940d, &(0x7f00000001c0)={{r4}, 0x3, 0x8000, 0xff}) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:53:11 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600484e002000a0090c98f13000000000200", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x20020, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4800) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) [ 585.529512] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 585.591841] minix_free_inode: bit 1 already cleared [ 585.602921] FAULT_INJECTION: forcing a failure. [ 585.602921] name failslab, interval 1, probability 0, space 0, times 0 [ 585.614265] CPU: 1 PID: 28642 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 585.622156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.631516] Call Trace: [ 585.634117] dump_stack+0x13e/0x194 [ 585.637762] should_fail.cold+0x10a/0x14b [ 585.641927] should_failslab+0xd6/0x130 [ 585.645915] kmem_cache_alloc+0x2b5/0x770 [ 585.650072] ? __mutex_unlock_slowpath+0x75/0x780 [ 585.654933] __kernfs_new_node+0x6f/0x470 [ 585.659113] kernfs_new_node+0x7b/0xe0 [ 585.663012] __kernfs_create_file+0x3d/0x319 [ 585.667429] sysfs_add_file_mode_ns+0x1e1/0x450 [ 585.672109] internal_create_group+0x23b/0x7e0 [ 585.676701] sysfs_create_groups+0x92/0x130 [ 585.681133] device_add+0x7aa/0x1400 [ 585.684992] ? device_private_init+0x180/0x180 [ 585.689594] netdev_register_kobject+0x180/0x390 [ 585.694621] register_netdevice+0x7ce/0xc70 [ 585.699308] ? netdev_change_features+0x80/0x80 [ 585.703991] __tun_chr_ioctl+0x20a3/0x33d0 [ 585.708239] ? tun_chr_close+0x60/0x60 [ 585.712146] ? tun_chr_compat_ioctl+0x30/0x30 [ 585.717174] do_vfs_ioctl+0x75a/0xfe0 [ 585.721086] ? selinux_file_mprotect+0x5c0/0x5c0 [ 585.725990] ? ioctl_preallocate+0x1a0/0x1a0 [ 585.730432] ? security_file_ioctl+0x76/0xb0 [ 585.735195] ? security_file_ioctl+0x83/0xb0 [ 585.739612] SyS_ioctl+0x7f/0xb0 [ 585.742992] ? do_vfs_ioctl+0xfe0/0xfe0 [ 585.747239] do_syscall_64+0x1d5/0x640 [ 585.751140] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 585.756341] RIP: 0033:0x45c889 [ 585.759535] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.767250] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 585.774910] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 585.782625] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 585.790086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 585.797363] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000002a [ 585.863624] attempt to access beyond end of device [ 585.869024] loop5: rw=2049, want=6434, limit=52 20:53:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:12 executing program 0 (fault-call:12 fault-nth:43): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 585.934717] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 585.935572] kauditd_printk_skb: 9 callbacks suppressed [ 585.935580] audit: type=1800 audit(1586897592.164:14497): pid=28655 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=15880 res=0 20:53:12 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e00200e7ff8f0cda40ff1ad5cc8f1367e3a3273d1b6555d0cebc4a3cf05ce2e0976b4d4176d1532454a08ecdda6da4295bb93b4a1c99a0a42bc4ee80b075edd5d03da1b69ef374662f14d5209d58137737cbf375348756b93ef921d9b031db51fe25e8e4ed7a89cd6818433e10a303c9e2561f5edb554bb78f4496b958b341f66f444db7a4c72eab8d891db52515cbcd97312ef8cfd8b830e507008d487ec812f411c21811e867ad6adc215c399b00f0fa8e3a1b71db160d1f76026fff24e860b02ce68917d4fcc2d6f55d70aba3e9b7a9a59a8360b59df5e4d29f41ee4e856c5c91df9dfd7fd6", 0xea, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 586.101139] minix_free_inode: bit 1 already cleared 20:53:12 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x5, 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000002c0)={0x7, 0x401, 0x400, 0x5, 0x3, 0x10000}) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000400)=0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r3 = semget$private(0x0, 0x7, 0x0) semtimedop(r3, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)=[0x1000]) semctl$IPC_INFO(r3, 0x1, 0x3, &(0x7f00000001c0)=""/111) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000240)) bind$vsock_stream(r0, &(0x7f0000000340)={0x28, 0x0, 0x0, @hyper}, 0x10) write$FUSE_INTERRUPT(r2, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) r4 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x6, 0xc000) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f00000003c0)) sendfile(r2, r2, &(0x7f0000000480), 0xa198) [ 586.137393] FAULT_INJECTION: forcing a failure. [ 586.137393] name failslab, interval 1, probability 0, space 0, times 0 [ 586.148991] CPU: 0 PID: 28677 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 586.156889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 586.166257] Call Trace: [ 586.168858] dump_stack+0x13e/0x194 [ 586.172504] should_fail.cold+0x10a/0x14b [ 586.176668] should_failslab+0xd6/0x130 [ 586.180655] kmem_cache_alloc+0x2b5/0x770 [ 586.184938] ? __mutex_unlock_slowpath+0x75/0x780 [ 586.189794] __kernfs_new_node+0x6f/0x470 [ 586.194038] kernfs_new_node+0x7b/0xe0 [ 586.197951] __kernfs_create_file+0x3d/0x319 [ 586.202369] sysfs_add_file_mode_ns+0x1e1/0x450 [ 586.207058] internal_create_group+0x23b/0x7e0 [ 586.212270] sysfs_create_groups+0x92/0x130 [ 586.216617] device_add+0x1040/0x1400 [ 586.220427] ? device_private_init+0x180/0x180 [ 586.225020] netdev_register_kobject+0x180/0x390 [ 586.229786] register_netdevice+0x7ce/0xc70 [ 586.234111] ? netdev_change_features+0x80/0x80 [ 586.238784] __tun_chr_ioctl+0x20a3/0x33d0 [ 586.243053] ? tun_chr_close+0x60/0x60 [ 586.246952] ? tun_chr_compat_ioctl+0x30/0x30 [ 586.251455] do_vfs_ioctl+0x75a/0xfe0 [ 586.255266] ? selinux_file_mprotect+0x5c0/0x5c0 [ 586.260124] ? ioctl_preallocate+0x1a0/0x1a0 [ 586.265369] ? security_file_ioctl+0x76/0xb0 [ 586.269782] ? security_file_ioctl+0x83/0xb0 [ 586.274200] SyS_ioctl+0x7f/0xb0 [ 586.277581] ? do_vfs_ioctl+0xfe0/0xfe0 [ 586.281562] do_syscall_64+0x1d5/0x640 [ 586.285470] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 586.290668] RIP: 0033:0x45c889 [ 586.293856] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.301573] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 586.308893] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 586.316184] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 586.323462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 586.330737] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000002b [ 586.339725] audit: type=1800 audit(1586897592.574:14498): pid=28679 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=15880 res=0 20:53:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:12 executing program 0 (fault-call:12 fault-nth:44): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 586.449247] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 586.485122] audit: type=1800 audit(1586897592.654:14499): pid=28688 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=15993 res=0 [ 586.557589] attempt to access beyond end of device [ 586.562752] loop5: rw=2049, want=6434, limit=52 [ 586.579018] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 586.673565] attempt to access beyond end of device [ 586.682495] FAULT_INJECTION: forcing a failure. [ 586.682495] name failslab, interval 1, probability 0, space 0, times 0 [ 586.694023] CPU: 0 PID: 28697 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 586.700612] loop5: rw=0, want=6434, limit=52 [ 586.701938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 586.701943] Call Trace: [ 586.701962] dump_stack+0x13e/0x194 [ 586.701981] should_fail.cold+0x10a/0x14b [ 586.701995] should_failslab+0xd6/0x130 [ 586.708078] Buffer I/O error on dev loop5, logical block 3216, async page read [ 586.715777] kmem_cache_alloc+0x2b5/0x770 [ 586.715792] ? __mutex_unlock_slowpath+0x75/0x780 [ 586.715808] __kernfs_new_node+0x6f/0x470 [ 586.715821] kernfs_new_node+0x7b/0xe0 [ 586.715831] __kernfs_create_file+0x3d/0x319 [ 586.715843] sysfs_add_file_mode_ns+0x1e1/0x450 [ 586.715855] internal_create_group+0x23b/0x7e0 [ 586.715870] sysfs_create_groups+0x92/0x130 [ 586.750463] attempt to access beyond end of device [ 586.750728] device_add+0x1040/0x1400 [ 586.750745] ? device_private_init+0x180/0x180 [ 586.750761] netdev_register_kobject+0x180/0x390 [ 586.755070] loop5: rw=0, want=6434, limit=52 [ 586.759429] register_netdevice+0x7ce/0xc70 [ 586.759443] ? netdev_change_features+0x80/0x80 [ 586.759460] __tun_chr_ioctl+0x20a3/0x33d0 [ 586.759474] ? tun_chr_close+0x60/0x60 [ 586.759491] ? tun_chr_compat_ioctl+0x30/0x30 [ 586.817702] do_vfs_ioctl+0x75a/0xfe0 [ 586.821660] ? selinux_file_mprotect+0x5c0/0x5c0 [ 586.826444] ? ioctl_preallocate+0x1a0/0x1a0 [ 586.830894] ? security_file_ioctl+0x76/0xb0 [ 586.835309] ? security_file_ioctl+0x83/0xb0 [ 586.839911] SyS_ioctl+0x7f/0xb0 [ 586.843286] ? do_vfs_ioctl+0xfe0/0xfe0 [ 586.847353] do_syscall_64+0x1d5/0x640 [ 586.851253] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 586.856446] RIP: 0033:0x45c889 [ 586.859633] RSP: 002b:00007f7283c41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.867345] RAX: ffffffffffffffda RBX: 00007f7283c426d4 RCX: 000000000045c889 20:53:13 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x1b0c0000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000001c0)=@req3={0xc9, 0x1, 0x3, 0x7fffffff, 0x101, 0x2}, 0x1c) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:53:13 executing program 0 (fault-call:12 fault-nth:45): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 586.874623] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 586.881907] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 586.889272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 586.896555] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000002c 20:53:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 586.950930] minix_free_inode: bit 1 already cleared [ 587.087259] audit: type=1800 audit(1586897593.314:14500): pid=28722 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=15973 res=0 [ 587.133792] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 587.153356] FAULT_INJECTION: forcing a failure. [ 587.153356] name failslab, interval 1, probability 0, space 0, times 0 [ 587.165042] CPU: 1 PID: 28726 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 587.173075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.182524] Call Trace: [ 587.185262] dump_stack+0x13e/0x194 [ 587.188917] should_fail.cold+0x10a/0x14b [ 587.193111] should_failslab+0xd6/0x130 [ 587.197104] kmem_cache_alloc+0x2b5/0x770 [ 587.201262] ? __mutex_unlock_slowpath+0x75/0x780 [ 587.206123] __kernfs_new_node+0x6f/0x470 [ 587.210288] kernfs_new_node+0x7b/0xe0 [ 587.214366] __kernfs_create_file+0x3d/0x319 [ 587.218788] sysfs_add_file_mode_ns+0x1e1/0x450 [ 587.223478] internal_create_group+0x23b/0x7e0 [ 587.228085] sysfs_create_groups+0x92/0x130 [ 587.232739] device_add+0x1040/0x1400 [ 587.236564] ? device_private_init+0x180/0x180 [ 587.241160] netdev_register_kobject+0x180/0x390 [ 587.246042] register_netdevice+0x7ce/0xc70 [ 587.250377] ? netdev_change_features+0x80/0x80 [ 587.255061] __tun_chr_ioctl+0x20a3/0x33d0 [ 587.259308] ? tun_chr_close+0x60/0x60 [ 587.263212] ? tun_chr_compat_ioctl+0x30/0x30 [ 587.267716] do_vfs_ioctl+0x75a/0xfe0 [ 587.271530] ? selinux_file_mprotect+0x5c0/0x5c0 [ 587.276416] ? ioctl_preallocate+0x1a0/0x1a0 [ 587.280842] ? security_file_ioctl+0x76/0xb0 [ 587.285262] ? security_file_ioctl+0x83/0xb0 [ 587.289686] SyS_ioctl+0x7f/0xb0 [ 587.293147] ? do_vfs_ioctl+0xfe0/0xfe0 [ 587.297134] do_syscall_64+0x1d5/0x640 [ 587.301045] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 587.306243] RIP: 0033:0x45c889 [ 587.309432] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.317148] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 587.324426] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 587.331704] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 587.339082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 587.346360] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000002d 20:53:13 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x280900, 0x8) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='.\x00', 0xe542, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x2000, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0xf59eed9efde7425c) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) r1 = socket$inet6(0xa, 0x3, 0x80) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x100000}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0x100000}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000d80)=[{0x0, 0x2000000}], 0x1}}], 0x90}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) sendfile(r1, r0, &(0x7f00000001c0), 0x3) [ 587.430762] minix_free_inode: bit 1 already cleared 20:53:13 executing program 0 (fault-call:12 fault-nth:46): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 587.576462] print_req_error: I/O error, dev loop5, sector 0 [ 587.694562] FAULT_INJECTION: forcing a failure. [ 587.694562] name failslab, interval 1, probability 0, space 0, times 0 [ 587.705875] CPU: 0 PID: 28755 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 587.713772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.723129] Call Trace: [ 587.725732] dump_stack+0x13e/0x194 [ 587.729372] should_fail.cold+0x10a/0x14b [ 587.733533] should_failslab+0xd6/0x130 [ 587.737516] kmem_cache_alloc+0x2b5/0x770 [ 587.741675] ? __mutex_unlock_slowpath+0x75/0x780 [ 587.746530] __kernfs_new_node+0x6f/0x470 [ 587.750858] kernfs_new_node+0x7b/0xe0 [ 587.754748] __kernfs_create_file+0x3d/0x319 [ 587.759145] sysfs_add_file_mode_ns+0x1e1/0x450 [ 587.763803] internal_create_group+0x23b/0x7e0 [ 587.768386] sysfs_create_groups+0x92/0x130 [ 587.772707] device_add+0x1040/0x1400 [ 587.776505] ? device_private_init+0x180/0x180 [ 587.781074] netdev_register_kobject+0x180/0x390 [ 587.785825] register_netdevice+0x7ce/0xc70 [ 587.790131] ? netdev_change_features+0x80/0x80 [ 587.794789] __tun_chr_ioctl+0x20a3/0x33d0 [ 587.799023] ? tun_chr_close+0x60/0x60 [ 587.802995] ? tun_chr_compat_ioctl+0x30/0x30 [ 587.807477] do_vfs_ioctl+0x75a/0xfe0 [ 587.811261] ? selinux_file_mprotect+0x5c0/0x5c0 [ 587.815999] ? ioctl_preallocate+0x1a0/0x1a0 [ 587.820397] ? security_file_ioctl+0x76/0xb0 [ 587.824792] ? security_file_ioctl+0x83/0xb0 [ 587.829189] SyS_ioctl+0x7f/0xb0 [ 587.832542] ? do_vfs_ioctl+0xfe0/0xfe0 [ 587.836501] do_syscall_64+0x1d5/0x640 [ 587.840388] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 587.845564] RIP: 0033:0x45c889 [ 587.848734] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.856442] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 587.863724] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 587.871000] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 587.878273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 587.885552] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000002e 20:53:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 587.976152] ip6t_REJECT: ECHOREPLY is not supported. 20:53:14 executing program 0 (fault-call:12 fault-nth:47): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 588.300822] FAULT_INJECTION: forcing a failure. [ 588.300822] name failslab, interval 1, probability 0, space 0, times 0 [ 588.312212] CPU: 1 PID: 28777 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 588.320119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.329481] Call Trace: [ 588.332081] dump_stack+0x13e/0x194 [ 588.335733] should_fail.cold+0x10a/0x14b [ 588.339901] should_failslab+0xd6/0x130 [ 588.343886] kmem_cache_alloc+0x2b5/0x770 [ 588.348047] ? __mutex_unlock_slowpath+0x75/0x780 [ 588.352920] __kernfs_new_node+0x6f/0x470 [ 588.357084] kernfs_new_node+0x7b/0xe0 [ 588.360986] __kernfs_create_file+0x3d/0x319 [ 588.365396] sysfs_add_file_mode_ns+0x1e1/0x450 [ 588.370056] internal_create_group+0x23b/0x7e0 [ 588.374639] sysfs_create_groups+0x92/0x130 [ 588.378955] device_add+0x1040/0x1400 [ 588.382742] ? device_private_init+0x180/0x180 [ 588.387311] netdev_register_kobject+0x180/0x390 [ 588.392053] register_netdevice+0x7ce/0xc70 [ 588.396360] ? netdev_change_features+0x80/0x80 [ 588.401205] __tun_chr_ioctl+0x20a3/0x33d0 [ 588.405444] ? tun_chr_close+0x60/0x60 [ 588.409410] ? tun_chr_compat_ioctl+0x30/0x30 [ 588.413903] do_vfs_ioctl+0x75a/0xfe0 [ 588.417719] ? selinux_file_mprotect+0x5c0/0x5c0 [ 588.422463] ? ioctl_preallocate+0x1a0/0x1a0 [ 588.426870] ? security_file_ioctl+0x76/0xb0 [ 588.431263] ? security_file_ioctl+0x83/0xb0 [ 588.435656] SyS_ioctl+0x7f/0xb0 [ 588.439010] ? do_vfs_ioctl+0xfe0/0xfe0 [ 588.442995] do_syscall_64+0x1d5/0x640 [ 588.447061] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 588.452313] RIP: 0033:0x45c889 [ 588.455501] RSP: 002b:00007f7283bdec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 588.463201] RAX: ffffffffffffffda RBX: 00007f7283bdf6d4 RCX: 000000000045c889 [ 588.470466] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 588.477726] RBP: 000000000076c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 588.484993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 588.492261] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000002f [ 588.573908] ip6t_REJECT: ECHOREPLY is not supported. 20:53:22 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x108) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xffffffffffffffda}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:53:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:22 executing program 0 (fault-call:12 fault-nth:48): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 596.534652] MINIX-fs: mounting file system with errors, running fsck is recommended 20:53:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:22 executing program 2: futex(0x0, 0x8b, 0x0, 0x0, &(0x7f0000048000), 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0x4, 0x0, 0x10000, 0x6}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={r4, 0x111}) 20:53:22 executing program 5: openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x600000, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x3) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000200)="c0923601f8ffff068588484e6d5bd9b3b8e56d1f63dc430000000000000000005bc83266c048a1de337fbc63190329f843280573eed02e1a3cd203f27df80e41ee92becc", 0x44}]) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) lseek(0xffffffffffffffff, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffb) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000002c0)={r6}) [ 596.589898] minix_free_inode: bit 1 already cleared [ 596.636463] audit: type=1804 audit(1586897602.865:14501): pid=28801 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir689926280/syzkaller.BgL1Ld/419/bus" dev="sda1" ino=16056 res=1 20:53:22 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x64) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x3c}, 0x1) [ 596.686824] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 596.768488] FAULT_INJECTION: forcing a failure. [ 596.768488] name failslab, interval 1, probability 0, space 0, times 0 [ 596.780869] CPU: 0 PID: 28821 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 596.788806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.798168] Call Trace: [ 596.800774] dump_stack+0x13e/0x194 [ 596.804420] should_fail.cold+0x10a/0x14b [ 596.808584] should_failslab+0xd6/0x130 [ 596.812563] kmem_cache_alloc+0x2b5/0x770 [ 596.816730] ? lock_downgrade+0x6e0/0x6e0 [ 596.820891] __kernfs_new_node+0x6f/0x470 [ 596.825050] kernfs_new_node+0x7b/0xe0 [ 596.828946] __kernfs_create_file+0x3d/0x319 [ 596.833368] sysfs_add_file_mode_ns+0x1e1/0x450 [ 596.838134] internal_create_group+0x23b/0x7e0 [ 596.842725] sysfs_create_groups+0x92/0x130 [ 596.843744] audit: type=1804 audit(1586897602.865:14502): pid=28801 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir689926280/syzkaller.BgL1Ld/419/bus" dev="sda1" ino=16056 res=1 [ 596.847063] device_add+0x1040/0x1400 [ 596.847080] ? device_private_init+0x180/0x180 [ 596.847099] netdev_register_kobject+0x180/0x390 [ 596.847119] register_netdevice+0x7ce/0xc70 [ 596.888367] ? netdev_change_features+0x80/0x80 [ 596.893060] __tun_chr_ioctl+0x20a3/0x33d0 [ 596.897301] ? tun_chr_close+0x60/0x60 [ 596.901183] ? tun_chr_compat_ioctl+0x30/0x30 [ 596.905662] do_vfs_ioctl+0x75a/0xfe0 [ 596.909448] ? selinux_file_mprotect+0x5c0/0x5c0 [ 596.914188] ? ioctl_preallocate+0x1a0/0x1a0 [ 596.918589] ? security_file_ioctl+0x76/0xb0 [ 596.923254] ? security_file_ioctl+0x83/0xb0 [ 596.927647] SyS_ioctl+0x7f/0xb0 [ 596.932126] ? do_vfs_ioctl+0xfe0/0xfe0 [ 596.938872] do_syscall_64+0x1d5/0x640 [ 596.942923] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 596.948096] RIP: 0033:0x45c889 [ 596.951268] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.958957] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 596.966221] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 596.973639] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 596.981458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 596.988718] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000030 20:53:23 executing program 5: open(&(0x7f00000001c0)='./file0\x00', 0x84500, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x442803, 0x42) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:53:23 executing program 2: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x1b0c0000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000001c0)=@req3={0xc9, 0x1, 0x3, 0x7fffffff, 0x101, 0x2}, 0x1c) sendfile(r0, r0, &(0x7f0000000480), 0xa198) [ 597.147805] minix_free_inode: bit 1 already cleared [ 597.174429] audit: type=1804 audit(1586897602.865:14503): pid=28801 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir689926280/syzkaller.BgL1Ld/419/bus" dev="sda1" ino=16056 res=1 [ 597.289868] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 597.302958] audit: type=1804 audit(1586897602.875:14504): pid=28806 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir689926280/syzkaller.BgL1Ld/419/bus" dev="sda1" ino=16056 res=1 [ 597.336657] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 597.421977] minix_free_inode: bit 1 already cleared 20:53:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:23 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x803805, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000001c0)) [ 597.528856] audit: type=1804 audit(1586897602.875:14505): pid=28806 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir689926280/syzkaller.BgL1Ld/419/bus" dev="sda1" ino=16056 res=1 [ 597.684171] audit: type=1804 audit(1586897602.875:14506): pid=28801 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir689926280/syzkaller.BgL1Ld/419/bus" dev="sda1" ino=16056 res=1 [ 597.860500] audit: type=1800 audit(1586897602.905:14507): pid=28809 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16058 res=0 [ 597.973650] audit: type=1804 audit(1586897603.235:14508): pid=28809 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/404/bus" dev="sda1" ino=16061 res=1 [ 598.090127] audit: type=1804 audit(1586897603.255:14509): pid=28809 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/404/bus" dev="sda1" ino=16061 res=1 [ 598.181645] audit: type=1804 audit(1586897603.255:14510): pid=28822 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/404/bus" dev="sda1" ino=16061 res=1 [ 598.231321] minix_free_inode: bit 1 already cleared 20:53:24 executing program 5: r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x0, 0x64c400) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x9b, 0x4) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x0, 0xfffffffffffffffb, 0x16, 0x4, @buffer={0x0, 0x9a, &(0x7f0000000240)=""/154}, &(0x7f0000000300)="962c8fd8583621381ef5f464d21e3498f7a007e709b3", &(0x7f0000000340)=""/255, 