T23133] minix_free_block (loop4:36301): bit already cleared [ 1006.668177][T23135] minix_free_block (loop3:36301): bit already cleared [ 1006.678364][T23133] minix_free_block (loop4:21375): bit already cleared [ 1006.692997][T23135] minix_free_block (loop3:21375): bit already cleared [ 1006.703265][T23133] Trying to free block not in datazone [ 1006.723326][T23133] minix_free_block (loop4:14418): bit already cleared [ 1006.730337][T23135] Trying to free block not in datazone 07:20:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010021}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172a6, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 1006.752715][T23133] Trying to free block not in datazone [ 1006.791782][T23135] minix_free_block (loop3:14418): bit already cleared [ 1006.819776][T23135] Trying to free block not in datazone 07:20:52 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2300) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:52 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x16, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172a7, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 1007.040879][ T26] audit: type=1800 audit(1588576852.638:979): pid=23168 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15908 res=0 07:20:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010024}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 1007.082535][T23170] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1007.169528][T23170] minix_free_block (loop4:10592): bit already cleared [ 1007.180953][ T26] audit: type=1800 audit(1588576852.778:980): pid=23168 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 1007.248307][T23170] minix_free_block (loop4:9523): bit already cleared [ 1007.282747][T23170] minix_free_block (loop4:44211): bit already cleared [ 1007.346501][T23170] minix_free_block (loop4:36301): bit already cleared [ 1007.368177][T23170] minix_free_block (loop4:21375): bit already cleared [ 1007.390487][T23170] Trying to free block not in datazone [ 1007.406972][T23170] minix_free_block (loop4:14418): bit already cleared [ 1007.430408][T23170] Trying to free block not in datazone 07:20:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:55 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010021}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172a8, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:55 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010027}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:55 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2400) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 1009.533650][ T26] audit: type=1800 audit(1588576855.128:981): pid=23207 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16269 res=0 [ 1009.542586][T23207] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:20:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172a9, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 1009.716825][ T26] audit: type=1800 audit(1588576855.258:982): pid=23207 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 1009.812178][T23213] minix_free_block (loop4:10592): bit already cleared [ 1009.840357][T23213] minix_free_block (loop4:9523): bit already cleared 07:20:55 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2300) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:55 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b01002a}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 1009.878717][T23213] minix_free_block (loop4:44211): bit already cleared [ 1009.928680][T23213] minix_free_block (loop4:36301): bit already cleared 07:20:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172aa, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 1009.970794][T23213] minix_free_block (loop4:21375): bit already cleared [ 1010.036499][ T26] audit: type=1800 audit(1588576855.638:983): pid=23228 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16003 res=0 [ 1010.039662][T23213] Trying to free block not in datazone [ 1010.098904][T23229] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1010.127380][T23213] minix_free_block (loop4:14418): bit already cleared [ 1010.142721][T23213] Trying to free block not in datazone [ 1010.274561][T23229] minix_free_block (loop3:10592): bit already cleared [ 1010.302382][ T26] audit: type=1800 audit(1588576855.898:984): pid=23228 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 07:20:55 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2500) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b01002d}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 1010.358888][T23229] minix_free_block (loop3:9523): bit already cleared [ 1010.421758][T23229] minix_free_block (loop3:44211): bit already cleared 07:20:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172ab, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 1010.468489][T23229] minix_free_block (loop3:36301): bit already cleared [ 1010.511897][T23229] minix_free_block (loop3:21375): bit already cleared [ 1010.578821][T23229] Trying to free block not in datazone [ 1010.590460][T23251] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1010.633762][T23229] minix_free_block (loop3:14418): bit already cleared [ 1010.640663][T23229] Trying to free block not in datazone 07:20:58 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010030}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:20:58 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b01002a}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172ac, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:20:58 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2600) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:58 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x9d5d}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000180)={r2, 0x2}) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 1012.541044][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1012.541059][ T26] audit: type=1800 audit(1588576858.139:988): pid=23283 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16354 res=0 07:20:58 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setfsuid(r1) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@empty, @in6=@mcast1, 0x4e24, 0x3, 0x4e23, 0x5, 0x2, 0x80, 0x80, 0x3c, 0x0, r1}, {0x7, 0x5, 0x1, 0x1, 0x3f, 0x6, 0x5, 0x3}, {0x1000, 0x6, 0x0, 0x7ff}, 0x8, 0x6e6bb5, 0x0, 0x0, 0x2, 0x2}, {{@in6=@mcast2, 0x4d4, 0x2b}, 0x2, @in=@multicast1, 0x34ff, 0x7, 0x3, 0x0, 0x7, 0x4, 0xffff8000}}, 0xe8) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r4, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f00000001c0)='net/ip6_mr_vif\x00') preadv(r6, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000140)={{0x9a, 0x6, 0x1}, 'syz1\x00', 0x40}) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x30541, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000080)=0x1, 0x4) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 1012.594481][T23283] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1012.694320][T23293] minix_free_block (loop4:10592): bit already cleared [ 1012.701199][ T26] audit: type=1800 audit(1588576858.299:989): pid=23283 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 1012.719795][T23293] minix_free_block (loop4:9523): bit already cleared [ 1012.726915][T23293] minix_free_block (loop4:44211): bit already cleared [ 1012.734540][T23293] minix_free_block (loop4:36301): bit already cleared 07:20:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172ad, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 1012.741503][T23293] minix_free_block (loop4:21375): bit already cleared [ 1012.749376][T23293] Trying to free block not in datazone [ 1012.755341][T23293] minix_free_block (loop4:14418): bit already cleared [ 1012.762268][T23293] Trying to free block not in datazone 07:20:58 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010033}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:20:58 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @empty, 0x3f}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f00000017c0), 0x1cb, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0x0, 0x2, 0x8, r2, 0x0, &(0x7f0000000040)={0x9a0908, 0x3c, [], @ptr}}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) listen(r0, 0x400) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x0, 0x4, 0x0, 0x0) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:20:58 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2700) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:20:58 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0xc4500, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) sendto$packet(r2, &(0x7f0000000140)="78c656a7c56e7f3fb1a5fbb94eccbd3479305fba3c576605d41ade36d0c7e1693462d8be896eb649cb9c6384992f8a959ef52a9b934e4445dec48784607bdf0787a97f1cd99708d2d4d0954c11dd10cfdca01db7ef24b4c95a9ae152c8ed3fa55f64fbb194fdd4449426c1457551a811f852c3e524883a5112f8bc3e7f4d22a1bf21daae179d898c1cb64b26f264d2b348d8284adabf2cce9fe27a3d93f5b9a3f0d5875c9c05c71a5fce88ad24bf33af4e0a48082ab671", 0xb7, 0x48800, &(0x7f0000000080)={0x11, 0x16, r5, 0x1, 0xff, 0x6, @random="6083515cf2cf"}, 0x14) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 1013.032146][ T26] audit: type=1804 audit(1588576858.629:990): pid=23318 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir604331999/syzkaller.i336n0/491/file0" dev="sda1" ino=16380 res=1 07:20:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172ae, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 1013.111009][ T26] audit: type=1804 audit(1588576858.669:991): pid=23313 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir604331999/syzkaller.i336n0/491/file0" dev="sda1" ino=16380 res=1 07:21:01 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:21:01 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setfsuid(r1) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@empty, @in6=@mcast1, 0x4e24, 0x3, 0x4e23, 0x5, 0x2, 0x80, 0x80, 0x3c, 0x0, r1}, {0x7, 