0x3ff, 0x3, 0x1, &(0x7f0000000440)}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r1, r1, &(0x7f0000000480), 0xa198) 20:53:24 executing program 0 (fault-call:12 fault-nth:49): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:24 executing program 2: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x1b0c0000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000001c0)=@req3={0xc9, 0x1, 0x3, 0x7fffffff, 0x101, 0x2}, 0x1c) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:53:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:24 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x131000, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000200)={@default, @null, 0x2, 0x56}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) accept4$ax25(r2, &(0x7f0000000240)={{0x3, @bcast}, [@netrom, @rose, @netrom, @remote, @rose, @default, @netrom, @null]}, &(0x7f00000002c0)=0x48, 0x80800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:53:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 598.627694] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 598.703741] minix_free_inode: bit 1 already cleared [ 598.720344] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 598.743695] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 598.784177] attempt to access beyond end of device [ 598.793759] loop5: rw=2049, want=6434, limit=52 [ 598.802513] FAULT_INJECTION: forcing a failure. [ 598.802513] name failslab, interval 1, probability 0, space 0, times 0 [ 598.813845] CPU: 0 PID: 28918 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 598.821742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.831128] Call Trace: [ 598.833732] dump_stack+0x13e/0x194 [ 598.837375] should_fail.cold+0x10a/0x14b [ 598.841576] should_failslab+0xd6/0x130 [ 598.845648] kmem_cache_alloc+0x2b5/0x770 [ 598.849925] ? __mutex_unlock_slowpath+0x75/0x780 [ 598.854957] __kernfs_new_node+0x6f/0x470 [ 598.859119] kernfs_new_node+0x7b/0xe0 [ 598.863541] __kernfs_create_file+0x3d/0x319 [ 598.868233] sysfs_add_file_mode_ns+0x1e1/0x450 [ 598.872311] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 598.872910] internal_create_group+0x23b/0x7e0 [ 598.885499] sysfs_create_groups+0x92/0x130 [ 598.890408] device_add+0x1040/0x1400 [ 598.894393] ? device_private_init+0x180/0x180 [ 598.898995] netdev_register_kobject+0x180/0x390 [ 598.903764] register_netdevice+0x7ce/0xc70 [ 598.908093] ? netdev_change_features+0x80/0x80 [ 598.912775] __tun_chr_ioctl+0x20a3/0x33d0 [ 598.917026] ? tun_chr_close+0x60/0x60 [ 598.920928] ? tun_chr_compat_ioctl+0x30/0x30 [ 598.925434] do_vfs_ioctl+0x75a/0xfe0 [ 598.929245] ? selinux_file_mprotect+0x5c0/0x5c0 [ 598.934009] ? ioctl_preallocate+0x1a0/0x1a0 [ 598.938435] ? security_file_ioctl+0x76/0xb0 [ 598.942886] ? security_file_ioctl+0x83/0xb0 [ 598.947306] SyS_ioctl+0x7f/0xb0 [ 598.950681] ? do_vfs_ioctl+0xfe0/0xfe0 [ 598.954664] do_syscall_64+0x1d5/0x640 [ 598.958654] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 598.961236] attempt to access beyond end of device [ 598.963873] RIP: 0033:0x45c889 [ 598.963879] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 20:53:25 executing program 0 (fault-call:12 fault-nth:50): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 598.963891] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 598.963896] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 598.963902] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 598.963907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 598.963913] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000031 [ 599.037159] MINIX-fs: mounting unchecked file system, running fsck is recommended 20:53:25 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000001c0)={0x682d9674d38dd374, @capture={0x1000, 0x0, {0x9, 0x75}, 0x1, 0x7}}) [ 599.190218] minix_free_inode: bit 1 already cleared [ 599.205098] FAULT_INJECTION: forcing a failure. [ 599.205098] name failslab, interval 1, probability 0, space 0, times 0 [ 599.216863] CPU: 1 PID: 28929 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 599.224158] loop5: rw=0, want=6434, limit=52 [ 599.225031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.225036] Call Trace: [ 599.225056] dump_stack+0x13e/0x194 [ 599.225073] should_fail.cold+0x10a/0x14b [ 599.229569] Buffer I/O error on dev loop5, logical block 3216, async page read [ 599.239109] should_failslab+0xd6/0x130 [ 599.239119] kmem_cache_alloc+0x2b5/0x770 [ 599.239131] ? __mutex_unlock_slowpath+0x75/0x780 [ 599.239145] __kernfs_new_node+0x6f/0x470 [ 599.273991] kernfs_new_node+0x7b/0xe0 [ 599.277875] __kernfs_create_file+0x3d/0x319 [ 599.282281] sysfs_add_file_mode_ns+0x1e1/0x450 [ 599.286950] internal_create_group+0x23b/0x7e0 [ 599.291622] sysfs_create_groups+0x92/0x130 [ 599.295939] device_add+0x1040/0x1400 [ 599.299751] ? device_private_init+0x180/0x180 [ 599.304412] netdev_register_kobject+0x180/0x390 [ 599.309166] register_netdevice+0x7ce/0xc70 [ 599.313486] ? netdev_change_features+0x80/0x80 [ 599.318151] __tun_chr_ioctl+0x20a3/0x33d0 [ 599.322391] ? tun_chr_close+0x60/0x60 [ 599.326291] ? tun_chr_compat_ioctl+0x30/0x30 [ 599.330780] do_vfs_ioctl+0x75a/0xfe0 [ 599.334575] ? selinux_file_mprotect+0x5c0/0x5c0 [ 599.339328] ? ioctl_preallocate+0x1a0/0x1a0 [ 599.343738] ? security_file_ioctl+0x76/0xb0 [ 599.348135] ? security_file_ioctl+0x83/0xb0 [ 599.352531] SyS_ioctl+0x7f/0xb0 [ 599.355898] ? do_vfs_ioctl+0xfe0/0xfe0 [ 599.359862] do_syscall_64+0x1d5/0x640 [ 599.363857] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 599.369044] RIP: 0033:0x45c889 [ 599.372217] RSP: 002b:00007f7283c41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.379911] RAX: ffffffffffffffda RBX: 00007f7283c426d4 RCX: 000000000045c889 20:53:25 executing program 0 (fault-call:12 fault-nth:51): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 599.387165] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 599.394532] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 599.401896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 599.409266] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000032 20:53:25 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) r1 = socket$inet6(0xa, 0x3, 0x80) r2 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000005000000004000000c003000000000000d0000000f8010000d0000000f8010000f0020000f0020000f0020000f0020000f0020000040000000000000000000000ff010000000000000000000000000001000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000626f6e645f736c6176655f300000000073797a6b616c6c6572310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a454354000000000000ffff000000000000000000000000000000000500000000000000fe800000000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000064756d6d79300000000000000000000076657468305f746f5f626f6e6400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001280100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000000000000000000000000000000000000028006970763668656164657200000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c3000000000000000000069705f767469300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f800000000000000000000000000000000000000000000000000280069636d7036000000000000000000000000000000000000000000000000000018830000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x473) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="0200001f98516ffa6d5bcef02e84d5ddbad4ffa8364829e7a17f698ed59d862110d981f574a3f1a697bd2f88c2809957e8799f135177a59b63e0b1e6f35f529313fa03fe7ae70e332f450ac03f0c45eec7b0003e3465a90fcf8f9cf45e0fd3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x70, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)={r6, 0x7, 0x38, "d3f8b0a0e501a5ea26408b47212361973bf26d2b8f00a3b2bf36c95103d5b63c3771ed6d955f99db5c95a4bf1e3442aa17b6b74c9c06d665"}, 0x40) 20:53:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 599.570086] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 599.589924] minix_free_inode: bit 1 already cleared 20:53:25 executing program 2: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x1b0c0000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000001c0)=@req3={0xc9, 0x1, 0x3, 0x7fffffff, 0x101, 0x2}, 0x1c) sendfile(r0, r0, &(0x7f0000000480), 0xa198) [ 599.671529] minix_free_inode: bit 1 already cleared [ 599.700170] FAULT_INJECTION: forcing a failure. [ 599.700170] name failslab, interval 1, probability 0, space 0, times 0 [ 599.711967] CPU: 1 PID: 28962 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 599.719880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.729372] Call Trace: [ 599.732162] dump_stack+0x13e/0x194 [ 599.735820] should_fail.cold+0x10a/0x14b [ 599.739984] should_failslab+0xd6/0x130 [ 599.743980] kmem_cache_alloc+0x2b5/0x770 [ 599.748120] ? __mutex_unlock_slowpath+0x75/0x780 [ 599.753112] __kernfs_new_node+0x6f/0x470 [ 599.757311] kernfs_new_node+0x7b/0xe0 [ 599.761207] __kernfs_create_file+0x3d/0x319 [ 599.765978] sysfs_add_file_mode_ns+0x1e1/0x450 [ 599.770839] internal_create_group+0x23b/0x7e0 [ 599.775437] sysfs_create_groups+0x92/0x130 [ 599.779830] device_add+0x1040/0x1400 [ 599.783638] ? device_private_init+0x180/0x180 [ 599.788213] netdev_register_kobject+0x180/0x390 [ 599.792981] register_netdevice+0x7ce/0xc70 [ 599.797409] ? netdev_change_features+0x80/0x80 [ 599.802080] __tun_chr_ioctl+0x20a3/0x33d0 [ 599.806318] ? tun_chr_close+0x60/0x60 [ 599.810202] ? tun_chr_compat_ioctl+0x30/0x30 [ 599.814707] do_vfs_ioctl+0x75a/0xfe0 [ 599.818503] ? selinux_file_mprotect+0x5c0/0x5c0 [ 599.823264] ? ioctl_preallocate+0x1a0/0x1a0 [ 599.827672] ? security_file_ioctl+0x76/0xb0 [ 599.832073] ? security_file_ioctl+0x83/0xb0 [ 599.836480] SyS_ioctl+0x7f/0xb0 [ 599.839847] ? do_vfs_ioctl+0xfe0/0xfe0 [ 599.843810] do_syscall_64+0x1d5/0x640 [ 599.847687] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 599.852861] RIP: 0033:0x45c889 [ 599.856031] RSP: 002b:00007f7283bdec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.863723] RAX: ffffffffffffffda RBX: 00007f7283bdf6d4 RCX: 000000000045c889 [ 599.870976] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 599.878230] RBP: 000000000076c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 599.885491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 599.892767] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000033 20:53:26 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./bus\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) write$FUSE_INTERRUPT(r2, &(0x7f0000000180)={0x10, 0xfffffffffffffff5, 0x3}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000340)={0x9f0000, 0x4, 0x6, r0, 0x0, &(0x7f0000000300)={0xa10905, 0x8, [], @p_u32=&(0x7f0000000280)=0x3ff}}) r4 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)="f6", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) keyctl$negate(0xd, r4, 0x9, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:53:26 executing program 0 (fault-call:12 fault-nth:52): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 599.969954] minix_free_inode: bit 1 already cleared [ 600.026177] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 600.093486] attempt to access beyond end of device [ 600.116178] loop5: rw=2049, want=6434, limit=52 [ 600.135406] FAULT_INJECTION: forcing a failure. [ 600.135406] name failslab, interval 1, probability 0, space 0, times 0 [ 600.145657] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 600.154737] CPU: 0 PID: 28989 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 600.162638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.172075] Call Trace: [ 600.174659] dump_stack+0x13e/0x194 [ 600.178296] should_fail.cold+0x10a/0x14b [ 600.182551] should_failslab+0xd6/0x130 [ 600.186516] kmem_cache_alloc+0x2b5/0x770 [ 600.190661] ? __mutex_unlock_slowpath+0x75/0x780 [ 600.195510] __kernfs_new_node+0x6f/0x470 [ 600.199658] kernfs_new_node+0x7b/0xe0 [ 600.203560] __kernfs_create_file+0x3d/0x319 [ 600.207989] sysfs_add_file_mode_ns+0x1e1/0x450 [ 600.212666] internal_create_group+0x23b/0x7e0 [ 600.218388] sysfs_create_groups+0x92/0x130 [ 600.224033] device_add+0x1040/0x1400 [ 600.227867] ? device_private_init+0x180/0x180 [ 600.232490] netdev_register_kobject+0x180/0x390 [ 600.237243] register_netdevice+0x7ce/0xc70 [ 600.241572] ? netdev_change_features+0x80/0x80 [ 600.246260] __tun_chr_ioctl+0x20a3/0x33d0 [ 600.251364] ? tun_chr_close+0x60/0x60 [ 600.255250] ? tun_chr_compat_ioctl+0x30/0x30 [ 600.259958] do_vfs_ioctl+0x75a/0xfe0 [ 600.263759] ? selinux_file_mprotect+0x5c0/0x5c0 [ 600.268544] ? ioctl_preallocate+0x1a0/0x1a0 [ 600.273046] ? security_file_ioctl+0x76/0xb0 [ 600.277461] ? security_file_ioctl+0x83/0xb0 [ 600.281915] SyS_ioctl+0x7f/0xb0 [ 600.285285] ? do_vfs_ioctl+0xfe0/0xfe0 [ 600.289398] do_syscall_64+0x1d5/0x640 [ 600.293315] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 600.298506] RIP: 0033:0x45c889 [ 600.301709] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.309522] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 600.316826] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 600.324092] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 600.331362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 600.338759] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000034 [ 600.356793] ip6t_REJECT: ECHOREPLY is not supported. [ 600.362005] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 600.362187] attempt to access beyond end of device [ 600.382911] loop5: rw=0, want=6434, limit=52 [ 600.402034] ip6t_REJECT: ECHOREPLY is not supported. [ 600.415542] Buffer I/O error on dev loop5, logical block 3216, async page read [ 600.426010] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 600.441146] minix_free_inode: bit 1 already cleared [ 600.466244] attempt to access beyond end of device [ 600.497555] loop5: rw=0, want=6434, limit=52 20:53:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:26 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='security.apparmor\x00', &(0x7f0000000240)='minix\x00', 0x6, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0xb, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0c4}, 0x90) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x402102, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000002c0)={0x2}, 0x4) [ 600.522183] ip6t_REJECT: ECHOREPLY is not supported. [ 600.530031] ip6t_REJECT: ECHOREPLY is not supported. [ 600.545745] attempt to access beyond end of device [ 600.551736] loop5: rw=0, want=6434, limit=52 20:53:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 600.594740] Buffer I/O error on dev loop5, logical block 3216, async page read [ 600.622402] MINIX-fs: mounting unchecked file system, running fsck is recommended 20:53:26 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x20, 0x1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) 20:53:26 executing program 0 (fault-call:12 fault-nth:53): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 600.715110] minix_free_inode: bit 1 already cleared [ 600.750551] minix_free_inode: bit 1 already cleared 20:53:27 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xffffffffffffff66, 0x408000) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000200)=0xf4240) [ 600.877180] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 600.912475] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 600.912531] FAULT_INJECTION: forcing a failure. [ 600.912531] name failslab, interval 1, probability 0, space 0, times 0 [ 600.932038] CPU: 0 PID: 29041 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 600.939943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.944684] attempt to access beyond end of device [ 600.949297] Call Trace: [ 600.949318] dump_stack+0x13e/0x194 [ 600.949335] should_fail.cold+0x10a/0x14b [ 600.949348] should_failslab+0xd6/0x130 [ 600.949358] kmem_cache_alloc+0x2b5/0x770 [ 600.949369] ? __mutex_unlock_slowpath+0x75/0x780 [ 600.949382] __kernfs_new_node+0x6f/0x470 [ 600.949393] kernfs_new_node+0x7b/0xe0 [ 600.949405] __kernfs_create_file+0x3d/0x319 [ 600.949417] sysfs_add_file_mode_ns+0x1e1/0x450 [ 600.993526] loop5: rw=2049, want=6434, limit=52 [ 600.994809] internal_create_group+0x23b/0x7e0 [ 600.994830] sysfs_create_groups+0x92/0x130 [ 601.008381] device_add+0x1040/0x1400 [ 601.012194] ? device_private_init+0x180/0x180 [ 601.016911] netdev_register_kobject+0x180/0x390 [ 601.021677] register_netdevice+0x7ce/0xc70 [ 601.024866] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 601.026004] ? netdev_change_features+0x80/0x80 [ 601.026022] __tun_chr_ioctl+0x20a3/0x33d0 [ 601.026037] ? tun_chr_close+0x60/0x60 [ 601.046692] ? tun_chr_compat_ioctl+0x30/0x30 [ 601.051196] do_vfs_ioctl+0x75a/0xfe0 [ 601.055004] ? selinux_file_mprotect+0x5c0/0x5c0 [ 601.059769] ? ioctl_preallocate+0x1a0/0x1a0 [ 601.064195] ? security_file_ioctl+0x76/0xb0 [ 601.068611] ? security_file_ioctl+0x83/0xb0 [ 601.073027] SyS_ioctl+0x7f/0xb0 [ 601.073264] attempt to access beyond end of device [ 601.076389] ? do_vfs_ioctl+0xfe0/0xfe0 [ 601.076404] do_syscall_64+0x1d5/0x640 [ 601.076421] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 601.076432] RIP: 0033:0x45c889 [ 601.087293] loop5: rw=0, want=6434, limit=52 [ 601.089194] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.089207] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 601.089212] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 20:53:27 executing program 2: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x1b0c0000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000001c0)=@req3={0xc9, 0x1, 0x3, 0x7fffffff, 0x101, 0x2}, 0x1c) sendfile(r0, r0, &(0x7f0000000480), 0xa198) [ 601.089218] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 601.089224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 601.089230] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000035 20:53:27 executing program 0 (fault-call:12 fault-nth:54): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 601.189692] minix_free_inode: bit 1 already cleared [ 601.269639] minix_free_inode: bit 1 already cleared 20:53:27 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000001c0)=0x7f) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 601.297328] Buffer I/O error on dev loop5, logical block 3216, async page read [ 601.341765] attempt to access beyond end of device [ 601.347847] loop5: rw=0, want=6434, limit=52 [ 601.367251] attempt to access beyond end of device [ 601.376828] loop5: rw=0, want=6434, limit=52 [ 601.389807] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 601.399672] FAULT_INJECTION: forcing a failure. [ 601.399672] name failslab, interval 1, probability 0, space 0, times 0 [ 601.410939] CPU: 0 PID: 29066 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 601.418819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.428167] Call Trace: [ 601.430752] dump_stack+0x13e/0x194 [ 601.434368] should_fail.cold+0x10a/0x14b [ 601.438503] should_failslab+0xd6/0x130 [ 601.442553] kmem_cache_alloc+0x44/0x770 [ 601.446600] ? kmem_cache_alloc+0x127/0x770 [ 601.450920] ? __kernfs_new_node+0x6f/0x470 [ 601.455231] ? kernfs_new_node+0x7b/0xe0 [ 601.459411] ? __kernfs_create_file+0x3d/0x319 [ 601.464103] ? sysfs_add_file_mode_ns+0x1e1/0x450 [ 601.468944] ? internal_create_group+0x23b/0x7e0 [ 601.473691] ? sysfs_create_groups+0x92/0x130 [ 601.478186] ? device_add+0x1040/0x1400 [ 601.482164] radix_tree_node_alloc.constprop.0+0x1b4/0x300 [ 601.487778] idr_get_free_cmn+0x5b0/0x900 [ 601.491916] idr_alloc_cmn+0xe8/0x1e0 [ 601.495702] ? __fprop_inc_percpu_max+0x1d0/0x1d0 [ 601.500540] ? __lock_is_held+0xad/0x140 [ 601.504599] idr_alloc_cyclic+0xc4/0x1c8 [ 601.508647] ? ida_simple_remove+0x50/0x50 [ 601.512864] ? __radix_tree_preload+0x1c3/0x250 [ 601.517517] __kernfs_new_node+0xaf/0x470 [ 601.521661] kernfs_new_node+0x7b/0xe0 [ 601.525540] __kernfs_create_file+0x3d/0x319 [ 601.530019] sysfs_add_file_mode_ns+0x1e1/0x450 [ 601.534718] internal_create_group+0x23b/0x7e0 [ 601.539298] sysfs_create_groups+0x92/0x130 [ 601.543607] device_add+0x1040/0x1400 [ 601.547398] ? device_private_init+0x180/0x180 [ 601.551969] netdev_register_kobject+0x180/0x390 [ 601.556731] register_netdevice+0x7ce/0xc70 [ 601.561037] ? netdev_change_features+0x80/0x80 [ 601.565693] __tun_chr_ioctl+0x20a3/0x33d0 [ 601.569916] ? tun_chr_close+0x60/0x60 [ 601.573799] ? tun_chr_compat_ioctl+0x30/0x30 [ 601.578281] do_vfs_ioctl+0x75a/0xfe0 [ 601.582066] ? selinux_file_mprotect+0x5c0/0x5c0 [ 601.586815] ? ioctl_preallocate+0x1a0/0x1a0 [ 601.591213] ? security_file_ioctl+0x76/0xb0 [ 601.595603] ? security_file_ioctl+0x83/0xb0 [ 601.600007] SyS_ioctl+0x7f/0xb0 [ 601.603358] ? do_vfs_ioctl+0xfe0/0xfe0 [ 601.607316] do_syscall_64+0x1d5/0x640 [ 601.611195] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 601.616376] RIP: 0033:0x45c889 [ 601.619548] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.627240] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 601.634493] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 601.641747] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 601.648998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 601.656252] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000036 [ 601.686668] Buffer I/O error on dev loop5, logical block 3216, async page read [ 601.713959] kauditd_printk_skb: 19 callbacks suppressed [ 601.713972] audit: type=1800 audit(1586897607.945:14530): pid=29067 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16305 res=0 [ 601.746887] MINIX-fs: mounting unchecked file system, running fsck is recommended 20:53:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:28 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xffffff01, 0x9, 0x4, 0x0, 0xffff8000, {}, {0x5, 0x1, 0xe0, 0x7, 0x0, 0x20, "c19e77a4"}, 0x1ff, 0x3, @fd=r0, 0x326474ce, 0x0, r1}) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000240)={'nat\x00'}, &(0x7f00000002c0)=0x78) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r3, r3, &(0x7f0000000480), 0xa198) 20:53:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 601.840462] minix_free_inode: bit 1 already cleared 20:53:28 executing program 0 (fault-call:12 fault-nth:55): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:28 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000780)={0x2, {{0x2, 0x0, @multicast1=0xe0000002}}, 0x1}, 0x90) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 601.931959] minix_free_inode: bit 1 already cleared [ 601.951290] audit: type=1800 audit(1586897608.185:14531): pid=29093 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16193 res=0 [ 601.952742] ip6t_REJECT: ECHOREPLY is not supported. [ 602.021091] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 602.063116] audit: type=1800 audit(1586897608.295:14532): pid=29107 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16225 res=0 [ 602.076196] FAULT_INJECTION: forcing a failure. [ 602.076196] name failslab, interval 1, probability 0, space 0, times 0 [ 602.095117] CPU: 0 PID: 29109 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 602.103017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.112378] Call Trace: [ 602.114981] dump_stack+0x13e/0x194 [ 602.118615] should_fail.cold+0x10a/0x14b [ 602.122754] should_failslab+0xd6/0x130 [ 602.126713] kmem_cache_alloc+0x2b5/0x770 [ 602.130859] ? __mutex_unlock_slowpath+0x75/0x780 [ 602.135707] __kernfs_new_node+0x6f/0x470 [ 602.139861] kernfs_new_node+0x7b/0xe0 [ 602.143753] __kernfs_create_file+0x3d/0x319 [ 602.148163] sysfs_add_file_mode_ns+0x1e1/0x450 [ 602.152826] internal_create_group+0x23b/0x7e0 [ 602.157429] sysfs_create_groups+0x92/0x130 [ 602.161740] device_add+0x1040/0x1400 [ 602.165537] ? device_private_init+0x180/0x180 [ 602.170115] netdev_register_kobject+0x180/0x390 [ 602.174896] register_netdevice+0x7ce/0xc70 [ 602.179205] ? netdev_change_features+0x80/0x80 [ 602.183864] __tun_chr_ioctl+0x20a3/0x33d0 [ 602.188089] ? tun_chr_close+0x60/0x60 [ 602.191974] ? tun_chr_compat_ioctl+0x30/0x30 [ 602.196453] do_vfs_ioctl+0x75a/0xfe0 [ 602.200249] ? selinux_file_mprotect+0x5c0/0x5c0 [ 602.204996] ? ioctl_preallocate+0x1a0/0x1a0 [ 602.209392] ? security_file_ioctl+0x76/0xb0 [ 602.213782] ? security_file_ioctl+0x83/0xb0 [ 602.218192] SyS_ioctl+0x7f/0xb0 [ 602.221543] ? do_vfs_ioctl+0xfe0/0xfe0 [ 602.225502] do_syscall_64+0x1d5/0x640 [ 602.229376] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 602.234552] RIP: 0033:0x45c889 [ 602.237724] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.245420] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 602.252677] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 602.259927] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 602.267181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 602.274520] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000037 [ 602.313162] MINIX-fs: mounting unchecked file system, running fsck is recommended 20:53:28 executing program 5: setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f00000001c0)=0x1, 0x4) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) [ 602.400186] minix_free_inode: bit 1 already cleared 20:53:28 executing program 2: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) sendfile(r0, r1, &(0x7f0000000480)=0xfffffffffffffffc, 0xa198) 20:53:28 executing program 0 (fault-call:12 fault-nth:56): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 602.510330] minix_free_inode: bit 1 already cleared [ 602.525308] audit: type=1800 audit(1586897608.755:14533): pid=29123 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=15707 res=0 [ 602.585360] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 602.615909] attempt to access beyond end of device [ 602.636388] loop5: rw=2049, want=6434, limit=52 [ 602.655329] Buffer I/O error on dev loop5, logical block 3216, lost async page write 20:53:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 602.685107] audit: type=1800 audit(1586897608.915:14534): pid=29131 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=16186 res=0 [ 602.702306] attempt to access beyond end of device [ 602.725960] MINIX-fs: mounting unchecked file system, running fsck is recommended 20:53:29 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xfffffffffffffffc, 0x400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000200000000000000000700000004000180"], 0x3}, 0x1, 0x0, 0x0, 0x8808}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x20000140) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x40041, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r6, 0xb03, 0x0, 0x0, {0x12}}, 0x14}, 0x1, 0x1000000}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0xc0, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xada}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x839a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4004}, 0x4884) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r7, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r7, r7, &(0x7f00000000c0), 0x8080fffffffe) write$midi(r7, &(0x7f0000000340)="979e9f7a44a1bbbcfe5f6d16c8f9ae739532736d53f99472854736daf766b69534963d98c0daceeab5178596e02829dd2df18e3dcfc8b58591747240cd15d573e6657a1ab2c910a1c5aeef6a14c0cdbdf15b57a7f6826b49b9051a606fba952ddd020b5d4caedd3ff1cba616e0b008f6cfe54ce167919d4911c51c77f63c352cb4c7fdc2", 0x84) [ 602.750137] loop5: rw=0, want=6434, limit=52 [ 602.787116] Buffer I/O error on dev loop5, logical block 3216, async page read [ 602.806455] FAULT_INJECTION: forcing a failure. [ 602.806455] name failslab, interval 1, probability 0, space 0, times 0 [ 602.817845] CPU: 0 PID: 29146 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 602.825850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.829378] attempt to access beyond end of device [ 602.835384] Call Trace: [ 602.835406] dump_stack+0x13e/0x194 [ 602.835424] should_fail.cold+0x10a/0x14b [ 602.835439] should_failslab+0xd6/0x130 [ 602.835448] kmem_cache_alloc+0x2b5/0x770 [ 602.835468] ? __mutex_unlock_slowpath+0x75/0x780 [ 602.866197] __kernfs_new_node+0x6f/0x470 [ 602.870706] kernfs_new_node+0x7b/0xe0 [ 602.874614] __kernfs_create_file+0x3d/0x319 [ 602.876868] ip6t_REJECT: ECHOREPLY is not supported. [ 602.879062] sysfs_add_file_mode_ns+0x1e1/0x450 [ 602.879079] internal_create_group+0x23b/0x7e0 [ 602.879097] sysfs_create_groups+0x92/0x130 [ 602.879110] device_add+0x1040/0x1400 [ 602.879124] ? device_private_init+0x180/0x180 [ 602.879138] netdev_register_kobject+0x180/0x390 [ 602.879152] register_netdevice+0x7ce/0xc70 [ 602.879164] ? netdev_change_features+0x80/0x80 [ 602.879179] __tun_chr_ioctl+0x20a3/0x33d0 [ 602.879192] ? tun_chr_close+0x60/0x60 [ 602.879212] ? tun_chr_compat_ioctl+0x30/0x30 [ 602.884555] loop2: rw=2049, want=6434, limit=52 [ 602.888974] do_vfs_ioctl+0x75a/0xfe0 [ 602.888988] ? selinux_file_mprotect+0x5c0/0x5c0 [ 602.889000] ? ioctl_preallocate+0x1a0/0x1a0 [ 602.889026] ? security_file_ioctl+0x76/0xb0 [ 602.889037] ? security_file_ioctl+0x83/0xb0 [ 602.960787] SyS_ioctl+0x7f/0xb0 [ 602.964279] ? do_vfs_ioctl+0xfe0/0xfe0 [ 602.971917] do_syscall_64+0x1d5/0x640 [ 602.975825] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 602.981024] RIP: 0033:0x45c889 20:53:29 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x1, @raw_data="d8a5743df33ab1fbadf3b363f0d8357193a06de0ee7c8cd3ee55edd5b93d71d55b7773154a2cfe3212979daacc13d5d4cdc43369051c52c80804ccb6b4acd0edd4f8c1d1157ce3f2dbbf2e8df27b1f3ff101971da0268b52fdf0feba12b17e170361ee5bd128e057035a1a52f9281001a8491b15652354ec8a0061da67464d91d61eda4c3ed93f8e9556dcb426588187050276259f68fe54dff303d18747a5c83ecc76bb46d744335e3871acaf510edfb0f2abe51188dc5c190c9749f6625eeb415c53e21f049ce5"}) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r1, r1, &(0x7f0000000480), 0xa198) r2 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'\x00', 0x7}) r3 = dup(r2) sendmsg$kcm(r3, &(0x7f0000001ec0)={&(0x7f00000002c0)=@rc={0x1f, @fixed={[], 0x11}, 0x4}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000340)="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", 0xfb}, {&(0x7f00000004c0)="18f8d87611f70b3dbfa247eeb76e1a2a1f157e9178efda28bf14440055b5721b479d2d636f5700b02c0fd682bb85b315d30a6e551ac814dc04b79b9dd076b2b739cfb295db0c41e4", 0x48}, {&(0x7f0000000540)="91df1e4cafb4c4c67d1ce39b37fcb45b46236355f7ecad4ed532d2a5551e6c1f5517be3a09e9c2066c2a409e4d585a84256c2f04d1caf802574006ca0962c5ad7693630fa01d1e5fd53c24ffdecff2938e54fcaf8602a9b6a9ce77b410473c9413460685f0fb2f971e7291f111bd6f95e8f3bf29cf7df162eb2f89a7f065c55ea58789eb984b47b1768ea0b77594baa662293bbe66ed2061e28f59aefa54e7d3cfffa4a65261e09b2d8695c4d9602bbe04e0bf240bb1f92468b1388d7b310eaaaca7a08acd79c221a867d2c1c8316d9ff963ff9d488e7a67f382", 0xda}, {&(0x7f0000000440)="22decbb8add7090486f5a9fdc052850ef7f5131af7b95b404fbc909a9c393ea9e7ecf3", 0x23}, {&(0x7f0000000980)="7471185cb05bc0f134ea949246e00bbaf2ecab450abef02ce5ccd3329175c697914e5fa73cdafbc2f354ace234d4b5bdb71044a5a036795ca90beec6fe7fc7b23bf239001449aecf1a3943b3aa93c5eaa806b2c21b72d713c47183a2f2b87556803b351867ad84f890d4ac0285e378ec2e854d406c2a", 0x76}, {&(0x7f0000000a00)="fc12d2b4789b", 0x6}, {&(0x7f0000000a40)="5ee39639f838fd510e0423b8fc851618b0ba5fe91ee29ca3244be738804899c482a4da456f", 0x25}, {&(0x7f0000000a80)="294b09d4b59d3ea3f69cc1ba42ae7b12effea5caae08a60d7e6bd38669ec8ca2ac4a2065df68df80d3ca200ddcf21eefe86587f22e432480a2f3828fabd67839c9943036cc64fc2b400ffa4f65a3d376b351ddb5d0de7b34f8f91b8271165407f60cfd80eb7ebe8c6af1d3c253cb2ef48ddb80fe4f26e512022a", 0x7a}, {&(0x7f0000000b00)="cb55a5e11833e72b39b2d9ec8c0aab32fb7220638365f05969d28b1ab2fbbbff8e39adc38a64cff5796974c2ec95f056efb3e6631d448ab1119a5dca783f3756734bc025dfe8161bcb4d6ce884ee997f294eae41cb589ca1b3f5184753ac976abd525f5796f821a89ff3091d613bd640c2426016bc7bb71b0c2633360f909c0d1dc16c95b8da3b3530cf9c6d384ea9bd24472cb6be5f50db3a8e39d28dbb334c34c0398285e7988ad7d824fee0", 0xad}], 0x9, &(0x7f0000000c80)=[{0x1010, 0x111, 0x6, "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"}, {0xd8, 0x101, 0x3, "803b68f5b2f2fcc3c04149c65d3d6c99643a00cd1fc04e18e2a4ef6ce1aa38c9ec2f7ed021bae60d2866c4a8c6ed890173bf7788635d35e2cbf70ae979544ffbec4eed5c5f60c931165bf329143d94fd19d3e75ee1dee53c2a76cdd9d7affa0b33dd1948c2d8793833385c5e778c7ceec23446af1ddc2298a7385348e2f57105c0a81f716fff5c1a178cfa08a11f6bfbf32901e79543a7397f32a32cc2e0c5f255c0ba2ef4951100deb9a41522d8792e36f4e42a56371e0280dfb47b848ab09298dade3e22ac"}, {0x58, 0x6, 0x4, "72e6c1754d6c52b7cfad2c7b216ee061b1069cbb0f488c10d1bac9134f8cdd33cb5602f43a86e656c92f2c52ea6ad4a7f87b4e22b1119166d89982606bb6206c4908"}, {0x10, 0x29, 0x50000}, {0xe0, 0x29, 0x5, "a431866c3087eae7225631d17c5d69cb4852b2ca964055156dc65e8560b995766a2a7b63671080c7ce69ed4db65a24adf7c866a274c2c5aee953de8046ef3a1c1d01397c20e56a2f4f3aec3897d1fac1f917d708522a28cfbbf35d8eca66dfffb5e44e7ab8d797bb0bd0dd0f86bcfef222913ea595663d0dd0cd3c5cf7604119b6111a0429e24313923509449cb642eae4622e554a8bb11c5dacaf5003514a3ffac48adcb783c522e633b750ef2e7b1e473e6fcc5eeeff17bb34acb090108ea07936774ff153eca511bcb29dd67b"}], 0x1230}, 0x10) [ 602.984217] RSP: 002b:00007f7283bdec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.991934] RAX: ffffffffffffffda RBX: 00007f7283bdf6d4 RCX: 000000000045c889 [ 602.999295] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 603.006570] RBP: 000000000076c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 603.013844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 603.021123] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000038 20:53:29 executing program 2 (fault-call:3 fault-nth:0): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:53:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:29 executing program 0 (fault-call:12 fault-nth:57): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 603.077242] audit: type=1800 audit(1586897609.305:14535): pid=29150 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16417 res=0 [ 603.100681] minix_free_inode: bit 1 already cleared [ 603.109529] minix_free_inode: bit 1 already cleared [ 603.232410] audit: type=1800 audit(1586897609.465:14536): pid=29166 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16077 res=0 [ 603.268393] FAULT_INJECTION: forcing a failure. [ 603.268393] name failslab, interval 1, probability 0, space 0, times 0 [ 603.279798] CPU: 0 PID: 29172 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 603.287462] FAULT_INJECTION: forcing a failure. [ 603.287462] name fail_futex, interval 1, probability 0, space 0, times 0 [ 603.287688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.306940] ip6t_REJECT: ECHOREPLY is not supported. [ 603.308416] Call Trace: [ 603.308435] dump_stack+0x13e/0x194 [ 603.308449] should_fail.cold+0x10a/0x14b [ 603.308462] should_failslab+0xd6/0x130 [ 603.327869] kmem_cache_alloc+0x2b5/0x770 [ 603.332026] ? __mutex_unlock_slowpath+0x75/0x780 [ 603.336884] __kernfs_new_node+0x6f/0x470 [ 603.341048] kernfs_new_node+0x7b/0xe0 [ 603.344936] __kernfs_create_file+0x3d/0x319 [ 603.349348] sysfs_add_file_mode_ns+0x1e1/0x450 [ 603.354053] internal_create_group+0x23b/0x7e0 [ 603.358655] sysfs_create_groups+0x92/0x130 [ 603.362987] device_add+0x1040/0x1400 [ 603.366802] ? device_private_init+0x180/0x180 [ 603.371399] netdev_register_kobject+0x180/0x390 [ 603.376159] register_netdevice+0x7ce/0xc70 [ 603.380487] ? netdev_change_features+0x80/0x80 [ 603.385165] __tun_chr_ioctl+0x20a3/0x33d0 [ 603.389400] ? tun_chr_close+0x60/0x60 [ 603.393295] ? tun_chr_compat_ioctl+0x30/0x30 [ 603.397784] do_vfs_ioctl+0x75a/0xfe0 [ 603.401576] ? selinux_file_mprotect+0x5c0/0x5c0 [ 603.406328] ? ioctl_preallocate+0x1a0/0x1a0 [ 603.411092] ? security_file_ioctl+0x76/0xb0 [ 603.415501] ? security_file_ioctl+0x83/0xb0 [ 603.419905] SyS_ioctl+0x7f/0xb0 [ 603.423310] ? do_vfs_ioctl+0xfe0/0xfe0 [ 603.427294] do_syscall_64+0x1d5/0x640 [ 603.431198] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 603.436391] RIP: 0033:0x45c889 [ 603.439576] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.447283] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 603.454542] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 603.461800] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 603.469058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 603.476326] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000039 [ 603.483613] CPU: 1 PID: 29171 Comm: syz-executor.2 Not tainted 4.14.176-syzkaller #0 [ 603.491598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.500957] Call Trace: [ 603.503558] dump_stack+0x13e/0x194 [ 603.507195] should_fail.cold+0x10a/0x14b [ 603.511347] get_futex_key+0x809/0x1160 [ 603.515326] ? __lock_acquire+0x5f7/0x4620 [ 603.519559] ? futex_lock_pi_atomic+0x220/0x220 [ 603.524226] ? memset+0x20/0x40 [ 603.527511] futex_wait_requeue_pi.constprop.0+0x405/0x8d0 [ 603.533136] ? futex_requeue+0x14b0/0x14b0 [ 603.537371] ? trace_hardirqs_on+0x10/0x10 [ 603.541614] ? save_trace+0x290/0x290 [ 603.545415] ? lock_downgrade+0x6e0/0x6e0 [ 603.549579] ? _parse_integer+0xe5/0x130 [ 603.553652] ? kstrtouint+0xe6/0x130 [ 603.557380] ? check_preemption_disabled+0x35/0x240 [ 603.562410] do_futex+0x1db/0x1850 [ 603.565954] ? get_pid_task+0xb8/0x130 [ 603.569839] ? proc_fail_nth_write+0x7b/0x180 [ 603.574362] ? save_trace+0x290/0x290 [ 603.578171] ? __lock_is_held+0xad/0x140 [ 603.582241] ? futex_exit_release+0x60/0x60 [ 603.586574] ? find_held_lock+0x2d/0x110 [ 603.590639] ? SyS_write+0x1b7/0x210 [ 603.594368] ? find_held_lock+0x2d/0x110 [ 603.598437] ? lock_downgrade+0x6e0/0x6e0 [ 603.602592] ? __mutex_unlock_slowpath+0x75/0x780 [ 603.607446] SyS_futex+0x1e8/0x2c0 [ 603.610988] ? fput+0xb/0x140 [ 603.614097] ? do_futex+0x1850/0x1850 [ 603.617926] ? SyS_read+0x210/0x210 [ 603.621553] ? SyS_clock_settime+0x1a0/0x1a0 [ 603.625963] ? do_syscall_64+0x4c/0x640 [ 603.629935] ? do_futex+0x1850/0x1850 [ 603.633736] do_syscall_64+0x1d5/0x640 [ 603.637631] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 603.642902] RIP: 0033:0x45c889 [ 603.646087] RSP: 002b:00007f3fa9776c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 603.653795] RAX: ffffffffffffffda RBX: 00007f3fa97776d4 RCX: 000000000045c889 [ 603.661066] RDX: 0000000000000001 RSI: 000000000000008b RDI: 000000002000cffc [ 603.668336] RBP: 000000000076bf00 R08: 0000000020048000 R09: 0000000000000000 [ 603.675607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 603.682965] R13: 00000000000000ea R14: 00000000004c3758 R15: 0000000000000000 20:53:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:30 executing program 2 (fault-call:3 fault-nth:1): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:53:30 executing program 0 (fault-call:12 fault-nth:58): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 603.859134] FAULT_INJECTION: forcing a failure. [ 603.859134] name fail_futex, interval 1, probability 0, space 0, times 0 [ 603.909477] CPU: 0 PID: 29185 Comm: syz-executor.2 Not tainted 4.14.176-syzkaller #0 [ 603.917406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.926767] Call Trace: [ 603.929364] dump_stack+0x13e/0x194 [ 603.933011] should_fail.cold+0x10a/0x14b [ 603.937280] get_futex_key+0x809/0x1160 [ 603.941267] ? futex_lock_pi_atomic+0x220/0x220 [ 603.945936] ? should_fail+0x354/0x41c [ 603.949837] futex_wait_setup+0xae/0x2c0 [ 603.953910] ? __lock_acquire+0x5f7/0x4620 [ 603.958156] ? futex_cleanup+0xb10/0xb10 [ 603.962231] ? memset+0x20/0x40 [ 603.965679] futex_wait_requeue_pi.constprop.0+0x45c/0x8d0 [ 603.971447] ? futex_requeue+0x14b0/0x14b0 [ 603.975694] ? trace_hardirqs_on+0x10/0x10 [ 603.979950] ? save_trace+0x290/0x290 [ 603.983900] ? lock_downgrade+0x6e0/0x6e0 [ 603.988058] ? _parse_integer+0xe5/0x130 [ 603.992124] ? kstrtouint+0xe6/0x130 [ 603.995837] ? check_preemption_disabled+0x35/0x240 [ 604.000870] do_futex+0x1db/0x1850 [ 604.004488] ? get_pid_task+0xb8/0x130 [ 604.008497] ? proc_fail_nth_write+0x7b/0x180 [ 604.012999] ? save_trace+0x290/0x290 [ 604.016926] ? __lock_is_held+0xad/0x140 [ 604.020987] ? futex_exit_release+0x60/0x60 [ 604.025319] ? find_held_lock+0x2d/0x110 [ 604.029394] ? SyS_write+0x1b7/0x210 [ 604.033128] ? find_held_lock+0x2d/0x110 [ 604.037202] ? lock_downgrade+0x6e0/0x6e0 [ 604.041631] ? __mutex_unlock_slowpath+0x75/0x780 [ 604.046493] SyS_futex+0x1e8/0x2c0 [ 604.050048] ? fput+0xb/0x140 [ 604.053166] ? do_futex+0x1850/0x1850 [ 604.056972] ? SyS_read+0x210/0x210 [ 604.060605] ? SyS_clock_settime+0x1a0/0x1a0 [ 604.063891] FAULT_INJECTION: forcing a failure. [ 604.063891] name failslab, interval 1, probability 0, space 0, times 0 [ 604.065287] ? do_syscall_64+0x4c/0x640 [ 604.080623] ? do_futex+0x1850/0x1850 [ 604.084412] do_syscall_64+0x1d5/0x640 [ 604.088292] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 604.093478] RIP: 0033:0x45c889 [ 604.096652] RSP: 002b:00007f3fa9776c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 604.104345] RAX: ffffffffffffffda RBX: 00007f3fa97776d4 RCX: 000000000045c889 [ 604.111609] RDX: 0000000000000001 RSI: 000000000000008b RDI: 000000002000cffc [ 604.118863] RBP: 000000000076bf00 R08: 0000000020048000 R09: 0000000000000000 [ 604.126117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 604.133375] R13: 00000000000000ea R14: 00000000004c3758 R15: 0000000000000001 [ 604.140656] CPU: 1 PID: 29203 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 604.148565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 604.157930] Call Trace: [ 604.160535] dump_stack+0x13e/0x194 [ 604.164169] should_fail.cold+0x10a/0x14b [ 604.168329] should_failslab+0xd6/0x130 [ 604.172416] kmem_cache_alloc+0x2b5/0x770 [ 604.176575] ? __mutex_unlock_slowpath+0x75/0x780 [ 604.181432] __kernfs_new_node+0x6f/0x470 [ 604.185708] kernfs_new_node+0x7b/0xe0 [ 604.189602] __kernfs_create_file+0x3d/0x319 [ 604.194021] sysfs_add_file_mode_ns+0x1e1/0x450 [ 604.198802] internal_create_group+0x23b/0x7e0 [ 604.203397] sysfs_create_groups+0x92/0x130 [ 604.207726] device_add+0x1040/0x1400 [ 604.211543] ? device_private_init+0x180/0x180 [ 604.216137] netdev_register_kobject+0x180/0x390 [ 604.220904] register_netdevice+0x7ce/0xc70 [ 604.225243] ? netdev_change_features+0x80/0x80 [ 604.229947] __tun_chr_ioctl+0x20a3/0x33d0 [ 604.234216] ? tun_chr_close+0x60/0x60 [ 604.238119] ? tun_chr_compat_ioctl+0x30/0x30 [ 604.242625] do_vfs_ioctl+0x75a/0xfe0 20:53:30 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x1cf) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x3) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10}, 0x10) r2 = openat(r0, &(0x7f00000001c0)='.\x00', 0x300, 0x103) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000240)={0x2, 0x4, [{0xe3, 0x0, 0x40}, {0x7f, 0x0, 0x4}]}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200)={0x88}, 0x4) r3 = open(&(0x7f0000000280)='./file0\x00', 0x113000, 0x34) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x2, 0x0, "04f87e26abb67972949b889afb3ecd2b51954e0058be9d65e71ef5d145c93107d3051f606db180fdc5c66f52971f8cf4531346584af818bf63a6847d4b7e41374fa72f47b7988d8658bdfd0649ebca96"}, 0xd8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:53:30 executing program 2 (fault-call:3 fault-nth:2): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:53:30 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) pause() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 604.243496] audit: type=1800 audit(1586897610.376:14537): pid=29211 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16369 res=0 [ 604.246433] ? selinux_file_mprotect+0x5c0/0x5c0 [ 604.246447] ? ioctl_preallocate+0x1a0/0x1a0 [ 604.246468] ? security_file_ioctl+0x76/0xb0 [ 604.246476] ? security_file_ioctl+0x83/0xb0 [ 604.246486] SyS_ioctl+0x7f/0xb0 [ 604.246495] ? do_vfs_ioctl+0xfe0/0xfe0 [ 604.246508] do_syscall_64+0x1d5/0x640 [ 604.246522] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 604.246532] RIP: 0033:0x45c889 [ 604.304395] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.312115] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 604.319397] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 604.326670] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 604.333948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 604.341249] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000003a 20:53:30 executing program 0 (fault-call:12 fault-nth:59): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:30 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x3, 0x60040) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000200)={0x4, 0x4, 0x3, 0x8, 'syz1\x00', 0x3}) r2 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) write(r2, &(0x7f0000000240)="5fee938a4d8f12250fc63ba57b157f85b2c07705bace26ad183f73c248c72a01aabe2ad5a400ffa94b8fa074548bfbfa48c1a4aa32e5913ba28fb1efb72c941696f0b86f0c36d02bfda96380cb1031b1cd8f2ffc36b114509e5da393325a435e102b90ed7a535f6bbf388be0a409740a36ffa6e240a729f694c32545079aacafb9c5545f19ac645845b1e49544e064e6a88a8efd391029ac9a45b4034973b4b06cc5b09566bfe23b2f91fd1e13d2f93f7002ead23ae1952343301f97fe68c0e7efc1bd18708dacf9f78d460f3a6ea34339dda1c57ca98df633", 0xd9) sendfile(r0, r0, &(0x7f0000000480), 0xa198) [ 604.364272] audit: type=1800 audit(1586897610.596:14538): pid=29218 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16369 res=0 20:53:30 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000000)={0x3c, 0x5535, 0x6}) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x70, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r6, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={r7, 0x64}, &(0x7f00000001c0)=0x8) tkill(r0, 0x1000000000015) [ 604.438994] audit: type=1800 audit(1586897610.666:14539): pid=29225 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16030 res=0 [ 604.484854] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 604.513644] attempt to access beyond end of device [ 604.541240] loop5: rw=2049, want=6434, limit=52 [ 604.578091] FAULT_INJECTION: forcing a failure. [ 604.578091] name failslab, interval 1, probability 0, space 0, times 0 [ 604.581481] buffer_io_error: 1 callbacks suppressed [ 604.581656] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 604.589639] CPU: 1 PID: 29224 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 604.610251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 604.619835] Call Trace: [ 604.622453] dump_stack+0x13e/0x194 [ 604.626079] should_fail.cold+0x10a/0x14b [ 604.630315] should_failslab+0xd6/0x130 [ 604.634311] kmem_cache_alloc+0x2b5/0x770 [ 604.638479] ? __mutex_unlock_slowpath+0x75/0x780 [ 604.643322] __kernfs_new_node+0x6f/0x470 [ 604.647595] kernfs_new_node+0x7b/0xe0 [ 604.651590] __kernfs_create_file+0x3d/0x319 [ 604.656005] sysfs_add_file_mode_ns+0x1e1/0x450 [ 604.660674] internal_create_group+0x23b/0x7e0 [ 604.665255] sysfs_create_groups+0x92/0x130 [ 604.669573] device_add+0x1040/0x1400 [ 604.673377] ? device_private_init+0x180/0x180 [ 604.677960] ? netdev_register_kobject+0x178/0x390 [ 604.682881] netdev_register_kobject+0x180/0x390 [ 604.687715] register_netdevice+0x7ce/0xc70 [ 604.692045] ? netdev_change_features+0x80/0x80 [ 604.696732] __tun_chr_ioctl+0x20a3/0x33d0 [ 604.700986] ? tun_chr_close+0x60/0x60 [ 604.704889] ? tun_chr_compat_ioctl+0x30/0x30 [ 604.705764] attempt to access beyond end of device [ 604.709395] do_vfs_ioctl+0x75a/0xfe0 [ 604.709410] ? selinux_file_mprotect+0x5c0/0x5c0 [ 604.709422] ? ioctl_preallocate+0x1a0/0x1a0 [ 604.709443] ? security_file_ioctl+0x76/0xb0 [ 604.709453] ? security_file_ioctl+0x83/0xb0 [ 604.709463] SyS_ioctl+0x7f/0xb0 [ 604.709470] ? do_vfs_ioctl+0xfe0/0xfe0 [ 604.709482] do_syscall_64+0x1d5/0x640 [ 604.709498] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 604.718881] loop5: rw=0, want=6434, limit=52 [ 604.723039] RIP: 0033:0x45c889 [ 604.723045] RSP: 002b:00007f7283c41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.723054] RAX: ffffffffffffffda RBX: 00007f7283c426d4 RCX: 000000000045c889 [ 604.723060] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 604.723065] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 604.723069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 604.723074] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000003b 20:53:31 executing program 0 (fault-call:12 fault-nth:60): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 604.824534] Buffer I/O error on dev loop5, logical block 3216, async page read [ 604.837856] attempt to access beyond end of device [ 604.852362] ip6t_REJECT: ECHOREPLY is not supported. [ 604.855848] loop5: rw=0, want=6434, limit=52 20:53:31 executing program 5: r0 = open(&(0x7f0000000300)='./bus\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x44ec1, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r1, &(0x7f0000000480), 0xa198) r2 = userfaultfd(0x800) r3 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="66696c7465720000000000000000dae7000000000000000000000000000000005000000004000000c003000000000000d0000000f8010000d0000000f8010000f0020000f0020000f0020000f0020000f0020000040000000000000000000000ff010000000000000000000000000001000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000626f6e645f736c6176655f300000000073797a6b616c6c6572310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000500000000000000fe800000000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000064756d6d79300000000000000000000076657468305f746f5f626f6e6400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001280100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000000000000000000000000000000000000028006970763668656164657200000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c3000000000000000000069705f767469300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f800000000000000000000000000000000000000000000000000280069636d7036000000000000000000000000000000000000000000000000000018830000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00"/1056], 0x473) sendfile(r2, r3, &(0x7f00000001c0)=0x6, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000240)=0x4) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) 20:53:31 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ptrace$setregset(0x4205, r1, 0x3, &(0x7f00000000c0)={&(0x7f0000000000)="48a461cbb2e0405d26dca5ba791d680e16c9b3c06d59f3e3afd60a3b1ca73f37b9bd20f6807af0ebf364ff132caf4f32b2a78782cf98be6ac15e0a208b041a923c14212f1295199cb982d39d57733bb10d69b339d260a856306b3ad009c137e37a8247bc357ee10805b36cea00f9ede3be29f334", 0x74}) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x2) [ 604.954012] minix_free_inode: bit 1 already cleared 20:53:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 605.031276] FAULT_INJECTION: forcing a failure. [ 605.031276] name failslab, interval 1, probability 0, space 0, times 0 [ 605.042918] CPU: 0 PID: 29267 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 605.050975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 605.050981] Call Trace: [ 605.050999] dump_stack+0x13e/0x194 [ 605.051018] should_fail.cold+0x10a/0x14b [ 605.051032] should_failslab+0xd6/0x130 [ 605.051044] kmem_cache_alloc+0x2b5/0x770 [ 605.051056] ? __mutex_unlock_slowpath+0x75/0x780 [ 605.084698] __kernfs_new_node+0x6f/0x470 [ 605.089068] kernfs_new_node+0x7b/0xe0 [ 605.092964] __kernfs_create_file+0x3d/0x319 [ 605.097389] sysfs_add_file_mode_ns+0x1e1/0x450 [ 605.102052] internal_create_group+0x23b/0x7e0 [ 605.106642] sysfs_create_groups+0x92/0x130 [ 605.110974] device_add+0x1040/0x1400 [ 605.114887] ? device_private_init+0x180/0x180 [ 605.119646] netdev_register_kobject+0x180/0x390 [ 605.124403] register_netdevice+0x7ce/0xc70 [ 605.128710] ? netdev_change_features+0x80/0x80 [ 605.133380] __tun_chr_ioctl+0x20a3/0x33d0 [ 605.137611] ? tun_chr_close+0x60/0x60 [ 605.141503] ? tun_chr_compat_ioctl+0x30/0x30 [ 605.146008] do_vfs_ioctl+0x75a/0xfe0 [ 605.149986] ? selinux_file_mprotect+0x5c0/0x5c0 [ 605.154735] ? ioctl_preallocate+0x1a0/0x1a0 [ 605.159147] ? security_file_ioctl+0x76/0xb0 [ 605.164506] ? security_file_ioctl+0x83/0xb0 [ 605.169036] SyS_ioctl+0x7f/0xb0 [ 605.172396] ? do_vfs_ioctl+0xfe0/0xfe0 [ 605.176361] do_syscall_64+0x1d5/0x640 [ 605.180250] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 605.185433] RIP: 0033:0x45c889 [ 605.188610] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.196346] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 605.203712] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 605.211512] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 605.218784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 605.226100] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000003c 20:53:31 executing program 2: gettid() r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42000, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000380)={[0x4000, 0x1, 0x1, 0x5000], 0x56, 0xd, 0x7f}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = getpid() r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x2) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74000000010201020000000000000000000000054000018006000340000100000600034000032ecee37b92ea93b0f158c7657730d96000002c00018014000300000000000000000000000000000000fcff210400ff0100000000000000000000000000010800056e14000004080009400000094000000fd5080005400000000800000000"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x240408c0) tkill(r1, 0x1000000000015) 20:53:31 executing program 0 (fault-call:12 fault-nth:61): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:31 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x100000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x60088, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', '#vmnet0wlan0\xd1!wlan1keyring{vboxnet0&em1wlan1^\x00'}, &(0x7f0000000240)=""/223, 0xdf) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x70, &(0x7f000059aff8)={r2}, &(0x7f000034f000)=0x2059b000) r3 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000005000000004000000c003000000000000d0000000f8010000d0000000f8010000f085de7f66286ca6308552020000f0020000f0020000f0020000f0020000040000000000000000000000ff010000000000000000000000000001000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000626f6e645f736c6176655f300000000073797a6b616c6c6572310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000500000000000000fe800000000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000064756d6d79300000000000000000000076657468305f746f5f626f6e6400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001280100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000000000000000000000000000000000000028006970763668656164657200000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c3000000000000000000069705f767469300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f800000000000000000000000000000000000000000000000000280069636d7036000000000000000000000000000000000000000000000000000018830000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x473) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x70, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=r7, &(0x7f0000000380)=0x4) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={r2, 0x6, 0x7, 0x4, 0x101, 0x2, 0xffc1, 0x1, {r8, @in={{0x2, 0x4e24, @broadcast}}, 0xfffffffe, 0x5, 0x200, 0x9, 0x58}}, &(0x7f0000000480)=0xb0) [ 605.312597] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 605.325124] minix_free_inode: bit 1 already cleared [ 605.378770] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 605.412857] minix_free_inode: bit 1 already cleared 20:53:31 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x480240, 0x134) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 605.490317] FAULT_INJECTION: forcing a failure. [ 605.490317] name failslab, interval 1, probability 0, space 0, times 0 [ 605.501774] CPU: 1 PID: 29306 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 605.509806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 605.519407] Call Trace: [ 605.522005] dump_stack+0x13e/0x194 [ 605.525759] should_fail.cold+0x10a/0x14b [ 605.529916] should_failslab+0xd6/0x130 [ 605.534017] kmem_cache_alloc+0x2b5/0x770 [ 605.538176] ? __mutex_unlock_slowpath+0x75/0x780 [ 605.543148] __kernfs_new_node+0x6f/0x470 [ 605.547834] kernfs_new_node+0x7b/0xe0 [ 605.552217] __kernfs_create_file+0x3d/0x319 [ 605.556721] sysfs_add_file_mode_ns+0x1e1/0x450 [ 605.561539] internal_create_group+0x23b/0x7e0 [ 605.566238] sysfs_create_groups+0x92/0x130 [ 605.570606] device_add+0x1040/0x1400 [ 605.574400] ? device_private_init+0x180/0x180 [ 605.578985] netdev_register_kobject+0x180/0x390 [ 605.583813] register_netdevice+0x7ce/0xc70 [ 605.588629] ? netdev_change_features+0x80/0x80 [ 605.593436] __tun_chr_ioctl+0x20a3/0x33d0 [ 605.597678] ? tun_chr_close+0x60/0x60 [ 605.601577] ? tun_chr_compat_ioctl+0x30/0x30 [ 605.606077] do_vfs_ioctl+0x75a/0xfe0 [ 605.609904] ? selinux_file_mprotect+0x5c0/0x5c0 [ 605.614760] ? ioctl_preallocate+0x1a0/0x1a0 [ 605.619288] ? security_file_ioctl+0x76/0xb0 [ 605.623893] ? security_file_ioctl+0x83/0xb0 [ 605.628576] SyS_ioctl+0x7f/0xb0 [ 605.631979] ? do_vfs_ioctl+0xfe0/0xfe0 [ 605.636050] do_syscall_64+0x1d5/0x640 [ 605.639929] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 605.645123] RIP: 0033:0x45c889 [ 605.648323] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.656299] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 605.663570] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 605.670922] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 605.678185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 20:53:31 executing program 5: lookup_dcookie(0x5, &(0x7f00000001c0)=""/17, 0x11) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) [ 605.685442] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000003d 20:53:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:32 executing program 0 (fault-call:12 fault-nth:62): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:32 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8004500b, &(0x7f00000001c0)=0x6) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x7f, 0x49, 0x14, 0x0, 0x0, 0x2, 0x1020, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfe92, 0x4, @perf_bp, 0x10082, 0x3, 0x7, 0x0, 0x401, 0x7290}, r3, 0xa, r4, 0x10) tkill(r0, 0x1000000000015) 20:53:32 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0x204800, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000200)=0x1) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 605.889859] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 605.926205] attempt to access beyond end of device 20:53:32 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x473) fdatasync(r1) [ 605.938148] loop5: rw=2049, want=6434, limit=52 [ 605.943810] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 605.958451] attempt to access beyond end of device [ 605.964813] loop5: rw=0, want=6434, limit=52 [ 605.969867] Buffer I/O error on dev loop5, logical block 3216, async page read [ 605.981201] FAULT_INJECTION: forcing a failure. 20:53:32 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x800}, {&(0x7f0000000640)="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", 0x309, 0x34f6}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={@ipv4, 0x0, r6}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, 0xfffffffffffffffe) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@ipv4={[], [], @private=0xa010100}, 0x4e21, 0xe8, 0x4e20, 0x800, 0x2, 0x20, 0x20, 0x3a, r6, r8}, {0x4, 0x8000, 0x705, 0x0, 0x9, 0xffffffffffffff31, 0x100, 0x4}, {0xba, 0x10000, 0x1, 0x81}, 0x8, 0x6e6bb0, 0x2, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x4d6, 0x2b}, 0xa, @in=@remote, 0x0, 0x4, 0x1, 0x5, 0x78000000, 0x66, 0x80000001}}, 0xe8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) fcntl$notify(0xffffffffffffffff, 0x402, 0x1a) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r1, r1, &(0x7f0000000480), 0xa198) [ 605.981201] name failslab, interval 1, probability 0, space 0, times 0 [ 605.992650] CPU: 0 PID: 29341 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 606.000546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.009903] Call Trace: [ 606.012503] dump_stack+0x13e/0x194 [ 606.016143] should_fail.cold+0x10a/0x14b [ 606.020313] should_failslab+0xd6/0x130 [ 606.024297] kmem_cache_alloc+0x2b5/0x770 [ 606.028891] ? __mutex_unlock_slowpath+0x75/0x780 [ 606.033776] __kernfs_new_node+0x6f/0x470 [ 606.037958] kernfs_new_node+0x7b/0xe0 [ 606.042030] __kernfs_create_file+0x3d/0x319 [ 606.046537] sysfs_add_file_mode_ns+0x1e1/0x450 [ 606.051747] internal_create_group+0x23b/0x7e0 [ 606.056345] sysfs_create_groups+0x92/0x130 [ 606.060709] device_add+0x1040/0x1400 [ 606.064870] ? device_private_init+0x180/0x180 [ 606.069471] netdev_register_kobject+0x180/0x390 [ 606.074256] register_netdevice+0x7ce/0xc70 [ 606.078602] ? netdev_change_features+0x80/0x80 [ 606.083284] __tun_chr_ioctl+0x20a3/0x33d0 [ 606.087620] ? tun_chr_close+0x60/0x60 [ 606.091608] ? tun_chr_compat_ioctl+0x30/0x30 [ 606.096133] do_vfs_ioctl+0x75a/0xfe0 [ 606.099945] ? selinux_file_mprotect+0x5c0/0x5c0 [ 606.104997] ? ioctl_preallocate+0x1a0/0x1a0 [ 606.109514] ? security_file_ioctl+0x76/0xb0 [ 606.114280] ? security_file_ioctl+0x83/0xb0 [ 606.118697] SyS_ioctl+0x7f/0xb0 [ 606.122059] ? do_vfs_ioctl+0xfe0/0xfe0 [ 606.126051] do_syscall_64+0x1d5/0x640 [ 606.129933] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 606.145107] RIP: 0033:0x45c889 [ 606.148287] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.156513] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 606.163779] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 606.171106] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 606.178380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 20:53:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 606.186434] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000003e [ 606.211426] minix_free_inode: bit 1 already cleared 20:53:32 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44084}, 0x60854) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), 0x4) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x1d7560b0, 0x4, 0x7fffffff, 0xfff, 0xffffffff, 0xffffffff, 0x7, 0x200, 0x2}) tkill(r0, 0x1000000000015) 20:53:32 executing program 0 (fault-call:12 fault-nth:63): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:32 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f00000001c0)=""/153, &(0x7f0000000280)=0x99) [ 606.348038] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. 20:53:32 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0x4, 0x4, &(0x7f0000000300)=[{&(0x7f0000000980)="34a1853818e3ef409becd6dcc19e39751f896ed22a73e413eec95d257d8512d0a3d3a48d6807e16e2e84579053e28a823a08a32aa65f30795de0c0595d40bff430f6c442beea75ec390ac0e3b5edbb8234c6cab0a46480109d27aaa0d9393ed00cf9cc0fda7ecac5e1e8dd2fafce41a96cd11d502085b51fe465f29849dd61c3a0b2a42602490b54cff12be7577ecdc46a302db3cdd426365c8d267ee4123d75277d809c2386f2a1fffd4c09321f7affd6c2052bdaadf76440ac7163ba482914eb307e9566539b2bdbacb7252c7808d20874d69e25eeec94c457097fe6af81ccbde0ce3cf28cf3b0f1f9d1ec56baaf3f210f9b1386d91a1c36542b2e3ee88016052c69190d5e973aff498ed5bf3d2b9916d094ed6e91a75b3577eeb6bc79a9ff85ae00f1e05e358bb53468d044cf5665e3fd6693fc1900e54fef979063c3d052da0e2caccca6ee1df2b151a2dcaa69787bde663c08980b962bfbdddc2ea1c3ea9f66736e662e1c53bd75129698654983cd0851c8fcd07c8c6ad129c1922863cf9416013627299b20acb42ef61e57f01be0d8b17bd8e33e20089638298ae08163c09346b9afeee66a2e6976f482be04b5e6bccdaa5507947aa2f6eea48f0b5fe34c6cbeb893b092c330066ad06178aa4ddb00810f4d3d9728cbe4ba2d6a64620ab8f69bb71e92773b6fd9fc1d3fc6e9cba16e12d4474cac784c67c8efe1e22ec6843ecc884d2480cfbdbf449e27ba3a392046b9800a4b2342bd658df94f05d43ddc1a729a15e023d6cb685864733085913ab6d3d80a9c424ff7b836a6059e6627adf9664bcd5d8a9a766747801b5b99056cf9bde83a48ca7a6b2cf0ca453be19e1a00177e20f7d8a78201d79e7b6717e3730e389de24b410a1c1b9a901baa35ec567296b9d0de3eaa10c1627ca41daa9ed73741a89557a2f9016c0e8c37dd4c2011a41b70664dcf772bc979ee164563b6298b43eb1e30fe8492d909502dc08f10afb2cca8291fcc75637f269d72d1b4ccb469bdde3d49d07729229fb4adc23c4b00802784585892661af6cc12ac3729cd3be5a9698c44c9d3c89558e12f7d3c1048220a355a3aeeac769870fa0f5ce10588896aa6354489c17b2e23ffe751ce266a9fdc1fd4a677feef748aba7257d8dcb1b2b998880275e82dd4e73e13f5fd427208f3c565fe4c3349c8a48d61b4de8736480cec25e879c0efa29585689c719e31d612cb46d182c9c3fa01b00871d5f76faeee8510c7530e1e70b8941824669c9274ff19fc17d6f73f85ebdf60711019eabd0593d3d1c48d99a852c540747085ac03e40d4f847495ab530eeb36a156c7ff78e1230872e3fa7308a6a790da2f021c9dfaaa193a83bcfaa46fa2b577435c19007ac878a5ac37478d41b8c5d6a048e3b69fe407d9697c2c5719bd0b9ede1c24b1fb006796799afd531f56f32d9be960829f595773aff83d3f8ada9f343322cd16cc5f3ceeb490a2653d00056f402e724641fd57c808b9c7e5fe8577919faa27ebae2a5d6bce42e3a9a2f41fd46190d24d6ad82a003de4c22af12704fdc09eb084dc3b111277999a11b8866f907a62c603d15a10a5b736803441bd3fa3d592e5ea571d176a133f2f51f350b5dcaeb212e2480466349e1e7676d52bc49eb5a053654c0ab53e67cdaf762cf07dc698bd125008d3f05e6c3bf5e0286d21d979dd7e6aec1e551afee0c19b1e5427183f70c816f7021be01966fc4aa7210fa7bda310543bdcf55b45a0d894358b4deb649aceb0ba4ba7b74fbcf8aa09e6d66f747780245f353baad36be83ae3509b58beefc13f21614d370ea5647741369b56e4c575a46dbd8956f842d1468fb79a2e45e2d499bef67f09641810c802afd1ba3bf5982f257f46273f31dc679aac47b3dd9f2a4e6f0782efd2e838afbc4e2c48a29d767cb6f61df4d4067a1a0b21a4400e09c1bbba377500beee320b0bc7e3519503ec30aa069e99663365a333280f0ec94032c20a2bc38e6902b4ba0b65a78eb96064cc7ad106db1ccbf25db4e921c2e128a9472ab2080172b09653038da55c4ecf061f3d2dbb6a1f5bdd8b66900a9277abb4903533efd8e3c2dac34c26c5fc0faf1eb69b07c96eee37d7b4dfc04576444f17106e37f3cb528425c37495fc5d044e57d4438d1d6c44e9654b704a5b46f5207b6431afb9b03f7ebef7251af1f21fbe67a26329d4313181ad0a1fd110cb5900626f4e87f80d12f2e740e9452fde8b5fe24f62379b2b41aca55281c78571031eab37132c59b0a46b88f524a54a26cf0150254ed79efc8acf3b5806af7cc832021f15d50d6acdec114504f5ab56d763db1f8e1af7262a9061536f0c1137238008492d2e01cfa7522e196328aabaaeb8f02be0ec679792d14dac57ae2a3a091e8cadcfa5a5d143c0dff6e484b8e6e26192ac85833cc4809a0cc14fda731d20bf14d3d8794dd273a19f901f49a634e0255c960bad4d9e03181213cd13020274ae229167ba023b688d65adace0a45efb1797b5641a23765b9901fb51b4f25c951b179f60a834ec89a83aca8db89123d523738a678287c9b890011adc4b4d323162e7d45ea57e0aed982ecc552b2e78ce6f69559d4b43e23dadea861ccb363093785a0f9c9b0aeeebe83957af395737fae983430b6d4fd72c1b8ca66b46c0fe0915904072879c0eada1ee477d8ea105608da7a68dd35f63620fbd58d5bc8fda9bb93774de849a018b42a129551fdecc721818376eac75290ed82e95b310705e974de23f9be86f56697b0afd69a5db73dca6940863c6c299a54a3afa020629f9f4eb224d67bdf93c826fcc18cd17bdc4b323ab457dde18e739a60642c34758b4fd20571ea03771dc0806cccc1e33bb90bcd413ef0c38c1dd583480c2619502664023c0dfdf172324e90b3055fedf594eaa652237dc8d649e0be486c6301ec3249b80d804c09b7260ad7a6bc46703114942e1819e70666fedf9256fe3ab1570a4bd1e8779c3d53f0f34c2d2aefab2c89435e2d02f532ab87733d44d84c7f9949e2c1a64e875bb27ff17abda84cc8538b21dc77d33a39c5cce3f2e4ff8664f9e6d5e61f016f414cb6c7654f6fe411aeb6e65fb9b87d71620c54237e8f4ab1da44fcf91c4504b9b0625cd7a6024ba595b962d989e088e72866be139b762031822a4a5dec6aade71308f86b78f3fefad5c005ccf0bb0685ee323cde3c23b24df4ee045bb6cd9747eaebf3967bf6a6b6e01066dee4b380b08ce03ad55b3237b496dc5ae4882e294b10a049e382a64471a7ce4c7d2d046621bdba3bff6cd802f71fc790ebf38fab02960d73faa75a50fd652a34af817e3b20d397678c08e39d7690585f86472e95972a2d77a5ed21cc450746bbb54d3ec94e64c9aa935bd2462ec0e5eaf4d8130d78716411f6e9edb3d591c69c2a0a5cc6afc85df9018c6b7d019b86a15059cdcd821a749676efba42394c86cdcc8b68e6238f6091961db13ca784b7fe6bf0a3822e1050bad7c8f972d03559f3953d5d0bd9a7332415a20cc6b7a5765acbed810902b80330dcf8034f0a51e82314d85537d3dd4929e430f65fb7f87f8b99444e93402606f666e0d185b02abc0f95df2db86e9a8bc9868fd727adccd9954502de6207a5f387fb7521cc957bc496c4351e5a8564bb04fd8322c6b701470cfe92037035c585e128c0e9b97ed36af9dba05b5d9c9109a7d45ed38ed688b50c3a117b81b23ea417c458dad6c93fac25a0b537f221a50fb0bfb2134b2c6b6b48e7c34b203b70b35a6da8bbc03bc3bb8c4d2845dbd3c252226a534cff9007db8ea9aa56567dd5d325afcdc2dbae163fa4b97a40c43470fa06fd652a7ba9339858a64427a63a2482acbec0fd6c5930c8161b7ee5d63db5839e0fb015690c2a182b99d3b4a8be49a8ade1bdfed52a32d742d29f27cadecfac0625dc7e7848f137ce422647a6749a94be79542507fe7ededf3551b1b0054c8a2a74e63b83600527b52bdad3d778c0f7537f98db7cbd673fa31f258bc58a6e64072361a5535ebfb622832ee2f56d9e5d167df1821dac8717040db998996e77f2541d5c8337ae5ce7b6a0993793487894a013cb059a7ee6ef83f0ed922c1ea279796306909f6d958a90adceee7302c1fee333660684f2eab7d875fc297cede5bcb2b745abb2e00364a77fdcc35871e1365cd9b4b44a54ca4c8b0027e5773a053d6f3e835b496c0675b5ebe80fd7ee51f89fe41f316f72ffff5da5e50d661af3df160891171c3d3f2bccee2e7c6e47a1c77a77fd63eafad2c64235e69a64711c42ba2a4d2af060a0d437ac906ca9e5436612e5d01eb7c4cfcef459ab0c6b35d52c3acc2a80dc8cb67d4adfe8e3efd0560761e36e591bb8c9f8bce278d6bd8eabe51d058c5f832223b1fb90a03e8e7d8daf30ff36b0afb536e2dafae856c6d2b6b8415764414a062c02b0584c4ce8cf657e6944fee233626a6c7d95de51963dc4421b3ffaf2b357487c2486df5fa9c2022a64fe94d3360b323c4ec5bc2963e7cdc6ec76562cbd9639f7b67a796c6f3263c6e573a0ff1a865afd3047db2a5fe98b891abbad438ac309d6769c7bb997b5ee1d01b8095a1479082c266b23da218cee12a841f76a6ddade38e720f10538e6de5e3ccec46142efe8bb78e5240a5020a9c421ddc4ed03f2d6516fec8c4d183a4441e277ed18d90690459da1ed64912adf4a5378104bc7fb5d2875487141469fb881eb0bb996da1d54cc88b9c5cf119563e40711f8c75535d0e58290972194f72759d6caf45189c60976849ab86b0d5e1993d51d7daef9a0ed052501428ecb51776531958c7c4fc8d4fb48021a0c5235499fe35f708242389a1f984869b5da572527b1a40b67a01a96fb9b5a1294ea1836095dd693f821f5c154bf6da8b196f244d444ddf863d934ad3df5601312dae734b7e44206d89d776e11add97f6e72c87e3bace5b147b271b29dc7643ea7c83a2f57801858a8c7b9f3a8c9e559a6ecf37bc1460e488c5d4882b6bed34a6df32e938105727a77414644903b45a87c7c3166f69de6821f41de3f515197c1f3871d77a37075c32684df8c463175b1c542f3137f3e62b97fceb7eabace5a45e76c3a6ede9a8c12d5c4093911aaa7262416b36cde6bf485e3c237fc131b793afb92a149d17413f5e4c23a9a311324f7625050b42c79b52c2563c96fe15ed00dbdc4a08da2315c165908f6361fcb30f5f9eca83cab8341a88c3b0c215702111f2734864c322d4e039e99c3dc828c3b88a11277b776f8848743ad58e8ac5fa7c46f945dba863bb91f3279f5475d8641bcfbd240559dfce3243a4b07d3dba77c3b159c371a996b97d864af0afde72496c3e879ca64944614eb8eb3f9e6426e861ebd8eaaca6847ac3b061297303921384fb9a056f58904a67184fdac4384d80670085607ca81a24b2a0cd25ba4b5fddd4169b9653a896b89cfd79f9cfba2b1655fe3523105cbc135dd175a9cf0d1dbcf6f8ede3a88ab9d5eed65b5bcc4a1f6deb18654b0878ebc20e189e6a8896bffa7c64335d6e32c49612ccefb527037e30089989d2fab07a48a00f420c0e1e529d021444d7d3268adeae2e0665dc2bed980f0179f408c43cd8c190db21bf1b3e79932b42e5bd0130d21af8d54934a512d44a695ff2c0b9c84762370e48a5e0dad92369fc10bb2fc1bb8256efb4ee09f6fa04e0f211be048ed7d656672d5276c241122057cc16ecc3d670f788f35f68931473badf0afc3b26ada0d0d74754ea5b01747a5bfc38f0f463010044acfc52599344b1aa0d51ee9cb0b8f1f0c6bbdf15e5774e", 0x1000, 0x7}, {&(0x7f0000000240)="2dc7e94e97c1a3c850993e8ccba91b42297919335c5981b0c3cd6de024bca19c23a6fdd53bfa5262d52bd61bb9e1e07c62eac0a4cffe7af4b3", 0x39, 0x1ff}, {&(0x7f0000000280)="82609eaf3c1ab5d60ad8a53921c87a1ae87a8b1ad94d5dc8bb09ed97a6e09cfac1b7bb03f7fc78d8eac5bccf4c0b0b6f9af6f7d65f", 0x35, 0x7f}, {&(0x7f00000002c0)="feb35be2f1d2d2294c555682d4437030661b7eed45d8624b6f6e6b3588541b0ab873a547bacedab5ffb404ebde45832113e65216ebbc05", 0x37, 0x2}], 0x2200000, &(0x7f00000004c0)={[{@shortname_mixed='shortname=mixed'}, {@shortname_lower='shortname=lower'}, {@shortname_winnt='shortname=winnt'}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@fat=@usefree='usefree'}, {@shortname_win95='shortname=win95'}], [{@appraise='appraise'}, {@euid_eq={'euid', 0x3d, r1}}, {@subj_role={'subj_role', 0x3d, 