0x5, 0x1, 0x1, 0x3f, 0x6, 0x5, 0x3}, {0x1000, 0x6, 0x0, 0x7ff}, 0x8, 0x6e6bb5, 0x0, 0x0, 0x2, 0x2}, {{@in6=@mcast2, 0x4d4, 0x2b}, 0x2, @in=@multicast1, 0x34ff, 0x7, 0x3, 0x0, 0x7, 0x4, 0xffff8000}}, 0xe8) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r4, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f00000001c0)='net/ip6_mr_vif\x00') preadv(r6, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000140)={{0x9a, 0x6, 0x1}, 'syz1\x00', 0x40}) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x30541, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000080)=0x1, 0x4) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:21:01 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2800) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:21:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010036}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:21:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x1cb, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f00000017c0), 0x1cb, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000080)={0xa, {0x7, 0x1}}, 0xa) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x6b5fd30e, @rand_addr=' \x01\x00', 0x4}, 0x1c) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r2, 0x400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) lseek(r2, 0x4, 0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x8, 0x1, 0x6}) 07:21:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172af, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:21:01 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f00000001c0)={0x6, 'hsr0\x00', {}, 0x7}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x8) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x391) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000dc0000005c59ced196a256f385303c14f301aec4394c4e9108b7561e97c7731a4ffc7336004a4584f52de0cf079f51ee78d1379ffdbfa6472df2b6ec6def6d7434645595f2233f6fb3df1bb7f2206cca157c1b02e544d918fe9cab5f6537637041fbf257ca1dd1ddf721cbe47d9ac1c0f30804d4762e34ec205b1c4577bdc69a9dbfb2cd124fe2be33a41a1d10a9ef110ad6eaca2f32361a169fb18f5403b035ec3595b1b855de8694bc197a6fe93827de7184a9a3a4c9c0d6d3dc005458bc55ebff794359fcccfa74337bdb86a09243a0c91ff8d1f9d6d69b3ac16f221d4562823d659af8f05884ef19"], &(0x7f00000000c0)=0x100) [ 1015.658653][ T26] audit: type=1800 audit(1588576861.259:992): pid=23353 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16338 res=0 [ 1015.687663][T23353] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:21:01 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f00000017c0), 0x1cb, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='ppp0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) bind$ax25(r4, &(0x7f0000000200)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @default]}, 0x48) preadv(r3, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000140)=""/172) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 1015.768654][ T26] audit: type=1800 audit(1588576861.369:993): pid=23353 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 1015.769132][T23369] minix_free_block (loop4:10592): bit already cleared 07:21:01 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f00000001c0)={0x6, 'hsr0\x00', {}, 0x7}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x8) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x391) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0x100) 07:21:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172b0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 1015.938190][T23369] minix_free_block (loop4:9523): bit already cleared [ 1015.979939][T23369] minix_free_block (loop4:44211): bit already cleared 07:21:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010039}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 1016.021460][T23369] minix_free_block (loop4:36301): bit already cleared [ 1016.049547][T23369] minix_free_block (loop4:21375): bit already cleared [ 1016.063403][T23369] Trying to free block not in datazone [ 1016.070052][T23369] minix_free_block (loop4:14418): bit already cleared [ 1016.084694][T23369] Trying to free block not in datazone 07:21:01 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2900) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 1016.251338][ T26] audit: type=1800 audit(1588576861.849:994): pid=23393 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16345 res=0 [ 1016.257346][T23393] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1016.340477][ T26] audit: type=1800 audit(1588576861.939:995): pid=23393 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 1016.351542][T23398] minix_free_block (loop4:10592): bit already cleared [ 1016.365828][T23398] minix_free_block (loop4:9523): bit already cleared [ 1016.372590][T23398] minix_free_block (loop4:44211): bit already cleared [ 1016.380897][T23398] minix_free_block (loop4:36301): bit already cleared [ 1016.389990][T23398] minix_free_block (loop4:21375): bit already cleared [ 1016.397047][T23398] Trying to free