'minix\x00'}}, {@dont_hash='dont_hash'}]}) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 606.492330] FAULT_INJECTION: forcing a failure. [ 606.492330] name failslab, interval 1, probability 0, space 0, times 0 [ 606.503819] CPU: 1 PID: 29378 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 606.511910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.521273] Call Trace: [ 606.523876] dump_stack+0x13e/0x194 [ 606.527524] should_fail.cold+0x10a/0x14b [ 606.531682] should_failslab+0xd6/0x130 [ 606.535691] kmem_cache_alloc+0x2b5/0x770 [ 606.539848] ? __mutex_unlock_slowpath+0x75/0x780 [ 606.544795] __kernfs_new_node+0x6f/0x470 [ 606.548954] kernfs_new_node+0x7b/0xe0 [ 606.552851] __kernfs_create_file+0x3d/0x319 [ 606.557272] sysfs_add_file_mode_ns+0x1e1/0x450 [ 606.561959] internal_create_group+0x23b/0x7e0 [ 606.566554] sysfs_create_groups+0x92/0x130 [ 606.570882] device_add+0x1040/0x1400 [ 606.574695] ? device_private_init+0x180/0x180 [ 606.579288] netdev_register_kobject+0x180/0x390 [ 606.584062] register_netdevice+0x7ce/0xc70 [ 606.588385] ? netdev_change_features+0x80/0x80 [ 606.593049] __tun_chr_ioctl+0x20a3/0x33d0 [ 606.597365] ? tun_chr_close+0x60/0x60 [ 606.601260] ? tun_chr_compat_ioctl+0x30/0x30 [ 606.605744] do_vfs_ioctl+0x75a/0xfe0 [ 606.609549] ? selinux_file_mprotect+0x5c0/0x5c0 [ 606.614394] ? ioctl_preallocate+0x1a0/0x1a0 [ 606.618812] ? security_file_ioctl+0x76/0xb0 [ 606.623408] ? security_file_ioctl+0x83/0xb0 [ 606.627818] SyS_ioctl+0x7f/0xb0 [ 606.631186] ? do_vfs_ioctl+0xfe0/0xfe0 [ 606.635177] do_syscall_64+0x1d5/0x640 20:53:32 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000001c0)={@local, @remote, 0x1, 0x4, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 606.639060] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 606.644258] RIP: 0033:0x45c889 [ 606.647437] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.655228] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 606.662486] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 606.669741] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 606.677014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 606.684527] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000003f 20:53:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 606.748031] kauditd_printk_skb: 14 callbacks suppressed [ 606.748039] audit: type=1800 audit(1586897612.976:14554): pid=29386 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=15751 res=0 20:53:33 executing program 0 (fault-call:12 fault-nth:64): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:33 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="110700000000000000000600000008000300ea256d9e1e285787be04a4829107fd4cb131e4adeb76c83efff8bc591040b2148ab66ac3f600b89ada4c45e5ef435601d5eb5b0c07ff91027c32edd5f1622ba5023be7102a21a60000e5008a06b07e9301dbdc3b50736055a5b0555b4418988b76c1226229c917c15b22023a472b8cfa5132f90cdadcd74977db7b2f24e417d2caec1532ccdf4e8648e193eddbe3f5c272c39d785f3d81d177a92307d4c338ce60c3518e06f377b3f8150104e4464494a14db0187fca4593dffe8324d6d904fe80c16defc2de904ea87e6497786ed33c743c3c7852241d97c085a7b38443de035066a83417", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8000) tkill(r0, 0x1000000000015) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d11, &(0x7f0000000180)) [ 607.019561] FAULT_INJECTION: forcing a failure. [ 607.019561] name failslab, interval 1, probability 0, space 0, times 0 [ 607.031102] CPU: 1 PID: 29408 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 607.039093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.049012] Call Trace: [ 607.051617] dump_stack+0x13e/0x194 [ 607.055297] should_fail.cold+0x10a/0x14b [ 607.059461] should_failslab+0xd6/0x130 [ 607.063460] kmem_cache_alloc+0x2b5/0x770 [ 607.067617] ? __mutex_unlock_slowpath+0x75/0x780 [ 607.072477] __kernfs_new_node+0x6f/0x470 [ 607.076635] kernfs_new_node+0x7b/0xe0 [ 607.080535] __kernfs_create_file+0x3d/0x319 [ 607.084955] sysfs_add_file_mode_ns+0x1e1/0x450 [ 607.089636] internal_create_group+0x23b/0x7e0 [ 607.094236] sysfs_create_groups+0x92/0x130 [ 607.098607] device_add+0x1040/0x1400 [ 607.102516] ? device_private_init+0x180/0x180 [ 607.107120] netdev_register_kobject+0x180/0x390 [ 607.111894] register_netdevice+0x7ce/0xc70 [ 607.116339] ? netdev_change_features+0x80/0x80 [ 607.121029] __tun_chr_ioctl+0x20a3/0x33d0 [ 607.125300] ? tun_chr_close+0x60/0x60 [ 607.129213] ? tun_chr_compat_ioctl+0x30/0x30 [ 607.133717] do_vfs_ioctl+0x75a/0xfe0 [ 607.137528] ? selinux_file_mprotect+0x5c0/0x5c0 [ 607.142298] ? ioctl_preallocate+0x1a0/0x1a0 [ 607.146727] ? security_file_ioctl+0x76/0xb0 [ 607.151146] ? security_file_ioctl+0x83/0xb0 [ 607.155570] SyS_ioctl+0x7f/0xb0 [ 607.158946] ? do_vfs_ioctl+0xfe0/0xfe0 [ 607.163077] do_syscall_64+0x1d5/0x640 [ 607.167176] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 607.172399] RIP: 0033:0x45c889 [ 607.175628] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.183467] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 607.190756] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 607.198124] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 607.200103] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. 20:53:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 607.205397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 607.205404] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000040 20:53:33 executing program 0 (fault-call:12 fault-nth:65): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:33 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000001c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:53:33 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) ioctl$KIOCSOUND(r1, 0x4b2f, 0x7) [ 607.394319] audit: type=1800 audit(1586897613.626:14555): pid=29432 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16079 res=0 [ 607.480616] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 607.517101] attempt to access beyond end of device [ 607.524570] FAULT_INJECTION: forcing a failure. [ 607.524570] name failslab, interval 1, probability 0, space 0, times 0 [ 607.536046] CPU: 0 PID: 29441 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 607.543949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.553309] Call Trace: [ 607.553955] loop5: rw=2049, want=6434, limit=52 [ 607.555902] dump_stack+0x13e/0x194 [ 607.555921] should_fail.cold+0x10a/0x14b [ 607.555938] should_failslab+0xd6/0x130 [ 607.555948] kmem_cache_alloc+0x2b5/0x770 [ 607.555962] ? __mutex_unlock_slowpath+0x75/0x780 [ 607.565457] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 607.568382] __kernfs_new_node+0x6f/0x470 [ 607.568397] kernfs_new_node+0x7b/0xe0 [ 607.568410] __kernfs_create_file+0x3d/0x319 [ 607.568423] sysfs_add_file_mode_ns+0x1e1/0x450 [ 607.568437] internal_create_group+0x23b/0x7e0 [ 607.568452] sysfs_create_groups+0x92/0x130 [ 607.583906] attempt to access beyond end of device [ 607.589258] device_add+0x1040/0x1400 [ 607.589276] ? device_private_init+0x180/0x180 [ 607.589293] netdev_register_kobject+0x180/0x390 [ 607.589307] register_netdevice+0x7ce/0xc70 [ 607.589318] ? netdev_change_features+0x80/0x80 [ 607.589332] __tun_chr_ioctl+0x20a3/0x33d0 [ 607.589346] ? tun_chr_close+0x60/0x60 [ 607.589362] ? tun_chr_compat_ioctl+0x30/0x30 [ 607.589376] do_vfs_ioctl+0x75a/0xfe0 [ 607.596315] loop5: rw=0, want=6434, limit=52 [ 607.597395] ? selinux_file_mprotect+0x5c0/0x5c0 [ 607.597411] ? ioctl_preallocate+0x1a0/0x1a0 [ 607.597433] ? security_file_ioctl+0x76/0xb0 [ 607.597441] ? security_file_ioctl+0x83/0xb0 [ 607.597453] SyS_ioctl+0x7f/0xb0 [ 607.613469] Buffer I/O error on dev loop5, logical block 3216, async page read [ 607.616393] ? do_vfs_ioctl+0xfe0/0xfe0 [ 607.616410] do_syscall_64+0x1d5/0x640 [ 607.616428] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 607.616437] RIP: 0033:0x45c889 [ 607.616442] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.625893] attempt to access beyond end of device [ 607.629756] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 607.629762] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 607.629768] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 607.629773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 607.629779] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000041 20:53:34 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)="f6", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) keyctl$update(0x2, r2, &(0x7f00000001c0)="9711a643e1be7d365ae6c337e5a4b564f2de7279a57cb81ac6ba6f6caa614a02ce63e248cb98c3debc0d6ab486f5e5d5aba02f48f615ddcc7e18d7cbcfa712cd7adb86a6f7df72b01c90a668aa790701beb0171b572596ec18c4f02736194c682e9fd2676fbcea9d1802aa807f7964af6e1dd456af79ef263ade604a45c323563cd4f3576cae9841e353e2ca5e8f542b8e5de4346f31057baa2e9b46fdc44047aea9c589bbdf134489719727c7297105749ba9e56c7a79f43db79860", 0xbc) 20:53:34 executing program 2: r0 = gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000518000480140000007b91e65b829887c6b12fa75ec847ba19f1700b28464eeeabc51ea7947533e8ad758026b7569a5d1a80a7"], 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x44801) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x70, &(0x7f000059aff8), &(0x7f000034f000)=0xffffffffffffff5f) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000002c0)={0x800, 0x8201, 0x1, 0x1000, r2}, 0x10) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x2) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) 20:53:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 607.711252] audit: type=1804 audit(1586897613.866:14556): pid=29439 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir689926280/syzkaller.BgL1Ld/435/bus" dev="sda1" ino=16020 res=1 [ 607.726558] loop5: rw=0, want=6434, limit=52 20:53:34 executing program 0 (fault-call:12 fault-nth:66): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 607.880236] audit: type=1804 audit(1586897613.886:14557): pid=29439 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir689926280/syzkaller.BgL1Ld/435/bus" dev="sda1" ino=16020 res=1 [ 607.913340] minix_free_inode: bit 1 already cleared 20:53:34 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/1186], 0x473) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0xffffffffffffffc1, 0x2}) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10}, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000240)={0x9, 0x3, 0x3f, 0x3, 0x4bbe6f80, 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000200)) [ 608.017878] audit: type=1800 audit(1586897614.136:14558): pid=29463 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16092 res=0 20:53:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 608.101213] audit: type=1804 audit(1586897614.156:14559): pid=29463 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir069373542/syzkaller.j3oO9e/433/bus" dev="sda1" ino=15753 res=1 [ 608.156077] FAULT_INJECTION: forcing a failure. [ 608.156077] name failslab, interval 1, probability 0, space 0, times 0 [ 608.167726] CPU: 1 PID: 29473 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 608.175632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.184992] Call Trace: [ 608.187599] dump_stack+0x13e/0x194 [ 608.191253] should_fail.cold+0x10a/0x14b [ 608.195418] should_failslab+0xd6/0x130 [ 608.199402] kmem_cache_alloc+0x2b5/0x770 [ 608.203561] ? __mutex_unlock_slowpath+0x75/0x780 [ 608.203568] audit: type=1804 audit(1586897614.166:14560): pid=29459 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir689926280/syzkaller.BgL1Ld/436/bus" dev="sda1" ino=15760 res=1 [ 608.204659] audit: type=1804 audit(1586897614.166:14561): pid=29466 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir069373542/syzkaller.j3oO9e/433/bus" dev="sda1" ino=15753 res=1 [ 608.208429] __kernfs_new_node+0x6f/0x470 [ 608.208444] kernfs_new_node+0x7b/0xe0 [ 608.208455] __kernfs_create_file+0x3d/0x319 [ 608.208467] sysfs_add_file_mode_ns+0x1e1/0x450 [ 608.263861] audit: type=1800 audit(1586897614.296:14562): pid=29479 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=15746 res=0 [ 608.265387] internal_create_group+0x23b/0x7e0 [ 608.265404] sysfs_create_groups+0x92/0x130 [ 608.270448] audit: type=1804 audit(1586897614.306:14563): pid=29479 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir069373542/syzkaller.j3oO9e/434/bus" dev="sda1" ino=15760 res=1 [ 608.274476] device_add+0x1040/0x1400 [ 608.274491] ? device_private_init+0x180/0x180 [ 608.274506] netdev_register_kobject+0x180/0x390 [ 608.341164] register_netdevice+0x7ce/0xc70 [ 608.345505] ? netdev_change_features+0x80/0x80 [ 608.350191] __tun_chr_ioctl+0x20a3/0x33d0 [ 608.354459] ? tun_chr_close+0x60/0x60 [ 608.358365] ? tun_chr_compat_ioctl+0x30/0x30 [ 608.362856] do_vfs_ioctl+0x75a/0xfe0 [ 608.366712] ? selinux_file_mprotect+0x5c0/0x5c0 [ 608.371463] ? ioctl_preallocate+0x1a0/0x1a0 [ 608.375861] ? security_file_ioctl+0x76/0xb0 [ 608.380432] ? security_file_ioctl+0x83/0xb0 [ 608.385641] SyS_ioctl+0x7f/0xb0 [ 608.389015] ? do_vfs_ioctl+0xfe0/0xfe0 [ 608.393003] do_syscall_64+0x1d5/0x640 [ 608.396998] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 608.402190] RIP: 0033:0x45c889 20:53:34 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/139) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) r3 = semget$private(0x0, 0x7, 0x0) semtimedop(r3, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)=[0x1000]) semtimedop(r3, &(0x7f0000000000)=[{0x4, 0x20, 0x1800}, {0x2, 0x0, 0xc00}, {0x4, 0x55ba, 0x800}, {0x0, 0xcc, 0x800}, {0x4, 0x2, 0x1000}, {0x3, 0x4979, 0x800}, {0x0, 0x10b, 0x2800}, {0x4, 0x81, 0x800}, {0x3, 0xd5, 0x3000}], 0x9, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000140)={0xffff0001, 0x8, 0x7, 0x4, [], [], [], 0x6, 0xff, 0x101, 0xd418, "eb1a01996e7917a1a230e26a89af2af5"}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000280)=0x7ff8, 0x4) bind$ax25(r2, &(0x7f0000000380)={{0x3, @bcast, 0x7}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 20:53:34 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000001c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x5, &(0x7f0000000400)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}, {&(0x7f0000000200)="a577f2ecef3a3b0a34560bf0fd30ab637d0e5b7f9ba73775386c45518f584bab079724589018ab9e6a9818bba7e4782bd1354e19b0be39233e0dec2aa5104def61562ce2e077d6c40c8f4217ba678b026785be5da6f4f3d2eddc0254f79a39f624b81b6e32b76df23f7cc2cae661f17580937dd861783bc6b05140abd170a05063a6ae447a7ffdb018da2eb3a5b3d4cc775fd4b37cd4aead7aa2ea524cfb587601913b413e7eabd687a6223ac88dbbf85296b09e69f619814e61825f6efae510931fb5ed820edefd2133a098fea949316a174f6bfd2f474b", 0xd8, 0xfff}, {&(0x7f00000000c0)="b72b455024aaab7e5661fb6f0f7e7d0e248be421eac29a77f488c3f4f3", 0x1d, 0x78bde5f2}, {&(0x7f0000000300)="dd1e5fb07037568abdc8becd387ccc50469a9f13f527cbe739815848ef26bbde3ed20bfde2db5eccee4836fb32f44b6fc5b4715e78166ac47e40e2be6c34fd491657f5624d133bb9d971fc50cad3f32ac41839b57987fa74f5f0f47d6b4a574d6a34d6133864c3f256d6a17de6cb27d2d57cd4f96fa17dc8371f024e5f25433c122179abcac1ba207d9df4e4aa362672689667a897abfc144fe391deccd74a47a7e8eee9eebdcddc96d5f64d8db71fa0f6c678c17b54fad6a9ec874188c1af4bf9d07d", 0xc3, 0x1}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='\x00', &(0x7f0000000480)='trusted.overlay.opaque\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x9dd, 0x200002) 20:53:34 executing program 0 (fault-call:12 fault-nth:67): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 608.405383] RSP: 002b:00007f7283c41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.413095] RAX: ffffffffffffffda RBX: 00007f7283c426d4 RCX: 000000000045c889 [ 608.420380] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 608.427653] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 608.434922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 608.442192] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000042 20:53:34 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) write$midi(r1, &(0x7f0000000440)="8d34d8ecc47be0fee0fadf2eac03f8b73ded037064ec4fd6bc65c04a288344c4dd9600391245a39f7be13185f12e837c38ca18a5cebff659a82f15d51bd3fce2dd2fe5dced8fa09398301dad5096b5688bd96863978f6f3675b97ec5cb224c31d50d2a9c4d66e5aae736d54b6a0e6d78328311405f97c2b6d54989d5b5d36bdd09248a205aaaf5b2fc440b6c51b4eb504f43e2701de62061cb6a812317965bc6277940f057475696600cbfb282fa6b87cbc7b8163b6aea2c0091b557a005dd338bc05cf5484421b16e69d2484959857447ec7547e038a1bbfe2b5260476d571f18d23ffd12bcae6ee47a693ad92fbfa3c0fabe", 0xf3) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r3 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x3ff, 0x490000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01001d863926b9b3acc661378bd4084935b5166ac32f5ee36c5b17ae67ba298535c0eb912325a8a5d18aa4fd80c188826350283d00"/66, @ANYRES32=0x0], &(0x7f0000000240)=0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r3, 0x80184151, &(0x7f0000000600)={0x0, &(0x7f0000000540)="8bc00d2fd7000892233ee603e1e0486ff963926340caadb8d8c57c27291c9c8ae7632bfc036780c7085d7daf1777e42ab8c53ac68b329e5101519a941fd49c65687d2efdf7b7c6bb0cd93b74d04b87c62e4fdf044934056cd64d3294448d26686c2da6c437c271c16fc302d6b6a0987261cffecad08ba426a81eee25a65a92f7ecfb5b8b6536ce7864", 0x89}) lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)=@random={'btrfs.', 'minix\x00'}, &(0x7f0000000340)=""/246, 0xf6) r4 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) fcntl$setpipe(r4, 0x407, 0x5) [ 608.615120] ip6t_REJECT: ECHOREPLY is not supported. 20:53:34 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x840) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000140)={0xfffffff7, [[0x0, 0x0, 0x7fff, 0xe0cb, 0x2, 0x3, 0xfffffff9, 0x81], [0x2, 0x9282, 0x0, 0x7f, 0x48fc, 0x0, 0xb25, 0x200], [0x2, 0x3, 0x8, 0x1, 0x4, 0xab, 0x7fffffff, 0x3ff]], [], [{0x80000000, 0x6b03}, {0x9, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x3, 0xad}, {0xffffffff, 0x7}, {0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x4}, {0x3, 0x100, 0x0, 0x1, 0x1}, {0xffffffff, 0x8001}, {0x3, 0x80000000, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x7fffffff, 0x1}, {0x8, 0x2, 0x1, 0x1, 0x1}], [], 0x5}) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:53:34 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000001c0)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x5}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 608.704487] FAULT_INJECTION: forcing a failure. [ 608.704487] name failslab, interval 1, probability 0, space 0, times 0 [ 608.715985] CPU: 1 PID: 29516 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 608.723885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.733243] Call Trace: [ 608.735847] dump_stack+0x13e/0x194 [ 608.739488] should_fail.cold+0x10a/0x14b [ 608.743645] should_failslab+0xd6/0x130 [ 608.747763] kmem_cache_alloc+0x2b5/0x770 20:53:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 608.751919] ? __mutex_unlock_slowpath+0x75/0x780 [ 608.756941] __kernfs_new_node+0x6f/0x470 [ 608.761100] kernfs_new_node+0x7b/0xe0 [ 608.765110] __kernfs_create_file+0x3d/0x319 [ 608.769533] sysfs_add_file_mode_ns+0x1e1/0x450 [ 608.774217] internal_create_group+0x23b/0x7e0 [ 608.778815] sysfs_create_groups+0x92/0x130 [ 608.783144] device_add+0x1040/0x1400 [ 608.786955] ? device_private_init+0x180/0x180 [ 608.791544] netdev_register_kobject+0x180/0x390 [ 608.796313] register_netdevice+0x7ce/0xc70 [ 608.800641] ? netdev_change_features+0x80/0x80 [ 608.805323] __tun_chr_ioctl+0x20a3/0x33d0 [ 608.810271] ? tun_chr_close+0x60/0x60 [ 608.814173] ? tun_chr_compat_ioctl+0x30/0x30 [ 608.818675] do_vfs_ioctl+0x75a/0xfe0 [ 608.822479] ? selinux_file_mprotect+0x5c0/0x5c0 [ 608.827242] ? ioctl_preallocate+0x1a0/0x1a0 [ 608.831775] ? security_file_ioctl+0x76/0xb0 [ 608.836194] ? security_file_ioctl+0x83/0xb0 [ 608.841230] SyS_ioctl+0x7f/0xb0 [ 608.844602] ? do_vfs_ioctl+0xfe0/0xfe0 [ 608.848584] do_syscall_64+0x1d5/0x640 20:53:35 executing program 2: r0 = gettid() prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r1, 0x0, &(0x7f0000000000)) tkill(r0, 0x1000000000015) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) ptrace$setregs(0xd, r2, 0x20, &(0x7f0000000140)="c89680f77da348fcaec25567b82480c56b058e94dc7ebe40ae4e980f948372da4ebad5f30ed847813ac92bada0db73c39e53f2b2db38067ddc3233afcdcf1dbb85") 20:53:35 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 608.852489] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 608.857676] RIP: 0033:0x45c889 [ 608.860864] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.868572] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 608.875849] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 608.883122] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 608.890401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 608.897671] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000043 20:53:35 executing program 0 (fault-call:12 fault-nth:68): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) 20:53:35 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) bind$phonet(r0, &(0x7f00000001c0)={0x23, 0xe9, 0x7f, 0x20}, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:53:35 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000480), 0xa198) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) r5 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000046c0)={0x9a0000, 0x1, 0x8, r5, 0x0, &(0x7f0000004680)={0x980919, 0x5, [], @string=&(0x7f0000004640)=0x3f}}) r7 = socket$inet6(0xa, 0x3, 0x80) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7f}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7ff}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x86}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004740)=[{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000300), 0x0, &(0x7f0000000400), 0x0, 0x4040000}, {&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000000540)="0cc3ee042137894b9646d1db2823ccd92ca06928d0ae243664724b36335d93c17803ce24e836fd3b6c7aa86bb285a08fbdc5", 0x32}, {&(0x7f0000000580)="a969b36afd4f7095a7431ccbd25841716b9cde5425f26645376b383e74", 0x1d}, {&(0x7f00000005c0)="186279032983f0e28b220dd6cca1911c11d2f169a39842e651a2cd67296bf1bd15424a40756898406f1b7d478a14e0c7d53af74142ae19ea5e2157c01702ece0a8931c013fca805ad5a9020ca36500a940cfa25d1f4bb547dc20f43da342427c2c1990a44f07dd38170d338ec1fedb6292d17a1801b7b33c4502dbbe9b26b1", 0x7f}, {&(0x7f0000002980)="3e855eabfc9694c549087a90fe00aa0140ea72fc739364a611049540b77a381df7a157e9399d7051ed9d0200f369efee9df017dc5106a64b98bc7ded51e8010ef1fcbbee42b830701974ce8c52359368e1f445c5682ef8bc080cbddc972ee2fcd6", 0x61}, {&(0x7f0000002a00)="a839e5356d0e66d9168ded0843f701b37fa28cf6098ddb8c1b9b9c8944a53abf66ffa44bd7583e75b3a6af988e19561188e53b5ee1ce996a7fe430c03de27c369729cae90ce4f5a4cd36d295407c1c86da13e2249c11bedf5322292a2f7d1a995deb71", 0x63}, {&(0x7f0000002a80)="59ebc0fadaec9de11daf3775e88272fc8e3fc7e6ffdcc2f4e2eeca28845975e23a5945d36a124a879a85dc677d6a00e8c21b9e18b604eb253cbde9ab6bc4175616d2009afc20e4297165623b4384fd7ab0f8a6f0d88eb6483a114a11a0bddb", 0x5f}], 0x6, &(0x7f0000002c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}], 0xa0, 0x4040090}, {&(0x7f0000002d00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000002d80)="19095181490c6d1c8b12cc1587f99e8a07e839b5ec5b5fd56572ef67d8e27f964ed75112adf48274a43a", 0x2a}, {&(0x7f0000002dc0)="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", 0x1000}, {&(0x7f0000003dc0)="70ac8c7b951b35dfeb3dda7a38ba05c5b0084231f24f5f1e223cac15ff3b680b8a9d8d80ef40f58bad26c8628579fd0ff1b60405ad70877ba9323981223d8e1a30257bc4f97af1664dcce159f3267622a4f045e7cdbdb625da431f27bffe3b935d7abe49855bbbae2cc85857d0cbbfc7dff6b1bc253bcc2ec1bdc1d5d2e316fe33d7e5a2b6b8dd7bd13d623de47763", 