block not in datazone [ 1016.402551][T23398] minix_free_block (loop4:14418): bit already cleared [ 1016.409585][T23398] Trying to free block not in datazone 07:21:04 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:21:04 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000140)=""/222) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r4, 0x0, 0x0, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'gretap0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040840}, 0x4000000) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x0, 0x4, 0x0, 0x0) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:21:04 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0xc4500, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) sendto$packet(r2, &(0x7f0000000140)="78c656a7c56e7f3fb1a5fbb94eccbd3479305fba3c576605d41ade36d0c7e1693462d8be896eb649cb9c6384992f8a959ef52a9b934e4445dec48784607bdf0787a97f1cd99708d2d4d0954c11dd10cfdca01db7ef24b4c95a9ae152c8ed3fa55f64fbb194fdd4449426c1457551a811f852c3e524883a5112f8bc3e7f4d22a1bf21daae179d898c1cb64b26f264d2b348d8284adabf2cce9fe27a3d93f5b9a3f0d5875c9c05c71a5fce88ad24bf33af4e0a48082ab671", 0xb7, 0x48800, &(0x7f0000000080)={0x11, 0x16, r5, 0x1, 0xff, 0x6, @random="6083515cf2cf"}, 0x14) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:21:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172b1, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:21:04 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b01003c}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:21:04 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2a00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 1018.692239][ T26] audit: type=1800 audit(1588576864.289:996): pid=23409 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16360 res=0 [ 1018.697589][T23409] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:21:04 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000040)=0x2, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0xd) [ 1018.824538][ T26] audit: type=1800 audit(1588576864.409:997): pid=23409 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 1018.860190][T23427] minix_free_block (loop4:10592): bit already cleared [ 1018.867108][T23427] minix_free_block (loop4:9523): bit already cleared [ 1018.874821][T23427] minix_free_block (loop4:44211): bit already cleared [ 1018.882031][T23427] minix_free_block (loop4:36301): bit already cleared [ 1018.889195][T23427] minix_free_block (loop4:21375): bit already cleared [ 1018.910177][T23427] Trying to free block not in datazone 07:21:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172b2, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:21:04 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x13, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 1018.921290][T23427] minix_free_block (loop4:14418): bit already cleared [ 1018.936360][T23427] Trying to free block not in datazone 07:21:04 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2b00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:21:04 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010042}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:21:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x1000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) [ 1019.213673][ T26] audit: type=1800 audit(1588576864.820:998): pid=23455 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16379 res=0 [ 1019.266045][T23456] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1019.346087][ T26] audit: type=1800 audit(1588576864.950:999): pid=23455 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 1019.368126][T23456] minix_free_block (loop4:10592): bit already cleared [ 1019.375036][T23456] minix_free_block (loop4:9523): bit already cleared [ 1019.381807][T23456] minix_free_block (loop4:44211): bit already cleared [ 1019.391366][T23456] minix_free_block (loop4:36301): bit already cleared [ 1019.398550][T23456] minix_free_block (loop4:21375): bit already cleared [ 1019.405699][T23456] Trying to free block not in datazone [ 1019.411275][T23456] minix_free_block (loop4:14418): bit already cleared [ 1019.418707][T23456] Trying to free block not in datazone 07:21:07 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:21:07 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172b3, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:21:07 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) 07:21:07 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0xf, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:21:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010045}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:21:07 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2c00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 1021.838708][ T26] audit: type=1800 audit(1588576867.440:1000): pid=23474 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16352 res=0 [ 1021.861983][T23474] MINIX-fs: mounting unchecked file system, running fsck is recommended 07:21:07 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0x1024) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x5, 0x4) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r4, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000080)=0xf17c) [ 1021.968652][ T26] audit: type=1800 audit(1588576867.570:1001): pid=23474 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 1021.988443][T23493] minix_free_block (loop4:10592): bit already cleared [ 1022.048700][T23493] minix_free_block (loop4:9523): bit already cleared [ 1022.068898][T23493] minix_free_block (loop4:44211): bit already cleared [ 1022.083861][T23493] minix_free_block (loop4:36301): bit already cleared 07:21:07 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172b4, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 1022.100342][T23493] minix_free_block (loop4:21375): bit already cleared [ 1022.108577][T23493] Trying to free block not in datazone [ 1022.114760][T23493] minix_free_block (loop4:14418): bit already cleared [ 1022.137397][T23493] Trying to free block not in datazone 07:21:07 executing program 1: modify_ldt$write(0x1, &(0x7f0000000040)={0x2, 0x20000000, 0x4000, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1d, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:21:07 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0xb00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:21:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010048}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:21:07 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e8c87647d8d5263add18a929760293325b3accd8d7f5379035238eb", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2d00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 1022.371159][ T26] audit: type=1800 audit(1588576867.970:1002): pid=23511 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16375 res=0 [ 1022.400081][T23511] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1022.503248][ T26] audit: type=1800 audit(1588576868.110:1003): pid=23511 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 1022.541855][T23521] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1022.573125][T23520] minix_free_block (loop3:10592): bit already cleared [ 1022.612051][ T26] audit: type=1800 audit(1588576868.110:1004): pid=23521 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16381 res=0 [ 1022.621951][T23525] minix_free_block (loop4:10592): bit already cleared [ 1022.638431][T23525] minix_free_block (loop4:9523): bit already cleared [ 1022.645761][T23525] minix_free_block (loop4:44211): bit already cleared [ 1022.652734][T23520] minix_free_block (loop3:9523): bit already cleared [ 1022.659713][T23525] minix_free_block (loop4:36301): bit already cleared [ 1022.666775][T23525] minix_free_block (loop4:21375): bit already cleared [ 1022.674229][T23525] Trying to free block not in datazone [ 1022.679705][T23525] minix_free_block (loop4:14418): bit already cleared [ 1022.688008][T23525] Trying to free block not in datazone [ 1022.694766][ T26] audit: type=1800 audit(1588576868.240:1005): pid=23521 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 1022.698702][T23520] minix_free_block (loop3:44211): bit already cleared [ 1022.742000][T23520] minix_free_block (loop3:36301): bit already cleared [ 1022.756218][T23520] minix_free_block (loop3:21375): bit already cleared [ 1022.792819][T23520] Trying to free block not in datazone [ 1022.798301][T23520] minix_free_block (loop3:14418): bit already cleared [ 1022.812414][T23520] Trying to free block not in datazone 07:21:10 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:21:10 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172b5, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:21:10 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b01004b}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:21:10 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) preadv(r1, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x24, r4, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x8000800) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:21:10 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2e00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:21:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010048}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 1024.929393][ T26] audit: type=1800 audit(1588576870.530:1006): pid=23544 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16352 res=0 [ 1024.966078][T23544] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1025.069548][ T26] audit: type=1800 audit(1588576870.670:1007): pid=23544 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 1025.112022][T23558] minix_free_block (loop4:10592): bit already cleared [ 1025.118931][T23558] minix_free_block (loop4:9523): bit already cleared [ 1025.126068][T23558] minix_free_block (loop4:44211): bit already cleared [ 1025.133278][T23558] minix_free_block (loop4:36301): bit already cleared [ 