0x8f}, {&(0x7f0000003e80)="33a5db0899234ab1585b85be533eccbae4361744503937729fc6ce70a33f288ba6dbda10e48895f7c687285763a78250e95c8a12e0a9e34f8baab1b276a393183fdcc2fa256a0ea489eb688037d08f6164c4bc645623743f3d039bcf89933d38c4e85be2ea228f0443affabb7b6e106f413bdc1cf5007b11e7857d4e1566ae92027197f778aeb6a54a0bec1c3de4a92c7fdec037dfe6cbecd65b3b6d440da27a3da37a4a8e93a7e7188b9b", 0xab}, {&(0x7f0000003f40)="ea4c0c99b625dd500346af8fc82021fe5d7d238c50f7a048f80a2cc2c2af718604a154ef5e71edb8c9c607c4a7792e49b0c6a7f3bbc0275c50cb63124af5543bdc2a27dc2e23c19c540b24ca3b828caef4", 0x51}], 0x5, &(0x7f00000040c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xd0, 0x2400c818}, {&(0x7f00000041c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000045c0)=[{&(0x7f0000004240)="9ecc9253312e0ceaba146e3fa1501c4a8e833a91dc11ff0b9701dcecc419266556028f64d90f031b2ae6589b520de6495c2536f157013a65be0fbbf4a6bea27df81cd5a0cd45207ef8a8411bf2ce21ca91f9093af6688addde26106d0823b4ffe75086900ce02f1064c9576a89ecd5e5f706cbf2130d49c1197e077842d45934b58eff0c560da178377ffff9e0c15d14c4806c4ca1b4b9a684d8053afec4576ea8f7d7d66faa0df6e2352563c83d61a8831dfbd2538ee5", 0xb7}, {&(0x7f0000004300)}, {&(0x7f0000004340)="5f25d7986d98ddb5d91927bfa35244df707122ef62227b238bd98880461f8a6f7494820ea51a47b191ea3e3f8095a1bb7496bb920b4c8646e7e16cd8ad920c3ada46491732bdba2d1e3dcd6782fcbcb6b492e2a82f3452553aa2", 0x5a}, {&(0x7f00000043c0)="865d8ce91a009163e14428f4ca642d7ec0c0b0adc66a677ba666837be59ecb2a37cabbc3f6c38730a8b04b13d57d95f3c81ba4b3594e535e9a30027e9478af90296cd587a03473e31cd15eeffe2a9b38a339e6e8e81e8065fe6ef84a95b4b43e7d20ebb2d50108663bae81b21a858729c75b18b610ce275de3f90347af173c4d037479d48c9a90740c4fd5c271ac31701ff23158af21605e147c55793c31a509baf97007e05372547812d0b05e1a34323d158a6f6965ff459a73d41a5b73", 0xbe}, {&(0x7f0000004480)="9146719cfb9be20e18738a56c52a68ffe83e2ccf31f5ec9b1138415b3b6409f1164788c129c55a0bed81951df757fc96f97d40abbd8f5f3a560db28733d62e6fec57f6af7a8f523c6661253ce28735889a5c462632b7c8c467b059bc58f45ae2d2e37d8717ccba4b175847d41170cb36dcc666a2e870b87b607d1b186c512b064ed1e96af71be6b1cb5e0f684f8d1dcfcbbdf1d22eb7ad75f8e35efb962b772567530c4e3e2010cad87dfc66bf9b0cd9d02dd1fc31263f5893afbc17d994421d6e1abb3309eafcfeb03e24c6a8bf7d68f6439a9f1d93", 0xd6}, {&(0x7f0000004580)="b760a0", 0x3}], 0x6, &(0x7f0000004700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r2}}}, @rights={{0x20, 0x1, 0x1, [r6, r7, r0, r0]}}], 0x40, 0x80}], 0x4, 0x40004) 20:53:35 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) r1 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000005000000004000000c003000000000000d0000000f8010000d0000000f8010000f0020000f0020000f0020000f0020000f0020000040000000000000000000000ff01000000000000000000000000fb00000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000626f6e645f736c6176655f300000000073797a6b616c6c6572310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000004000000064756d6d79300000000000000000000076657468305f746f5f626f6e642ef108617a2467a08f3a7abb11f13e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000012801000000000000000000001de16c88b47e5a6d36000000000000dd0000000000000030006672616700000000000000000000b30000000000000000000000000000000000000000000000000000000000000028006970763668656164657200000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000892c0aa0bc32545fabb176672cf000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c3000000000000000000069705f76746930000000000000000000000000000000000000000000000000000000009da50167615af21111f30b5200000000000000000000000000000000000000000000000000d000f800000000000000000000000000000000000000000000000000280069636d7036000000000000000000000000000018830000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028000000000000000000002d8b7cf5ffdbb4ee51dcefb5154ffd309c75d71f49344a9ce265e2cf98792dcc904036957fdd83209a9d81700aacf9d283e0db4d843268f9c35894857b3b488ce038d9bdc14b50c908b26f773f2ea37b1786a71475e480b7b53703e10cb4c1c50871dfe507f43eff6d511a3e839ffe99f1e9999bfa96c0c47652630f615c88bb79e171cf88897d565799784d84dcaba85ec5292363bfbea68f1d445505ad5256f00e67d4ae5c0000000000000000c6fbc9b3833c92ed02737233c99ef1f233f23285bcdc0f2b9a266b763531a24a89b7734ab7c65d9dc1ad58a2e86210249d340701aa68af624b33144c"], 0x473) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U+', 0x3b}, 0x16, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) r4 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x1, 0x1a4) ioctl$IMDELTIMER(r4, 0x80044941, &(0x7f0000000140)=0x7) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) [ 609.114375] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 609.166006] ip6t_REJECT: ECHOREPLY is not supported. 20:53:35 executing program 1: r0 = open(&(0x7f0000000600)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x70, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={r6, @in6={{0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, [0x0, 0x80000000000000, 0x101, 0x4, 0x8000, 0xfffffffffffffff8, 0x7, 0xfffffffffffff000, 0x4, 0x1, 0x9, 0x1, 0x0, 0x3, 0x3]}, &(0x7f0000000580)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000005c0)={0xff, 0x34e8, 0x8, 0x9, 0x0, 0x7, 0xffff0001, 0x8, r7}, 0x20) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000240)='tmpfs\x00', &(0x7f0000000280)='./file0\x00', 0x4, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="33f1d715d10109963af8455b594a34a9051a41c37facfde3992f4db73c6d909617602802192aaa0ac4da17e7d5b880a4e1a9f3a27aa99648fa5c69d35057e05e82c15119dc6d6e1685d2096fc54eb9fadc5f7311b949f49a3ea9c77fa12322b54fe80919f6b6254bca19a426d9017d258e4e481cba329b4ad27f564b3c5c8b9f12fb4a182d8a21d85632c1367d626a1783", 0x91, 0x5}, {&(0x7f0000000980)="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", 0x1000, 0xce6}, {&(0x7f0000001980)="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", 0x1000, 0x1}], 0x10000, &(0x7f0000000400)={[{@mode={'mode', 0x3d, 0x2}}], [{@subj_user={'subj_user', 0x3d, ']'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x66, 0x38, 0x34, 0x61, 0x32, 0x37, 0x38], 0x2d, [0x34, 0x62, 0x32, 0x61], 0x2d, [0x35, 0x31, 0x39, 0x38], 0x2d, [0x63, 0xcebb35905ee5b0c4, 0x63, 0x35], 0x2d, [0x51, 0x35, 0x30, 0x62, 0x30, 0x32, 0x65, 0x65]}}}, {@fsname={'fsname', 0x3d, '/sys/kernel/debug/binder/stats\x00'}}]}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f0000000200)=0x7, 0x4) [ 609.188239] ip6t_REJECT: ECHOREPLY is not supported. [ 609.206931] FAULT_INJECTION: forcing a failure. [ 609.206931] name failslab, interval 1, probability 0, space 0, times 0 [ 609.218449] CPU: 1 PID: 29567 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 609.226356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.235720] Call Trace: [ 609.238322] dump_stack+0x13e/0x194 [ 609.242120] should_fail.cold+0x10a/0x14b [ 609.246296] should_failslab+0xd6/0x130 [ 609.250283] kmem_cache_alloc+0x2b5/0x770 [ 609.254443] ? __mutex_unlock_slowpath+0x75/0x780 [ 609.259297] __kernfs_new_node+0x6f/0x470 [ 609.263459] kernfs_new_node+0x7b/0xe0 [ 609.267356] __kernfs_create_file+0x3d/0x319 [ 609.271906] sysfs_add_file_mode_ns+0x1e1/0x450 [ 609.276589] internal_create_group+0x23b/0x7e0 [ 609.281195] sysfs_create_groups+0x92/0x130 [ 609.285547] device_add+0x1040/0x1400 [ 609.289999] ? device_private_init+0x180/0x180 [ 609.294711] netdev_register_kobject+0x180/0x390 [ 609.299483] register_netdevice+0x7ce/0xc70 [ 609.303817] ? netdev_change_features+0x80/0x80 [ 609.308655] __tun_chr_ioctl+0x20a3/0x33d0 [ 609.312953] ? tun_chr_close+0x60/0x60 [ 609.316867] ? tun_chr_compat_ioctl+0x30/0x30 [ 609.321375] do_vfs_ioctl+0x75a/0xfe0 [ 609.325206] ? selinux_file_mprotect+0x5c0/0x5c0 [ 609.329978] ? ioctl_preallocate+0x1a0/0x1a0 [ 609.331892] ip6t_REJECT: ECHOREPLY is not supported. [ 609.334406] ? security_file_ioctl+0x76/0xb0 [ 609.334415] ? security_file_ioctl+0x83/0xb0 [ 609.334430] SyS_ioctl+0x7f/0xb0 [ 609.334439] ? do_vfs_ioctl+0xfe0/0xfe0 [ 609.334453] do_syscall_64+0x1d5/0x640 [ 609.359838] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 609.365034] RIP: 0033:0x45c889 [ 609.368227] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.375941] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 609.383216] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 609.390493] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 609.397875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 609.406453] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000044 [ 609.443407] ip6t_REJECT: ECHOREPLY is not supported. 20:53:35 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8c, 0x1, 0x0, &(0x7f0000000000)=0x2, 0x1) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:53:35 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x6, 0x208000) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000200)=0x1) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:53:35 executing program 0 (fault-call:12 fault-nth:69): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 609.539843] minix_free_inode: bit 1 already cleared [ 609.637551] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 609.657771] FAULT_INJECTION: forcing a failure. [ 609.657771] name failslab, interval 1, probability 0, space 0, times 0 [ 609.669199] CPU: 1 PID: 29601 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 609.670492] attempt to access beyond end of device [ 609.677087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.677093] Call Trace: [ 609.677111] dump_stack+0x13e/0x194 [ 609.677129] should_fail.cold+0x10a/0x14b [ 609.677144] should_failslab+0xd6/0x130 [ 609.677157] kmem_cache_alloc+0x2b5/0x770 [ 609.686337] loop5: rw=2049, want=6434, limit=52 [ 609.691464] ? __mutex_unlock_slowpath+0x75/0x780 [ 609.691482] __kernfs_new_node+0x6f/0x470 [ 609.691496] kernfs_new_node+0x7b/0xe0 [ 609.691507] __kernfs_create_file+0x3d/0x319 [ 609.691518] sysfs_add_file_mode_ns+0x1e1/0x450 [ 609.691533] internal_create_group+0x23b/0x7e0 [ 609.691548] sysfs_create_groups+0x92/0x130 [ 609.691562] device_add+0x1040/0x1400 [ 609.701135] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 609.701900] ? device_private_init+0x180/0x180 [ 609.701918] netdev_register_kobject+0x180/0x390 [ 609.701934] register_netdevice+0x7ce/0xc70 [ 609.701946] ? netdev_change_features+0x80/0x80 [ 609.701961] __tun_chr_ioctl+0x20a3/0x33d0 [ 609.710171] attempt to access beyond end of device [ 609.714754] ? tun_chr_close+0x60/0x60 [ 609.714775] ? tun_chr_compat_ioctl+0x30/0x30 [ 609.714788] do_vfs_ioctl+0x75a/0xfe0 [ 609.714799] ? selinux_file_mprotect+0x5c0/0x5c0 [ 609.714811] ? ioctl_preallocate+0x1a0/0x1a0 [ 609.724369] loop5: rw=0, want=6434, limit=52 [ 609.727669] ? security_file_ioctl+0x76/0xb0 [ 609.727680] ? security_file_ioctl+0x83/0xb0 [ 609.727694] SyS_ioctl+0x7f/0xb0 [ 609.727702] ? do_vfs_ioctl+0xfe0/0xfe0 [ 609.727715] do_syscall_64+0x1d5/0x640 [ 609.734727] Buffer I/O error on dev loop5, logical block 3216, async page read [ 609.736802] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 609.736812] RIP: 0033:0x45c889 [ 609.736817] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.736828] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 609.736834] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 609.736838] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 609.736846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 20:53:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:36 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0xc0c0, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:cron_spool_t:s0\x00', 0x22, 0x1) r1 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) sendmsg$inet6(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000540)="5009ddfd0472e478dd8865aeca33249164a366ec25c890bcc5ae42f2208defa816b45c5318cdc7b63809e7f18d6e664edce7a14d1efe383efaf117360e1cf85fb8fbffcbef0768d710806178bc2eaeeaf283c7c585eac93cc2", 0x59}, {&(0x7f00000004c0)="7359d41d9a4a4972006d2fb396ab4531dc9199dc49c9302f880ab18f0e40", 0x1e}, {&(0x7f00000019c0)="2bdd49e1e7438cb222bac04c9e22620469889f3b5f6ffc43b98b7bf0ac02108c5c1179900037bf38793ba704ebe31782cc28f62aa3ae4c7aeeb364922d53a7f9f91e99a6181f501f73f03f4f8c2f3eac6627e059bd77e328da130bfe5d7cdc8a503b9d11b8074f0bcd0fef5c930692a25aeed28335ae9711b9a5cb0c678215359fc8f8cd523484efd2d4781ee92222ebd2516af1f333acb01affeba23c4f73acd99a64bf7e7d04d6cc06538274d0a486b7c076e17c45d7aa701b637b87eeaad5d8048b9162", 0xc5}, {&(0x7f0000001ac0)="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", 0xff}, {&(0x7f00000005c0)="fc65", 0x2}, {&(0x7f0000000600)="d89becc74978fc1d3d1c7938ae4bb51b91fc3fad9093563332cc02d7106cf596295e8158a2302e35e4fa3decc857084ec1c4f9c830b40047ed3c", 0x3a}], 0x6, &(0x7f0000001c40)}, 0x4000044) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000280)=@ethernet={0x0, @multicast}, &(0x7f0000000300)=0x80, 0x80800) write$FUSE_INTERRUPT(r2, &(0x7f0000000180)={0x10}, 0x10) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0x606, 0x40, 0x3]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000824}, 0x4051) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:53:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) 20:53:36 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) write$P9_RFSYNC(r1, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x70, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0xff, 0x200, 0x101, 0x101, r5}, &(0x7f0000000140)=0x10) 20:53:36 executing program 0 (fault-call:12 fault-nth:70): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 609.749094] attempt to access beyond end of device [ 609.749825] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000045 [ 609.923187] loop5: rw=0, want=6434, limit=52 [ 609.988935] minix_free_inode: bit 1 already cleared 20:53:36 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x200000, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="b0f6fbddc730343cee6c0000000000000000c381b5", @ANYRES16=r3, @ANYBLOB="000200000000000000000700000004000180"], 0x3}, 0x1, 0x0, 0x0, 0x8808}, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x70, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000440)={r5, 0x6}, 0x8) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00290ef97e0281574ac30074a0f6", @ANYRES16=r3, @ANYBLOB="b0042bbd7000fcdbdf250600000008000400feb900000c00028008000500010000001400028006000e004e000000080007000400000008000600ff0f00002c00018007000600666f0000060001000200000008000500040000000800090007000000080008000b000000080005000600000008000500010000000800050007000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000884}, 0x24000000) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) connect$caif(r0, &(0x7f0000000340)=@rfm={0x25, 0x0, "6d936f6e4fcb0b383c744ec653950360"}, 0x18) r6 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000380)={0x6, 0x7, 0x4, 0x2000000, 0xfffffe01, {0x77359400}, {0x2, 0x8, 0xfd, 0x81, 0x7, 0x1, "fa2b51aa"}, 0x80000000, 0x0, @userptr=0x2, 0x2, 0x0, r6}) sendfile(r1, r7, &(0x7f0000000480), 0x2) [ 610.025996] ip6t_REJECT: ECHOREPLY is not supported. 20:53:36 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) pselect6(0x40, &(0x7f0000000000)={0x7ff, 0xbe4, 0x80, 0x8, 0x0, 0x4, 0x64d0, 0x2}, &(0x7f0000000040)={0x7, 0x5, 0x8000, 0x92, 0x6, 0x10001, 0x6, 0x3}, &(0x7f00000000c0)={0x8, 0x82, 0x9e8, 0xfffffffffffffff7, 0x401, 0x77, 0x5, 0x5}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x9]}, 0x8}) [ 610.155797] FAULT_INJECTION: forcing a failure. [ 610.155797] name failslab, interval 1, probability 0, space 0, times 0 [ 610.167181] CPU: 1 PID: 29641 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 610.175167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.184575] Call Trace: [ 610.187178] dump_stack+0x13e/0x194 [ 610.190831] should_fail.cold+0x10a/0x14b [ 610.195010] should_failslab+0xd6/0x130 [ 610.199183] kmem_cache_alloc+0x2b5/0x770 [ 610.203431] ? __mutex_unlock_slowpath+0x75/0x780 [ 610.206470] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. [ 610.208282] __kernfs_new_node+0x6f/0x470 [ 610.208297] kernfs_new_node+0x7b/0xe0 [ 610.208310] __kernfs_create_file+0x3d/0x319 [ 610.208324] sysfs_add_file_mode_ns+0x1e1/0x450 [ 610.208338] internal_create_group+0x23b/0x7e0 [ 610.208353] sysfs_create_groups+0x92/0x130 [ 610.241653] device_add+0x1040/0x1400 [ 610.245478] ? device_private_init+0x180/0x180 [ 610.250082] netdev_register_kobject+0x180/0x390 [ 610.254847] register_netdevice+0x7ce/0xc70 [ 610.259186] ? netdev_change_features+0x80/0x80 [ 610.263875] __tun_chr_ioctl+0x20a3/0x33d0 [ 610.268125] ? tun_chr_close+0x60/0x60 [ 610.272026] ? tun_chr_compat_ioctl+0x30/0x30 [ 610.276528] do_vfs_ioctl+0x75a/0xfe0 [ 610.280424] ? selinux_file_mprotect+0x5c0/0x5c0 [ 610.285189] ? ioctl_preallocate+0x1a0/0x1a0 [ 610.289616] ? security_file_ioctl+0x76/0xb0 [ 610.294159] ? security_file_ioctl+0x83/0xb0 [ 610.298574] SyS_ioctl+0x7f/0xb0 [ 610.301971] ? do_vfs_ioctl+0xfe0/0xfe0 [ 610.305966] do_syscall_64+0x1d5/0x640 [ 610.309942] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 610.315236] RIP: 0033:0x45c889 [ 610.318437] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.326349] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 610.334248] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 610.341785] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 610.349960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 610.357430] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000046 20:53:36 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffffd, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x19004000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x40040) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:53:36 executing program 0 (fault-call:12 fault-nth:71): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 610.403729] ip6t_REJECT: ECHOREPLY is not supported. [ 610.446067] ip6t_REJECT: ECHOREPLY is not supported. 20:53:36 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000300)={0x78, 0x0, &(0x7f0000000240)="ab5cbd04f4b5b4336431314911732331240475f5aedbc868ac3305e5e7d1d20b9b3615e07f12cede0ce1b0c2630864fd3ab2a4db4fa1317bb5dcc529d52c11d33189d9d79fc1dfc363347e0c8802e87e1fd9c6fe5b547c0491c53866acce1327174ce1bc323575d5005422545a59e349cd05c456ec9681bb80121339152ad333cb", {0x20, 0xfff, 0x3147504d, 0x3, 0x4, 0xa1c2, 0x7, 0x6}}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x2) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000000)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000980)=""/4096) sendfile(r0, r0, &(0x7f0000000480), 0xa198) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x200, 0x101080) [ 610.632086] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 610.635795] FAULT_INJECTION: forcing a failure. [ 610.635795] name failslab, interval 1, probability 0, space 0, times 0 [ 610.651360] CPU: 1 PID: 29668 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 610.659434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.669404] Call Trace: [ 610.672000] dump_stack+0x13e/0x194 [ 610.675672] should_fail.cold+0x10a/0x14b [ 610.679930] should_failslab+0xd6/0x130 [ 610.683911] kmem_cache_alloc+0x2b5/0x770 [ 610.688072] ? kernfs_add_one+0xef/0x3a0 [ 610.692157] __kernfs_new_node+0x6f/0x470 [ 610.696316] kernfs_new_node+0x7b/0xe0 [ 610.700297] kernfs_create_dir_ns+0x3c/0x130 [ 610.704715] internal_create_group+0xea/0x7e0 [ 610.709308] dpm_sysfs_add+0x21/0x1c0 [ 610.713119] device_add+0x932/0x1400 [ 610.716850] ? device_private_init+0x180/0x180 [ 610.721443] netdev_register_kobject+0x180/0x390 [ 610.726213] register_netdevice+0x7ce/0xc70 20:53:36 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x4}) [ 610.730545] ? netdev_change_features+0x80/0x80 [ 610.735230] __tun_chr_ioctl+0x20a3/0x33d0 [ 610.739479] ? tun_chr_close+0x60/0x60 [ 610.743384] ? tun_chr_compat_ioctl+0x30/0x30 [ 610.747887] do_vfs_ioctl+0x75a/0xfe0 [ 610.751698] ? selinux_file_mprotect+0x5c0/0x5c0 [ 610.756464] ? ioctl_preallocate+0x1a0/0x1a0 [ 610.761247] ? security_file_ioctl+0x76/0xb0 [ 610.765665] ? security_file_ioctl+0x83/0xb0 [ 610.770090] SyS_ioctl+0x7f/0xb0 [ 610.773639] ? do_vfs_ioctl+0xfe0/0xfe0 [ 610.777653] do_syscall_64+0x1d5/0x640 [ 610.781556] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 610.786745] RIP: 0033:0x45c889 [ 610.789932] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.797644] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 610.804915] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 610.812189] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 610.819462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 610.827001] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000047 20:53:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) [ 610.856548] attempt to access beyond end of device [ 610.862259] loop5: rw=2049, want=6434, limit=52 [ 610.867826] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 610.876517] attempt to access beyond end of device 20:53:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 610.900546] loop5: rw=0, want=6434, limit=52 [ 610.906923] Buffer I/O error on dev loop5, logical block 3216, async page read 20:53:37 executing program 0 (fault-call:12 fault-nth:72): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:37 executing program 2: r0 = gettid() r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) capget(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000040)={0x3, 0x3f, 0x80000000, 0x1, 0x0, 0x1000}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:53:37 executing program 1: open(&(0x7f00000001c0)='./file0\x00', 0x40c2, 0x20) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:53:37 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0x3ff, "e7e338", 0x3, 0x8}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000340)={'bond_slave_1\x00', {0x2, 0x4e21, @empty}}) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x808000, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x4863, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0xfffffffffffffffe, 0x4}, 0x10) socket$unix(0x1, 0x5, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x28, 