1025.140141][T23558] minix_free_block (loop4:21375): bit already cleared [ 1025.147920][T23558] Trying to free block not in datazone [ 1025.153901][T23558] minix_free_block (loop4:14418): bit already cleared 07:21:10 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172b6, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 1025.160840][T23558] Trying to free block not in datazone 07:21:10 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) preadv(r1, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x24, r4, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x8000800) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 07:21:10 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2f00) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 07:21:10 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f00000017c0), 0x1cb, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x17) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000002a40)={0x0, @xdp={0x2c, 0x8, r6, 0x28}, @rc={0x1f, @any, 0x6}, @isdn={0x22, 0x0, 0x2, 0x7f, 0xec}, 0x9, 0x0, 0x0, 0x0, 0x788, &(0x7f0000002a00)='veth0_to_hsr\x00', 0x2, 0x5f7, 0xffc1}) lstat(&(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002b80)={{{@in=@rand_addr=0x64010100, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0xff, 0x4e23, 0xf4, 0xa, 0x20, 0x20, 0x62, r7, r8}, {0x1, 0x1, 0x0, 0x80000000, 0x89cf, 0x73, 0x6, 0x6}, {0x100000000, 0x4, 0x0, 0xffffffffca273d81}, 0x4, 0x6e6bbb, 0x2, 0x1, 0x2}, {{@in6=@loopback, 0x4d6, 0x33}, 0x2, @in=@loopback, 0x3503, 0x1, 0x2, 0xaf, 0x4, 0xfffffffc, 0x1}}, 0xe8) 07:21:10 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b01004e}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:21:10 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x900) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 1025.370607][ T26] audit: type=1800 audit(1588576870.970:1008): pid=23582 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15795 res=0 [ 1025.404857][T23582] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1025.510073][ T26] audit: type=1800 audit(1588576871.110:1009): pid=23582 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=1 res=0 [ 1025.531485][ T26] audit: type=1800 audit(1588576871.130:1010): pid=23595 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16097 res=0 [ 1025.572944][T23596] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1025.695594][T23593] minix_free_block (loop4:10592): bit already cleared [ 1025.715652][T23596] minix_free_block (loop3:10592): bit already cleared [ 1025.722654][ T26] audit: type=1800 audit(1588576871.310:1011): pid=23595 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 1025.749184][T23596] minix_free_block (loop3:9523): bit already cleared [ 1025.758459][T23593] minix_free_block (loop4:9523): bit already cleared [ 1025.765230][T23596] minix_free_block (loop3:44211): bit already cleared [ 1025.782347][T23596] minix_free_block (loop3:36301): bit already cleared [ 1025.789318][T23593] minix_free_block (loop4:44211): bit already cleared [ 1025.797227][T23596] minix_free_block (loop3:21375): bit already cleared [ 1025.811068][T23596] Trying to free block not in datazone [ 1025.815954][T23593] minix_free_block (loop4:36301): bit already cleared [ 1025.823402][T23596] minix_free_block (loop3:14418): bit already cleared [ 1025.830240][T23593] minix_free_block (loop4:21375): bit already cleared [ 1025.837414][T23593] Trying to free block not in datazone [ 1025.838751][T23596] Trying to free block not in datazone [ 1025.846157][T23593] minix_free_block (loop4:14418): bit already cleared [ 1025.872039][T23593] Trying to free block not in datazone 07:21:13 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffdc4}, {&(0x7f0000000580)=""/102386, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000000440)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:21:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x172b7, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:21:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010051}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 07:21:13 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) 07:21:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x85, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 07:21:13 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000001800)="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", 0x324, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x3000) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 1028.014694][ T26] audit: type=1800 audit(1588576873.621:1012): pid=23618 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16321 res=0 [ 1028.048797][T23618] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1028.158049][T23618] ================================================================== [ 1028.166200][T23618] BUG: KCSAN: data-race in generic_file_read_iter / truncate_setsize [ 1028.174260][T23618] [ 1028.176592][T23618] write to 0xffff888120fe2b10 of 8 bytes