0x2, @thr={&(0x7f00000019c0)="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", &(0x7f00000029c0)="8c56b134d21666ba16131faf17d3b325a95a5de66d95b102c0de6a69776fb6433e7a53b09f3fe5d0cc03a180742e7d766281e3cfcc718c76b2ebabcfeb0eaab42d3ec0faf281b2c0b1d9c90106511698a936fc9d24af4874c35268e740dad796cedce12b294281b46be9b4eede37d73f54cd8426983a413bf3b87a8b7cca47c6d1668e895f242ac360ce042779eaac1a77767f38ff3ec56e1223ab02f63b092519a047cc5676d08cd45ab1fb4b9b06c96933bbe1569234d3163983f6db49ee43012b998ac37e33639e046f2795ff6deff5444c994369f631ccd8e99d092330ff58d213d3b2ad88e50c38e911370bc82f2793e6de76efa503c9bcc7ebd47cefe350d68868fabb08a7edda9d7aa1a952d29f584a092822cdc05cdd127368de6c7cccb17c6a5923ca3461861edffbc23d3a75e4f0aae4899e3cf0a725fdbd3a6aff3fb8a6ecd423967dc22bbc26f5c5eea4a70a3cecc5ea837a378a5030c6ce513ec7031c66163d6f57bc6e5ce318d2ec885f4f20745958210ddc1ed4c6ea04219748f2d37bcb355adfda42de2573dc444d4a8f02cfae553272db5be7e15da836f22fb96b71ed240517ba23ee5f4151c62912de23e97b4e2ebf1b6e83f7573669fb2be05a46ccfb5ca8b6ecde1b910441e374df43eb02ae352ecaaad7297b1fc84397890c3ff0e774a3a2480e77a6160e784a6e8c827ccd218ab39964892b9f586ad22ff32b076e9a7597abaa51d00f483052a29a5259c9c55ebf050d7a4aea37c6085fc99c73d54d366a20c96dbf94259cd398a4e3697c445b89d5f221dbe5a8de25084ca553781a33e914021edc138f4db8af045c6afd0d6b23de7940f177597bfa593f0f032ca4998e5639680479f3fa9824ea8afcc840303527d7d453ce162a03b3ffc0b43f28ed117e9e48f5687a84192bc29fed58ac0dca8511c9331e90728c0b89f5516115e44ba55cee327341e0282c5790203698c869220a2f3918e79505f3094c2cfd029aa9d05d622e2f76bec8af07f2800d374f6130775be6d8ca134a0269a20f2c7195fccfd25013283940ba17c10b7db65686c64e4b05b2af3c2819923ae3f94c5af5e46495af243268c19d8e1149be3b41b0af1ba1869abf53495bec2d5ed18c2c64622e2da379b7da2d0b55f80c066906190e54bed291f0937e6ee76b5790f261509372e7292ca314d0720be7c295f87ce4efb100d79acbf6df244018fe1772a4fb46c0581aea434af9d344636731d1ec0177a0caa14771f6c0ab158f43adc7fca1b65406d29691098b0ff45de44a527b1895367b5b836067b93cbf1896c383d56e3987ab068e21c2387cc9f74fdfd4db4d6e9cd622bc84b108e445936dce908d5536c606230126a046e4266763a44e0adfb97d97486650c7beb19b2bd227dbec11913f55eb372b2614a34cd117f8429f4df0e4b030f94a1a69f92589af3083cd10a9b5ae8c5678d94e063c7cb632270c7564675bede68e2d94a2f7d5dd451ae4f79c8e37328adca2c7299ed8300c06baf60e3958a8c242fb72b61794e9f47a0da9621dcc64e9a069deecfb6ae724b27c14e9f8fb13c8840ee7ff6537ee312f6e148f9902d1e7e3fb4982be9371c7dcd16400533ba304220a52589ce1d63c7e075721410e89366c0dca5850f8f9c0f1228577a975e1b83e6f2e945b99b15d6585652d9854576f12ad1f68411b8294d1eef94cb2c89d7ee89cbd91bbd8fb7b836e69a4a804da9cb07e4a2dcecf8f350ec0c37c0d9a59f11751a4f9e4e61ba2cd3c1b5d57c68cb0e0d5e0ea733b182ad3e8b697a3088909c89db31f2c4122790e26eaf24cd2e3a33a2b439550b6a9e5c94b3733b4e4e8a43e0dde411089a8b334c2b545c2ca8a1c5d4cf643a9ea56ea7c6a452814e91d0b54efedc99241e85c7e9bb7c6e1896cd1fc82b589772312a04a00d4f8ae227e1425c8827027df63347ea760797fa820453146ac7610aef62a72e01d2f31209d903b2d5735b01c64fdf44033932df6b55bdf4f15a751a9e740439816acdf14a07ac9eb7cb1c3a789eb2142b6f85fd3a285cc0fe23a7b1e2fa9d94975162e70ef2365f2d15f803f32f539cc34baa5cdb2e0c8e17001f5230acc6884e60a6e4a4b4b93702a5fbd127c5632b0771783e031ebfaa3609857c8306e1de5d151d9b34aec1799129f020afe9b0042223e43aa97abcc00197d177c20f6545b9586c86f8f6855430f8928bd843a731e82fd3ad7e60e4585f105a8732df6bd137b32dd0a30dbe31bfe916f7c1131d68efc857eff2148326992399aaa392afbcb8c9b771183b6ec657bdb132654956e5baa89a63a79f7ed73cfbeecde118b40f40cc8d46c8fae73c5e8a44bedf4110e6a7dac6664aa79330256f50ee0296ab8eb4f6cebd6b9f75651052d3c3b9d614eedfb347844fd41e3a7d8771babcb3b67362caff4729c2794b40e47726a4f5f18eed90f19ff57d31faf7590f2f2070fc69dcc88f548d2d4eb1b3a0ce3cb5f88d3c0a62719f880b8595dc97a58b6d26d79b828218d6598705a2937bc32092596f482136aa631235d99360253bb849ed08afa8fd406e0287f478992d55512f8a465be003d8ba30c3fe6a071de58b8f293fb379a909894c9fd5fe97fd6ecc416fa33d871d3f969bb11b0c30571cd87a6e51a8d269f8e0709e9e6e689bf7bbd234750e6bed86e5ab5bde230fbcc91bd0c1de1a58f5f6e8edfb704ccb4df479491464df63ace925f88ecfb6909928ea1d8717b539392958470ff6820cce936f63da7066fb131f658a7b57a0bdb7d514edbe86223e5a957f75923096517ff577fe04ae3c8b0ab5714b8cd6d402b1ff66894c240361d0a2fb68f920076e525ad57effc50fa30f97faaa3b12401c38bb6ca0ca321ea6d863bb97249a4d50e8c22e1a1f4b030b087f42feb657f3d63b3db61b3ffdf699941da9654894f6b968393ee7ad89cbfb434a1b8c1f161b78a87f85fde60284bc96e88d6ef9fb010002ef0d50f2543734e1e70c97fc4a1bf82d69e1d3234e0042a4a874455d2abc263087ccc23a7273ccb694925b2d5ea0063a03c9bb478a3e66c8748fdc30b01f1b9248916f7803b63a3ca37549d243df6d15d53758b4e5ac92917d9c33a6c08f9fb780e9fd3aeff78d81192b7cda269fb59679470203873920b28437a0f941bf6e7eea3a5e449440dad8ce4d0ee4696d92404de680a213eef908417e7c32c9256e4760dea7aa22cbde2846eda30c295576cf305d6c1a8e79f661ccf38a2f9022a2fffc6542c5b901c1ee6ca39fa55f17c4d2a38ed1c092bdcdfa4f990567f198e84d51e2ac0cbedb879b34032697338c5fc89759bfe40756847a97c738dac0d9bc46e5358e8b221ce72e267088f48fc798b58e5c34388dd6b94db830839daedd97cb4dfc4b326b6f46fd17baaa1ef09ad161f8d1a9caea1b611d14972a5fa5e7cd5b9b3343f1937a323f72a553da9ab72cf12dc7ca9f3b7d6f43b5e0152fc0ebcccbe216970be27cb9c228094d4ea2f0e6bc800b585ed3c261766199ba0b389f2bbd524b7b7711f326b7983f838f1c416c278abb0c3c5efd46d1b1bc388f3134bb86c986fae581778be23e39fd4be969ce97318e55bf5f6bf4f7808ded999e36141a3e9427ec81799d05d7477ee1d05dda7804ea23d8f7e76c675dd235c04bb097ca5aa1837ffd1db8737b9b25dc4c044ad7b3eb2ed00010bc3a96ad0c46aea1eeaa9e065974e3aa662c7542025b1add0277b3860fc099c8e54ae9cd952331e0b06ad3987b8f3b88df2880b6e6eb917518d571593c3929050354967d033f15a9f31a90e07f3386d55ebb2890b6407b2e903ce18929468640012acce1af4edbaaca0c0e7eba1ec6605f56405dec5f3bb90926bdb549d51c352162366d5667fad9316e794245dac2a078f618ccc708ab3ed93f770d9305b578bb9b476460439e27d3b4c8fa330ff29939ea470b8e7c5eae5a80ce224be0821408f97e61e0cdcb89115f713ec945b6ecfd1e12fd58142943cc8d513097bf15a22c214d8830c0a13edcc4b2632ec819d2b03aa46cc6af3dde00d5a0db53a76ef62609e1e7cdef01ba4bbba65b85519bee48f32839a935ac15611f07fa20d7feda1c33200f71a27dbddd0eecf65bb8d26bb741fe7972f44af6c363e9b5690e4cf9832ec1961ed87479c26ab82d65eb14b0a04767bd1446cb65628a6440c4868a1b5ff682617b871a2775756270144b637d6e37ab45e63f166460485832a747f58fae1786d3fb9b3cd3744722f8e7b5445322491ce08c4702dc3b3a40230d2fe633bd8d9d331c6cf0689a6462cb0f267ff7b83e409b4f0afabb29017c93896e7d61ecefda5c2b5f681b7a3ca7552e3e5d4bd63102cbb083cea235a15ad98d9d0818536ea7dd0890b355011ed8dcb7b9a24c69b460d1075d021d66677fbeaf8dc560a461f6dcfbf7d3e964da6c9bc0d51eead85443ef23b758d0418d4a0c0ae4cd90e5c97105c3376bc03f9fb33fd6a2419beff38aaee142005825e1e900cf43903ec315243449beb4d2b11e057d35662bf56cfeb9f7726aeccf517645e6fd760bc0eb36e46403b2e8aa1ff090bdc5a830f037c54884cc86641caf290b7230ae1448c857f53079281fd6df33e0d3c1e2d0c4b83ece7dbf8d0045a8f5a05f3210ba57b7c8b6201f91f0f5e6dc1acf56940544eee62e4373879b90a58bfd8c1195668122752fffda1ab5b4c7277036b25fcedcb82d4db6bb6708614227e1e13a4a738eae1cae6923bb6cf010aef3a0a4404d711e7c2b6ee5a3df8c84882c6be26d226dd7a128d1149584e5c22f51a2be9226ff4aeb7d85595a962e6a22fcb87c42e927e456b624acff307a2fc2bc0341c1c1babf08c6d929fc8b385d80c05afefc546dbd2d7bcb6f8280dd1ce85507c8e91650796771ead3779cb5b861f95914945c420f5ee687d68415288b07c1db48996444b403609d99afc859b917fab185b4725d2367d4ca373a44311b8c1f672b0309cb8ab6d17834b41ee33ab8f949d20edc53f379d4ed563406d2b06113164a46c15a9f1f75ca66daf763805b2cdf45e0af654b6157a9ca9dbf011617fc01d77502d4b8cdcb062ef08f160d2f6a278ea7df7cf43f013951e83a8cb87520c9968e9d95c7cafd2ab03687a82a50c200c08a83fb0eabbf47dbd61c79e0e7433b925254daac283c77dc1f40ade73ec2db013bf403ef254798d4b166105b01882ae6d98ecf68f71276b86b91661b7a9c39a049da251956d5cf79dd419c57366d8804a138be222dfe7318619fe7448c96f4958e49cac260447de2a750f19024fdba3e338f3496433e1a3f3f5456a5c503dcb0063a4a1e351933d4f57ff7f96c57d163c7506250be06b60c37927a13048ceeaacb41dce0befb1b26f996dff140262ebffe043952ad61474833035848f658008c4607bc918383798d5f7507642108e27786d0e72a83f614202eaa5e3a118a2cbfebbddb3cbe0e342e3ec75e59edf32c0a5f7c87bbb2acc0c6523de38268d452da50e6556e8deb1cbcb13c7e7445201894d5df62e13cff32df7776b1f5ee7354d108e3775fcc18168291c417d56775752ad018ac212cec02ffed12b8383cf2c2656a583cdc07504622256bb2151f1b3089edbae89134c5cb734959c61473924fe5270f106f5aff13189d576216963f5596bc8d94b63fe59dc888c5cb148cdd69fd176b738b5c77eb097fa9742961c845ae71b0e952d50e4320503dcd88c9b746cdb8351d9fdc7966489d14af52680c55c7c11bbb345299ce92c3bf5f31eaa94ab30c400398392547cb6d5b8e601"}}, &(0x7f0000000200)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280), &(0x7f0000000300)) [ 611.010145] minix_free_inode: bit 1 already cleared 20:53:37 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f5}], 0x20, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10}, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{}]}) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) r5 = open(&(0x7f0000000380)='./file0\x00', 0x141042, 0x0) write$UHID_INPUT(r5, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r5, r5, &(0x7f00000000c0), 0x8080fffffffe) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000000340)=0x2) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000000400)={0x2, 0x4e20, @rand_addr=0x640100fe}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x70, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r6, 0x8}, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 611.121198] FAULT_INJECTION: forcing a failure. [ 611.121198] name failslab, interval 1, probability 0, space 0, times 0 [ 611.132665] CPU: 1 PID: 29715 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 611.140754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.150330] Call Trace: [ 611.152948] dump_stack+0x13e/0x194 [ 611.156593] should_fail.cold+0x10a/0x14b [ 611.160756] should_failslab+0xd6/0x130 [ 611.164738] kmem_cache_alloc+0x2b5/0x770 [ 611.168899] ? kernfs_find_and_get_ns+0x46/0x50 [ 611.173578] __kernfs_new_node+0x6f/0x470 [ 611.177737] kernfs_new_node+0x7b/0xe0 [ 611.181757] __kernfs_create_file+0x3d/0x319 [ 611.186184] sysfs_add_file_mode_ns+0x1e1/0x450 [ 611.190880] sysfs_merge_group+0xdc/0x200 [ 611.195216] dpm_sysfs_add+0x122/0x1c0 [ 611.199113] device_add+0x932/0x1400 [ 611.202971] ? device_private_init+0x180/0x180 [ 611.207765] netdev_register_kobject+0x180/0x390 [ 611.212545] register_netdevice+0x7ce/0xc70 [ 611.216970] ? netdev_change_features+0x80/0x80 [ 611.221651] __tun_chr_ioctl+0x20a3/0x33d0 [ 611.226342] ? tun_chr_close+0x60/0x60 [ 611.231027] ? tun_chr_compat_ioctl+0x30/0x30 [ 611.235649] do_vfs_ioctl+0x75a/0xfe0 [ 611.239547] ? selinux_file_mprotect+0x5c0/0x5c0 [ 611.244318] ? ioctl_preallocate+0x1a0/0x1a0 [ 611.248750] ? security_file_ioctl+0x76/0xb0 [ 611.253445] ? security_file_ioctl+0x83/0xb0 [ 611.257870] SyS_ioctl+0x7f/0xb0 [ 611.261241] ? do_vfs_ioctl+0xfe0/0xfe0 [ 611.265228] do_syscall_64+0x1d5/0x640 [ 611.269648] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 611.274873] RIP: 0033:0x45c889 [ 611.278176] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 611.285894] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 611.293347] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 611.300625] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 611.307909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 611.315185] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000048 20:53:37 executing program 0 (fault-call:12 fault-nth:73): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:37 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000200)={0x0, 0x9, 0xbe, &(0x7f00000001c0)=0xbd9}) [ 611.568086] FAULT_INJECTION: forcing a failure. [ 611.568086] name failslab, interval 1, probability 0, space 0, times 0 [ 611.579561] CPU: 0 PID: 29742 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 611.587494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.597135] Call Trace: [ 611.599724] dump_stack+0x13e/0x194 [ 611.603370] should_fail.cold+0x10a/0x14b [ 611.607530] should_failslab+0xd6/0x130 [ 611.611512] kmem_cache_alloc+0x2b5/0x770 [ 611.615677] ? kernfs_find_and_get_ns+0x46/0x50 [ 611.620347] __kernfs_new_node+0x6f/0x470 [ 611.624504] kernfs_new_node+0x7b/0xe0 [ 611.628398] __kernfs_create_file+0x3d/0x319 [ 611.632811] sysfs_add_file_mode_ns+0x1e1/0x450 [ 611.637517] sysfs_merge_group+0xdc/0x200 [ 611.641670] dpm_sysfs_add+0x122/0x1c0 [ 611.645578] device_add+0x932/0x1400 [ 611.649303] ? device_private_init+0x180/0x180 [ 611.653899] netdev_register_kobject+0x180/0x390 [ 611.658664] register_netdevice+0x7ce/0xc70 [ 611.662997] ? netdev_change_features+0x80/0x80 [ 611.667783] __tun_chr_ioctl+0x20a3/0x33d0 [ 611.672024] ? tun_chr_close+0x60/0x60 [ 611.675923] ? tun_chr_compat_ioctl+0x30/0x30 [ 611.680431] do_vfs_ioctl+0x75a/0xfe0 [ 611.684238] ? selinux_file_mprotect+0x5c0/0x5c0 [ 611.689142] ? ioctl_preallocate+0x1a0/0x1a0 [ 611.693655] ? security_file_ioctl+0x76/0xb0 [ 611.701713] ? security_file_ioctl+0x83/0xb0 [ 611.706147] SyS_ioctl+0x7f/0xb0 [ 611.709607] ? do_vfs_ioctl+0xfe0/0xfe0 [ 611.713593] do_syscall_64+0x1d5/0x640 [ 611.717594] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 611.722785] RIP: 0033:0x45c889 [ 611.725979] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 611.733698] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 611.740970] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 611.748260] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 611.755530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 611.762891] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000049 20:53:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)) 20:53:38 executing program 0 (fault-call:12 fault-nth:74): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:38 executing program 1: get_thread_area(&(0x7f0000000300)={0x0, 0x20000000, 0x2000, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1}) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/mice\x00', 0x20040) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xe36) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) sendmsg$AUDIT_TTY_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f8, 0x20, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40840}, 0x4000040) [ 612.103674] kauditd_printk_skb: 26 callbacks suppressed [ 612.103684] audit: type=1804 audit(1586897618.336:14590): pid=29768 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir069373542/syzkaller.j3oO9e/444/bus" dev="sda1" ino=16103 res=1 [ 612.137942] FAULT_INJECTION: forcing a failure. [ 612.137942] name failslab, interval 1, probability 0, space 0, times 0 [ 612.149759] CPU: 0 PID: 29769 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 612.157652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.167023] Call Trace: [ 612.169626] dump_stack+0x13e/0x194 [ 612.173269] should_fail.cold+0x10a/0x14b [ 612.177432] should_failslab+0xd6/0x130 [ 612.181415] kmem_cache_alloc+0x2b5/0x770 [ 612.185833] ? __mutex_unlock_slowpath+0x75/0x780 [ 612.190684] __kernfs_new_node+0x6f/0x470 [ 612.194844] kernfs_new_node+0x7b/0xe0 [ 612.198768] __kernfs_create_file+0x3d/0x319 [ 612.203203] sysfs_add_file_mode_ns+0x1e1/0x450 [ 612.208145] sysfs_merge_group+0xdc/0x200 [ 612.212571] dpm_sysfs_add+0x122/0x1c0 [ 612.216550] device_add+0x932/0x1400 [ 612.220301] ? device_private_init+0x180/0x180 [ 612.224893] netdev_register_kobject+0x180/0x390 [ 612.229664] register_netdevice+0x7ce/0xc70 [ 612.233995] ? netdev_change_features+0x80/0x80 [ 612.238676] __tun_chr_ioctl+0x20a3/0x33d0 [ 612.242926] ? tun_chr_close+0x60/0x60 [ 612.246829] ? tun_chr_compat_ioctl+0x30/0x30 [ 612.251347] do_vfs_ioctl+0x75a/0xfe0 [ 612.255154] ? selinux_file_mprotect+0x5c0/0x5c0 [ 612.260001] ? ioctl_preallocate+0x1a0/0x1a0 [ 612.264427] ? security_file_ioctl+0x76/0xb0 [ 612.268840] ? security_file_ioctl+0x83/0xb0 [ 612.273257] SyS_ioctl+0x7f/0xb0 [ 612.276627] ? do_vfs_ioctl+0xfe0/0xfe0 [ 612.280610] do_syscall_64+0x1d5/0x640 [ 612.284600] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 612.289790] RIP: 0033:0x45c889 [ 612.292984] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.300694] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 612.307964] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 612.315242] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 612.322519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 612.329813] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000004a 20:53:38 executing program 0 (fault-call:12 fault-nth:75): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:38 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x5e29, 0xc000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @aes128, 0x8, "253e69098b8a878a"}) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) [ 612.426960] audit: type=1804 audit(1586897618.656:14591): pid=29768 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir069373542/syzkaller.j3oO9e/444/bus" dev="sda1" ino=16103 res=1 20:53:38 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f00000001c0)={0x10000, "85b303a60d6ecde0dd950dbedb314903277bd4d779c9857174a6b54a607473bb", 0x2, 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 612.532975] audit: type=1800 audit(1586897618.766:14592): pid=29787 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16097 res=0 [ 612.568435] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 612.617821] attempt to access beyond end of device [ 612.645607] loop5: rw=2049, want=6434, limit=52 [ 612.650865] audit: type=1800 audit(1586897618.876:14593): pid=29795 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16102 res=0 [ 612.674043] FAULT_INJECTION: forcing a failure. [ 612.674043] name failslab, interval 1, probability 0, space 0, times 0 [ 612.685695] CPU: 1 PID: 29798 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 612.690887] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 612.693593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.693598] Call Trace: [ 612.693615] dump_stack+0x13e/0x194 [ 612.693637] should_fail.cold+0x10a/0x14b [ 612.693652] should_failslab+0xd6/0x130 [ 612.725183] kmem_cache_alloc+0x2b5/0x770 [ 612.729329] ? __mutex_unlock_slowpath+0x75/0x780 [ 612.734168] __kernfs_new_node+0x6f/0x470 [ 612.738305] kernfs_new_node+0x7b/0xe0 [ 612.742197] __kernfs_create_file+0x3d/0x319 [ 612.746612] sysfs_add_file_mode_ns+0x1e1/0x450 [ 612.751335] sysfs_merge_group+0xdc/0x200 [ 612.755491] dpm_sysfs_add+0x122/0x1c0 [ 612.759367] device_add+0x932/0x1400 [ 612.763079] ? device_private_init+0x180/0x180 [ 612.767665] netdev_register_kobject+0x180/0x390 [ 612.772425] register_netdevice+0x7ce/0xc70 [ 612.776753] ? netdev_change_features+0x80/0x80 [ 612.781438] __tun_chr_ioctl+0x20a3/0x33d0 [ 612.785695] ? tun_chr_close+0x60/0x60 [ 612.789587] ? tun_chr_compat_ioctl+0x30/0x30 [ 612.794080] do_vfs_ioctl+0x75a/0xfe0 [ 612.797871] ? selinux_file_mprotect+0x5c0/0x5c0 [ 612.802639] ? ioctl_preallocate+0x1a0/0x1a0 [ 612.807070] ? security_file_ioctl+0x76/0xb0 [ 612.811484] ? security_file_ioctl+0x83/0xb0 [ 612.815899] SyS_ioctl+0x7f/0xb0 [ 612.819266] ? do_vfs_ioctl+0xfe0/0xfe0 [ 612.823244] do_syscall_64+0x1d5/0x640 [ 612.827140] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 612.832332] RIP: 0033:0x45c889 [ 612.835522] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.843229] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 612.850498] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 612.857776] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 612.865045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 612.872316] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000004b [ 612.893694] attempt to access beyond end of device [ 612.908151] audit: type=1804 audit(1586897619.136:14594): pid=29795 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir069373542/syzkaller.j3oO9e/445/bus" dev="sda1" ino=15792 res=1 [ 612.912814] loop5: rw=0, want=6434, limit=52 [ 612.997752] Buffer I/O error on dev loop5, logical block 3216, async page read [ 613.002547] audit: type=1804 audit(1586897619.176:14595): pid=29795 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir069373542/syzkaller.j3oO9e/445/bus" dev="sda1" ino=15792 res=1 [ 613.039865] attempt to access beyond end of device 20:53:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)) 20:53:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:39 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000000000)=""/41, 0x29) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) r2 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(r2, 0x0, 0xe, &(0x7f0000000280)=0x7f, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:53:39 executing program 0 (fault-call:12 fault-nth:76): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 613.044841] loop5: rw=0, want=6434, limit=52 [ 613.072609] Buffer I/O error on dev loop5, logical block 3216, async page read [ 613.100194] attempt to access beyond end of device [ 613.102648] audit: type=1800 audit(1586897619.336:14596): pid=29816 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16102 res=0 [ 613.105936] loop5: rw=0, want=6434, limit=52 [ 613.235506] FAULT_INJECTION: forcing a failure. [ 613.235506] name failslab, interval 1, probability 0, space 0, times 0 [ 613.246835] CPU: 1 PID: 29831 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 613.254720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.264078] Call Trace: [ 613.266687] dump_stack+0x13e/0x194 [ 613.270332] should_fail.cold+0x10a/0x14b [ 613.274492] should_failslab+0xd6/0x130 [ 613.278478] kmem_cache_alloc+0x2b5/0x770 [ 613.282631] ? __mutex_unlock_slowpath+0x75/0x780 [ 613.287483] __kernfs_new_node+0x6f/0x470 [ 613.291637] kernfs_new_node+0x7b/0xe0 [ 613.295529] __kernfs_create_file+0x3d/0x319 [ 613.299945] sysfs_add_file_mode_ns+0x1e1/0x450 [ 613.304623] sysfs_merge_group+0xdc/0x200 [ 613.308778] dpm_sysfs_add+0x122/0x1c0 [ 613.312670] device_add+0x932/0x1400 [ 613.316401] ? device_private_init+0x180/0x180 [ 613.320990] netdev_register_kobject+0x180/0x390 [ 613.325751] register_netdevice+0x7ce/0xc70 [ 613.330077] ? netdev_change_features+0x80/0x80 [ 613.334760] __tun_chr_ioctl+0x20a3/0x33d0 [ 613.339012] ? tun_chr_close+0x60/0x60 [ 613.342910] ? tun_chr_compat_ioctl+0x30/0x30 [ 613.347408] do_vfs_ioctl+0x75a/0xfe0 [ 613.351217] ? selinux_file_mprotect+0x5c0/0x5c0 [ 613.355980] ? ioctl_preallocate+0x1a0/0x1a0 [ 613.360405] ? security_file_ioctl+0x76/0xb0 [ 613.364812] ? security_file_ioctl+0x83/0xb0 [ 613.369244] SyS_ioctl+0x7f/0xb0 [ 613.372634] ? do_vfs_ioctl+0xfe0/0xfe0 [ 613.376615] do_syscall_64+0x1d5/0x640 [ 613.380511] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 613.385703] RIP: 0033:0x45c889 [ 613.388888] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.396598] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 613.403869] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 613.411142] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 613.418433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 613.425797] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000004c 20:53:39 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$ppp(r0, &(0x7f00000001c0)="d64f8f62179861301eb1dd3751b9c7111b9a747d2a0ea309c3f77db86e38ea06edb2fc9df1860758bf12fdea273131a20aa313cc58f58f78b1c5d8e654ef19daa584fb124de332a0737403842d1860ad0ae089f9b363af9e8a244b08462784ff58b27f6abddd5cb9d4233ba4e4d06e6f5787fddca6ea0abc1a961e9c949144a016b980343f92a70329764734faf7788eb384d22026c51242bf2c527704b09c5aeebd07a749bf15acddfff54a78ecbcc2188ce9fc8d256bccddbf30e0b9f807c957a63484ed65d3990de7f942f6e945be5040323f693ddc2547390c8df53b9dbb3f2367cccd779f6b5cb8bbe4117f0cf6a04a76335840d3", 0xf7) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) [ 613.459385] minix_free_inode: bit 1 already cleared [ 613.541575] audit: type=1800 audit(1586897619.776:14597): pid=29836 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16080 res=0 [ 613.571697] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 613.591250] attempt to access beyond end of device [ 613.602701] loop5: rw=2049, want=6434, limit=52 [ 613.612699] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 613.622135] attempt to access beyond end of device [ 613.627246] loop5: rw=0, want=6434, limit=52 [ 613.632582] attempt to access beyond end of device [ 613.637714] loop5: rw=0, want=6434, limit=52 20:53:39 executing program 0 (fault-call:12 fault-nth:77): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 613.643264] Buffer I/O error on dev loop5, logical block 3216, async page read [ 613.676377] attempt to access beyond end of device [ 613.686941] loop5: rw=0, want=6434, limit=52 20:53:39 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x0, &(0x7f0000000040), 0x1000, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) statfs(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000cc0)=""/4096) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000480), 0xa198) [ 613.702845] attempt to access beyond end of device [ 613.707936] loop5: rw=0, want=6434, limit=52 [ 613.779180] minix_free_inode: bit 1 already cleared [ 613.805661] FAULT_INJECTION: forcing a failure. [ 613.805661] name failslab, interval 1, probability 0, space 0, times 0 [ 613.816979] CPU: 0 PID: 29852 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 613.824869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.834233] Call Trace: [ 613.836849] dump_stack+0x13e/0x194 [ 613.840499] should_fail.cold+0x10a/0x14b [ 613.844674] should_failslab+0xd6/0x130 [ 613.848647] kmem_cache_alloc_trace+0x2db/0x7b0 [ 613.853371] ? lock_downgrade+0x6e0/0x6e0 [ 613.858484] ? devm_device_remove_groups+0x50/0x50 [ 613.863428] kobject_uevent_env+0x1fa/0xc50 [ 613.867760] ? wait_for_completion+0x390/0x390 [ 613.872354] device_add+0xa02/0x1400 [ 613.876079] ? device_private_init+0x180/0x180 [ 613.880664] netdev_register_kobject+0x180/0x390 [ 613.885434] register_netdevice+0x7ce/0xc70 [ 613.889759] ? netdev_change_features+0x80/0x80 [ 