by task 23635 on cpu 0: [ 1028.184312][T23618] truncate_setsize+0x34/0x80 [ 1028.188999][T23618] minix_setattr+0xdd/0x120 [ 1028.193509][T23618] notify_change+0x82b/0xad0 [ 1028.198109][T23618] do_truncate+0xf9/0x180 [ 1028.202465][T23618] vfs_truncate+0x319/0x3f0 [ 1028.206984][T23618] do_sys_truncate.part.0+0xd7/0xf0 [ 1028.212285][T23618] __x64_sys_truncate+0x4f/0x70 [ 1028.217135][T23618] do_syscall_64+0xc7/0x3b0 [ 1028.221630][T23618] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1028.227499][T23618] [ 1028.229825][T23618] read to 0xffff888120fe2b10 of 8 bytes by task 23618 on cpu 1: [ 1028.237444][T23618] generic_file_read_iter+0x85b/0x14e0 [ 1028.242886][T23618] new_sync_read+0x306/0x450 [ 1028.247460][T23618] __vfs_read+0x9e/0xb0 [ 1028.251612][T23618] integrity_kernel_read+0x97/0xe0 [ 1028.256723][T23618] ima_calc_file_hash_tfm+0x18f/0x240 [ 1028.262086][T23618] ima_calc_file_hash+0x147/0xeb0 [ 1028.267095][T23618] ima_collect_measurement+0x385/0x3b0 [ 1028.272554][T23618] process_measurement+0x91a/0x1000 [ 1028.277755][T23618] ima_file_check+0x7e/0xb0 [ 1028.282255][T23618] path_openat+0x176e/0x23d0 [ 1028.286834][T23618] do_filp_open+0x11e/0x1b0 [ 1028.291932][T23618] do_sys_openat2+0x52e/0x680 [ 1028.296597][T23618] do_sys_open+0xa2/0x110 [ 1028.300917][T23618] __x64_sys_open+0x50/0x60 [ 1028.305412][T23618] do_syscall_64+0xc7/0x3b0 [ 1028.309905][T23618] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1028.315785][T23618] [ 1028.318095][T23618] Reported by Kernel Concurrency Sanitizer on: [ 1028.324412][T23618] CPU: 1 PID: 23618 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 1028.333063][T23618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1028.343121][T23618] ================================================================== [ 1028.351164][T23618] Kernel panic - not syncing: panic_on_warn set ... [ 1028.357738][T23618] CPU: 1 PID: 23618 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 1028.366387][T23618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1028.376425][T23618] Call Trace: [ 1028.379707][T23618] dump_stack+0x11d/0x187 [ 1028.384025][T23618] panic+0x210/0x640 [ 1028.387911][T23618] ? vprintk_func+0x89/0x13a [ 1028.392498][T23618] kcsan_report.cold+0xc/0x1a [ 1028.397168][T23618] kcsan_setup_watchpoint+0x3fb/0x440 [ 1028.402546][T23618] generic_file_read_iter+0x85b/0x14e0 [ 1028.408004][T23618] new_sync_read+0x306/0x450 [ 1028.412589][T23618] __vfs_read+0x9e/0xb0 [ 1028.416738][T23618] integrity_kernel_read+0x97/0xe0 [ 1028.421846][T23618] ima_calc_file_hash_tfm+0x18f/0x240 [ 1028.427211][T23618] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 1028.433006][T23618] ? try_to_wake_up+0x74/0x6c0 [ 1028.437759][T23618] ? widen_string+0x48/0x190 [ 1028.442339][T23618] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1028.448222][T23618] ? debug_smp_processor_id+0x3f/0x129 [ 1028.453680][T23618] ? delay_tsc+0x8a/0xb0 [ 1028.457915][T23618] ? tomoyo_profile+0x3f/0x50 [ 1028.462588][T23618] ? __rcu_read_unlock+0x77/0x390 [ 1028.467618][T23618] ? tomoyo_domain_quota_is_ok+0x1e4/0x2b0 [ 1028.473432][T23618] ? setuid_policy_lookup+0xdf/0x110 [ 1028.478720][T23618] ima_calc_file_hash+0x147/0xeb0 [ 1028.483739][T23618] ? __rcu_read_unlock+0x77/0x390 [ 1028.488755][T23618] ? has_ns_capability_noaudit+0x75/0xa0 [ 1028.494390][T23618] ? should_fail+0x7c/0x2fd [ 1028.498890][T23618] ima_collect_measurement+0x385/0x3b0 [ 1028.504368][T23618] process_measurement+0x91a/0x1000 [ 1028.509566][T23618] ? apparmor_file_open+0xf1/0x770 [ 1028.514668][T23618] ? __rcu_read_unlock+0x77/0x390 [ 1028.519682][T23618] ? aa_get_task_label+0x1ee/0x370 [ 1028.524804][T23618] ima_file_check+0x7e/0xb0 [ 1028.530178][T23618] path_openat+0x176e/0x23d0 [ 1028.534793][T23618] do_filp_open+0x11e/0x1b0 [ 1028.539288][T23618] ? __read_once_size.constprop.0+0xd/0x20 [ 1028.545084][T23618] ? __read_once_size+0x2f/0xd0 [ 1028.549936][T23618] ? _raw_spin_unlock+0x38/0x60 [ 1028.554860][T23618] ? __alloc_fd+0x2f3/0x3b0 [ 1028.559369][T23618] do_sys_openat2+0x52e/0x680 [ 1028.564044][T23618] do_sys_open+0xa2/0x110 [ 1028.568368][T23618] __x64_sys_open+0x50/0x60 [ 1028.572870][T23618] do_syscall_64+0xc7/0x3b0 [ 1028.577366][T23618] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1028.583241][T23618] RIP: 0033:0x45c829 [ 1028.587304][T23618] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1028.607164][T23618] RSP: 002b:00007fb179507c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1028.615562][T23618] RAX: ffffffffffffffda RBX: 00000000004f6800 RCX: 000000000045c829 [ 1028.623530][T23618] RDX: 0000000000003000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1028.631524][T23618] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1028.639503][T23618] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1028.647474][T23618] R13: 0000000000000773 R14: 000000000052515f R15: 00007fb1795086d4 [ 1028.656585][T23618] Kernel Offset: disabled [ 1028.660901][T23618] Rebooting in 86400 seconds..