613.894432] __tun_chr_ioctl+0x20a3/0x33d0 [ 613.898659] ? tun_chr_close+0x60/0x60 [ 613.902542] ? tun_chr_compat_ioctl+0x30/0x30 [ 613.907026] do_vfs_ioctl+0x75a/0xfe0 [ 613.910816] ? selinux_file_mprotect+0x5c0/0x5c0 [ 613.915841] ? ioctl_preallocate+0x1a0/0x1a0 [ 613.920243] ? security_file_ioctl+0x76/0xb0 [ 613.924648] ? security_file_ioctl+0x83/0xb0 [ 613.929133] SyS_ioctl+0x7f/0xb0 [ 613.932489] ? do_vfs_ioctl+0xfe0/0xfe0 [ 613.936630] do_syscall_64+0x1d5/0x640 [ 613.940524] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 613.945720] RIP: 0033:0x45c889 [ 613.948908] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.956620] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 613.963895] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 613.971170] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 613.978447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 613.985744] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000004d 20:53:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)) 20:53:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 614.072445] audit: type=1800 audit(1586897620.306:14598): pid=29864 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16022 res=0 20:53:40 executing program 0 (fault-call:12 fault-nth:78): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:40 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r2, r2, &(0x7f0000000480), 0xa198) 20:53:40 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x8, 0x81}, {0x4, 0x3f}, {0x6638, 0x2}, {0x6d2, 0x9}, {0x1000, 0xffa7}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 614.252723] audit: type=1800 audit(1586897620.486:14599): pid=29888 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16097 res=0 [ 614.358501] FAULT_INJECTION: forcing a failure. [ 614.358501] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 614.370691] CPU: 1 PID: 29901 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 614.378583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.387984] Call Trace: [ 614.390763] dump_stack+0x13e/0x194 [ 614.394497] should_fail.cold+0x10a/0x14b [ 614.398663] __alloc_pages_nodemask+0x1bf/0x700 [ 614.403358] ? save_trace+0x290/0x290 [ 614.407188] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 614.412312] cache_grow_begin+0x7b/0x410 [ 614.416388] kmem_cache_alloc_trace+0x6cf/0x7b0 [ 614.421108] ? devm_device_remove_groups+0x50/0x50 [ 614.426071] kobject_uevent_env+0x1fa/0xc50 [ 614.431623] ? wait_for_completion+0x390/0x390 [ 614.436225] device_add+0xa02/0x1400 [ 614.439953] ? device_private_init+0x180/0x180 [ 614.444556] netdev_register_kobject+0x180/0x390 [ 614.449329] register_netdevice+0x7ce/0xc70 [ 614.453666] ? netdev_change_features+0x80/0x80 [ 614.458350] __tun_chr_ioctl+0x20a3/0x33d0 [ 614.462600] ? tun_chr_close+0x60/0x60 [ 614.466510] ? tun_chr_compat_ioctl+0x30/0x30 [ 614.471069] do_vfs_ioctl+0x75a/0xfe0 [ 614.474885] ? selinux_file_mprotect+0x5c0/0x5c0 [ 614.479650] ? ioctl_preallocate+0x1a0/0x1a0 [ 614.484085] ? security_file_ioctl+0x76/0xb0 [ 614.488502] ? security_file_ioctl+0x83/0xb0 [ 614.492929] SyS_ioctl+0x7f/0xb0 [ 614.496301] ? do_vfs_ioctl+0xfe0/0xfe0 [ 614.500284] do_syscall_64+0x1d5/0x640 [ 614.504187] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 614.509552] RIP: 0033:0x45c889 [ 614.512739] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 614.520558] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 614.527836] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 614.535633] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 614.542907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 614.550185] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000004e [ 614.597720] ip6t_REJECT: ECHOREPLY is not supported. 20:53:40 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x1c1) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:53:40 executing program 0 (fault-call:12 fault-nth:79): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:41 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10}, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f00000002c0)=@isdn, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000400)=""/17, 0x11}], 0x3, &(0x7f0000000480)=""/39, 0x27}, 0x12020) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f00000005c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x90, 0x0}}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000600)=""/42, 0x2a}, {&(0x7f0000000c00)=""/64, 0x40}, {&(0x7f0000000c40)=""/11, 0xb}, {&(0x7f0000000c80)=""/151, 0x97}, {&(0x7f0000000d40)=""/177, 0xb1}, {&(0x7f0000000e00)=""/54, 0x36}, {&(0x7f0000000e40)=""/188, 0xbc}], 0x7, &(0x7f00000024c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x20000000, 0x401}, {&(0x7f0000000f80)=""/15, 0xf}, &(0x7f0000002300)=[{&(0x7f0000000fc0)=""/45, 0x2d}, {&(0x7f0000001000)}, {&(0x7f0000001040)=""/244, 0xf4}, {&(0x7f0000001140)=""/29, 0x1d}, {&(0x7f0000001180)=""/230, 0xe6}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/77, 0x4d}], 0x7, 0x3, 0x4000000000000}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002380)=""/206, 0xce}, &(0x7f0000002480), 0x44}}], 0x78, 0x20048050}, 0x20000000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x200000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nvram\x00', 0x123000, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f0000000980)) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000001000)={0x2}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002580)=0x1, 0x4) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000001c0)={0x0, @ctrl={0x0, 0x0, @value64}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='trusted.overlay.upper\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x10f, 0x0) [ 614.856003] FAULT_INJECTION: forcing a failure. [ 614.856003] name failslab, interval 1, probability 0, space 0, times 0 [ 614.867422] CPU: 0 PID: 29920 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 614.875326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.884686] Call Trace: [ 614.887290] dump_stack+0x13e/0x194 [ 614.891090] should_fail.cold+0x10a/0x14b [ 614.895258] should_failslab+0xd6/0x130 [ 614.899419] __kmalloc+0x2e9/0x7c0 [ 614.903001] ? kobject_get_path+0xb0/0x180 [ 614.907256] ? kobject_uevent_env+0x1fa/0xc50 [ 614.911761] ? rcu_read_lock_sched_held+0x10a/0x130 [ 614.916785] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 614.921669] kobject_get_path+0xb0/0x180 [ 614.925741] kobject_uevent_env+0x21e/0xc50 [ 614.930077] ? wait_for_completion+0x390/0x390 [ 614.934670] device_add+0xa02/0x1400 [ 614.938396] ? device_private_init+0x180/0x180 [ 614.942992] netdev_register_kobject+0x180/0x390 [ 614.947796] register_netdevice+0x7ce/0xc70 [ 614.952209] ? netdev_change_features+0x80/0x80 [ 614.956872] __tun_chr_ioctl+0x20a3/0x33d0 [ 614.961453] ? tun_chr_close+0x60/0x60 [ 614.965337] ? tun_chr_compat_ioctl+0x30/0x30 [ 614.969854] do_vfs_ioctl+0x75a/0xfe0 [ 614.973708] ? selinux_file_mprotect+0x5c0/0x5c0 [ 614.978589] ? ioctl_preallocate+0x1a0/0x1a0 [ 614.983001] ? security_file_ioctl+0x76/0xb0 [ 614.987404] ? security_file_ioctl+0x83/0xb0 [ 614.991806] SyS_ioctl+0x7f/0xb0 [ 614.995170] ? do_vfs_ioctl+0xfe0/0xfe0 [ 614.999149] do_syscall_64+0x1d5/0x640 [ 615.003030] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 615.008306] RIP: 0033:0x45c889 [ 615.011502] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 615.019299] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 615.026553] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 615.033817] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 615.041109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 615.048382] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000004f 20:53:41 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="b96d28c5eadda4e79ad2ccc77a1f03c0979e1a1df6db21c33ccf3e07bf6ff6c126d11fb5f4b672370605e69a3c346aa94a0fcdee4600ba4d714867513e4d6383de14d82f5774c5165121a8016e003608d8fd", 0x52}, {&(0x7f0000000300)="51f5b3c7e839181ae17f594a1958611ec2a7c1d45a10f095fd74ed882c9838fefd0a449b0bf0299874e212b331bc9aa7c3165e616ef9e12c4ff4b877ff5064e35e6ca0569120740a42a9f31ce714dd59d4501b6031ce52c6e623222e0f14793972850dc90e79f65374f5e9bf6b2995c7a8a683467c0c9c1272cf80f02d620a136df2855577c4dab11ec7af7a19167532d62fc4094529ef5ec3861485aa1435cd6080af46e0fee03df88cd26a83c6e95dd5782f", 0xb3}], 0x2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x80) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e24, @private=0xa010101}, {0x1, @dev={[], 0x12}}, 0x0, {0x2, 0x4e23, @empty}, 'ip6erspan0\x00'}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000240)={0x18, 0x0, 0x6, {0xe}}, 0x18) 20:53:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:41 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000000000)=""/41, 0x29) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) r2 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(r2, 0x0, 0xe, &(0x7f0000000280)=0x7f, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:53:41 executing program 0 (fault-call:12 fault-nth:80): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:41 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 615.283965] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 615.417803] FAULT_INJECTION: forcing a failure. [ 615.417803] name failslab, interval 1, probability 0, space 0, times 0 [ 615.430290] CPU: 0 PID: 29962 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 615.438467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.447915] Call Trace: [ 615.450522] dump_stack+0x13e/0x194 [ 615.454175] should_fail.cold+0x10a/0x14b [ 615.458515] should_failslab+0xd6/0x130 [ 615.462501] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 615.467617] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 615.473311] ? __alloc_skb+0x9a/0x4c0 [ 615.477472] __kmalloc_node_track_caller+0x38/0x70 [ 615.482571] __kmalloc_reserve.isra.0+0x35/0xd0 [ 615.487274] __alloc_skb+0xca/0x4c0 [ 615.490912] ? skb_trim+0x160/0x160 [ 615.494629] ? netlink_has_listeners+0x1ff/0x310 [ 615.499405] kobject_uevent_env+0x6d1/0xc50 [ 615.503840] device_add+0xa02/0x1400 [ 615.508038] ? device_private_init+0x180/0x180 [ 615.512984] netdev_register_kobject+0x180/0x390 [ 615.517776] register_netdevice+0x7ce/0xc70 [ 615.522100] ? netdev_change_features+0x80/0x80 [ 615.526763] __tun_chr_ioctl+0x20a3/0x33d0 [ 615.531266] ? tun_chr_close+0x60/0x60 [ 615.535154] ? tun_chr_compat_ioctl+0x30/0x30 [ 615.539789] do_vfs_ioctl+0x75a/0xfe0 [ 615.543849] ? selinux_file_mprotect+0x5c0/0x5c0 [ 615.548753] ? ioctl_preallocate+0x1a0/0x1a0 [ 615.553276] ? security_file_ioctl+0x76/0xb0 [ 615.557867] ? security_file_ioctl+0x83/0xb0 [ 615.562311] SyS_ioctl+0x7f/0xb0 [ 615.565661] ? do_vfs_ioctl+0xfe0/0xfe0 [ 615.569640] do_syscall_64+0x1d5/0x640 [ 615.573664] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 615.578839] RIP: 0033:0x45c889 [ 615.582099] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 615.589799] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 615.597063] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 615.604317] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 615.611577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 20:53:41 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0xfffffffd, 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) r3 = open(&(0x7f0000021000)='./file0\x00', 0x14000, 0x32) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003740)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x6c, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:fonts_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2b}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000426bdfc266a2daab654f92f64734d34f57000fedbdf250300000005000100010000001400060077673200000000000000000000000000080005000000000008000400e0000001"], 0x40}, 0x1, 0x0, 0x0, 0x440000c1}, 0x200c050) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x380000, 0x401, 0x80000000, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x1, [], @value=0x3}}) bind$vsock_stream(r5, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @host}, 0x10) [ 615.618841] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000050 20:53:41 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) connect$packet(r1, &(0x7f0000000200)={0x11, 0x17, r2, 0x1, 0x6, 0x6, @random="907be0d70c67"}, 0x14) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:53:41 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x10) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x111042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=@ng={0x4, 0xd, "911ed4"}, 0x5, 0x1) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) mknodat(r1, &(0x7f0000000280)='./file0\x00', 0x200, 0x0) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:53:42 executing program 0 (fault-call:12 fault-nth:81): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:42 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x3, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) [ 615.736991] MINIX-fs: mounting unchecked file system, running fsck is recommended 20:53:42 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) r1 = shmget(0x2, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f00000001c0)=""/236) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:53:42 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r1, 0x102, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:53:42 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) statx(r2, &(0x7f00000004c0)='./file0\x00', 0x2000, 0x8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x10000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/nvram\x00', 0xe4000, 0x0) r9 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) sendmsg$netlink(r0, &(0x7f0000000fc0)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x8084004}, 0xc, &(0x7f00000003c0)=[{&(0x7f00000019c0)=ANY=[@ANYBLOB="ac010000170000022cbd7000fbdbdf259401408008005100", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESDEC]], 0x5}, {&(0x7f0000000980)={0x494, 0x2e, 0x100, 0x70bd26, 0x25dfdbfe, "", [@nested={0x11a, 0xf, 0x0, 0x1, [@generic="b56744f0b484b6127621b6babc4fc4e2a154abbd51e62b1a62131e2b6469a5adc71dbb744732d8035517eeefb7334f3e6a5d2fadcd769657a18c43c53bf3dfd7ef06b703104ede018654850efb47d07fca47853084da510793df4f336fb50220f6c6b9bc374cc293e3542ca77d43e277d69f92b3ca6a2e9d2cbc62757f8b085ff12a1233cd378bb2d07f60006a7e692064fbc96012e8e6a98dc3d7d3c7c48638d488087119a0c4460be87e10a2c7848edbcfa9d5b21ce87916440c60f0e08d17360bd95046c63c24457cc0e601a647efa46609a9b157edf2e1bce8b919c1b3fc733c2ce49278", @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @typed={0x8, 0x28, 0x0, 0x0, @u32=0x2800}, @typed={0x14, 0x1d, 0x0, 0x0, @ipv6=@mcast2}]}, @generic="ec285e5e7dacb19398833fdfff5aa88a897d4d8b03a32185549699c2b6cf6c9dc2b159040705791c9b6dad52e5ded30921beaffe60962b0227032563a662fe09c018ca00954e2d048a06d6f48319ce5e87957932", @typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@private1}, @typed={0x4, 0x35}, @typed={0x8, 0x3e, 0x0, 0x0, @uid}, @typed={0x5, 0x5b, 0x0, 0x0, @str='\x00'}, @nested={0x87, 0x1c, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @u32}, @generic="c66068b2689d07130c83dd04c2b1ecb3ad9e1d6b694d9168eddc31028cfb31a29be124c9c9c6710c748e86dea1514eef238ad740efdf10c4785b719b18ad44d767fd08e53203969504de5661457ecd45a7af756d3f163b974719aadc5f07dd198a8383c3f714a053289a0d50409c6455ccb94da0dd872a76ad949b"]}, @nested={0x127, 0x49, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @u32=0x6}, @typed={0x14, 0x88, 0x0, 0x0, @ipv6=@local}, @generic="ffb1e8cbb01cbbf556b548103bba20186f5dc0e24bf86bfd82a5be9e", @typed={0x8, 0x53, 0x0, 0x0, @fd}, @generic="ab6535762dd6f400fad4dd21dc7c7a1a222e99bf21288558e5262acc2437a3b3f6e4c388296c4d34ccbc6e8030866c99c60c50f8821a28c0a8df1b386a3a12b68b3b030bd144f89603bb4fcf4147408e4bf887de76c83c27123fb44a0084d5116520726308b5a438d94bb91c813a2de5868ad746476273d60067623c893ae3af9ac33f1531349ebbec56c630ba52f3f1", @generic="e5df4559a580761870c298a668d105cca45ab9d5171a88e4ff2e9e24c633e77fef0ca741a1f404732c2f6d2e45dcb7ccc56b6b9fa2020f35e13bafc72a01594a06b82e7f0ec0b808599c884c34016c4b9483d4"]}, @generic="fb1c2aafbba8ece9cccc5e932c34e9cae38b28925009390e6f4f851131d47eb619bcfbb8ced8d3acfd5101cc6b1727ca29696580", @nested={0x105, 0x54, 0x0, 0x1, [@generic="3555d7a3292436c08d13eac5423cbec03bd25a1f5679c5f2f3f1c7ba858d35982c34dc0877268ec10d7670685a804c6fa329528e08f932b88c7d260d02ce69134f8179494c83504cd0b6c097f14825", @generic="b9b4dde6550f562ac329d43eb3d0ff449d46678c9e85f102e5e23dd958bf14c1233fd02311764f1682e03aca4a40dfe2cf0c35efb0a71df249dc5f", @generic="c40ff2168037cf002c33e40f3fa9da3677c2c4720d9b3efc4a92b0134e176f4f4c1dd2f7e0d4deb951e3d1b8029283af1dfaefb1e74251ace7f8d9a0fd645cf2ee5f72cabe4aeddb016cf45025b20706591c0ee0b299ac7ce658f537b36af45d4e6e71a06fc2c3a5e3b269d7cf535a8693d95886643223"]}]}, 0x494}], 0x2, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r5}}}, @rights={{0x20, 0x1, 0x1, [r6, r7, r8, r9]}}], 0x60, 0x20048010}, 0x400c000) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 615.868670] minix_free_inode: bit 1 already cleared [ 615.990949] FAULT_INJECTION: forcing a failure. [ 615.990949] name failslab, interval 1, probability 0, space 0, times 0 [ 616.002359] CPU: 1 PID: 30004 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 616.010264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.020235] Call Trace: [ 616.022820] dump_stack+0x13e/0x194 [ 616.026445] should_fail.cold+0x10a/0x14b [ 616.033637] should_failslab+0xd6/0x130 [ 616.037600] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 616.042779] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 616.048215] ? __alloc_skb+0x9a/0x4c0 [ 616.052026] __kmalloc_node_track_caller+0x38/0x70 [ 616.056966] __kmalloc_reserve.isra.0+0x35/0xd0 [ 616.061624] __alloc_skb+0xca/0x4c0 [ 616.065337] ? skb_trim+0x160/0x160 [ 616.068952] ? netlink_has_listeners+0x1ff/0x310 [ 616.073707] kobject_uevent_env+0x6d1/0xc50 [ 616.078037] device_add+0xa02/0x1400 [ 616.081760] ? device_private_init+0x180/0x180 [ 616.086343] netdev_register_kobject+0x180/0x390 [ 616.091106] register_netdevice+0x7ce/0xc70 [ 616.095422] ? netdev_change_features+0x80/0x80 [ 616.100103] __tun_chr_ioctl+0x20a3/0x33d0 [ 616.104349] ? tun_chr_close+0x60/0x60 [ 616.108256] ? tun_chr_compat_ioctl+0x30/0x30 [ 616.112768] do_vfs_ioctl+0x75a/0xfe0 [ 616.116580] ? selinux_file_mprotect+0x5c0/0x5c0 [ 616.121355] ? ioctl_preallocate+0x1a0/0x1a0 [ 616.125897] ? security_file_ioctl+0x76/0xb0 [ 616.130435] ? security_file_ioctl+0x83/0xb0 [ 616.134965] SyS_ioctl+0x7f/0xb0 [ 616.138336] ? do_vfs_ioctl+0xfe0/0xfe0 [ 616.142320] do_syscall_64+0x1d5/0x640 [ 616.146678] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 616.151907] RIP: 0033:0x45c889 [ 616.155237] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 616.162957] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 616.170571] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 616.177867] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 616.185148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 616.192522] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000051 [ 616.210700] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 616.221011] ip6t_REJECT: ECHOREPLY is not supported. [ 616.229072] ip6t_REJECT: ECHOREPLY is not supported. 20:53:42 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000000000)=""/41, 0x29) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) r2 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(r2, 0x0, 0xe, &(0x7f0000000280)=0x7f, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:53:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:42 executing program 0 (fault-call:12 fault-nth:82): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:42 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) r2 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x2, 0x1, 0x4, 0x4000, 0x0, {}, {0x3, 0x2, 0x76, 0x1b, 0x6, 0x76, "09b0ddee"}, 0x6, 0x3, @fd=r1, 0x8, 0x0, r2}) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f00000000c0)=0x4) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r4, 0x1000000000015) [ 616.399586] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 616.426709] ip6t_REJECT: ECHOREPLY is not supported. [ 616.536320] ip6t_REJECT: ECHOREPLY is not supported. [ 616.565694] FAULT_INJECTION: forcing a failure. [ 616.565694] name failslab, interval 1, probability 0, space 0, times 0 [ 616.577795] CPU: 1 PID: 30049 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 616.585775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.595308] Call Trace: [ 616.598044] dump_stack+0x13e/0x194 [ 616.601707] should_fail.cold+0x10a/0x14b [ 616.605958] should_failslab+0xd6/0x130 [ 616.609938] kmem_cache_alloc_node+0x288/0x7a0 [ 616.614609] ? netlink_has_listeners+0x1d8/0x310 [ 616.619547] __alloc_skb+0x9a/0x4c0 [ 616.623200] ? skb_trim+0x160/0x160 [ 616.626928] ? netlink_has_listeners+0x1ff/0x310 [ 616.631821] kobject_uevent_env+0x6d1/0xc50 [ 616.636154] device_add+0xa02/0x1400 [ 616.639882] ? device_private_init+0x180/0x180 [ 616.644472] netdev_register_kobject+0x180/0x390 [ 616.649235] register_netdevice+0x7ce/0xc70 [ 616.653568] ? netdev_change_features+0x80/0x80 [ 616.658249] __tun_chr_ioctl+0x20a3/0x33d0 [ 616.662510] ? tun_chr_close+0x60/0x60 [ 616.666417] ? tun_chr_compat_ioctl+0x30/0x30 [ 616.670922] do_vfs_ioctl+0x75a/0xfe0 [ 616.674730] ? selinux_file_mprotect+0x5c0/0x5c0 [ 616.679507] ? ioctl_preallocate+0x1a0/0x1a0 [ 616.684111] ? security_file_ioctl+0x76/0xb0 [ 616.688524] ? security_file_ioctl+0x83/0xb0 [ 616.692939] SyS_ioctl+0x7f/0xb0 [ 616.696351] ? do_vfs_ioctl+0xfe0/0xfe0 [ 616.700377] do_syscall_64+0x1d5/0x640 [ 616.704392] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 616.709585] RIP: 0033:0x45c889 [ 616.712867] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 616.720577] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 616.728170] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 616.735442] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 616.742715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 616.750211] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000052 [ 616.807376] attempt to access beyond end of device [ 616.813079] loop5: rw=2049, want=6434, limit=52 [ 616.836199] Buffer I/O error on dev loop5, logical block 3216, lost async page write 20:53:43 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x46000) lseek(r6, 0x4200, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8400fffffffb) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@local}) setresuid(r3, 0x0, r5) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:53:43 executing program 0 (fault-call:12 fault-nth:83): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 616.862265] attempt to access beyond end of device [ 616.871806] ip6t_REJECT: ECHOREPLY is not supported. [ 616.879215] loop5: rw=0, want=6434, limit=52 [ 616.893013] Buffer I/O error on dev loop5, logical block 3216, async page read 20:53:43 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x434f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) ioctl$VT_WAITACTIVE(r1, 0x5607) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) name_to_handle_at(r4, &(0x7f0000000200)='./bus/file0\x00', &(0x7f0000000240)={0xc5, 0x7, "e5e7884a43d0fdc1f837d56a7589b47639cc17cf7a41b4ef0d1fa7b66df36f6ace33fb9bb10f8e39063a6b8324083eaf10e9c00bdaccc22884cfeea4a6cfdad4d3fbb99b381c67fea9499eccf3cd15866ff2ed1348f7da4541171064e6784b4ad52d123223a6707f88dc9e412ef250aba1e4d9112ed66d7f9a0bc888e11bdc4240973d1bd197316eb836072d78c2af8ae4d460646f27e9eed556e2cc2186816d58137e1ff55a9efe79c8288e311d9973c811f1b57740b23cf3dd297443"}, &(0x7f0000000340), 0x1400) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mISDNtimer\x00', 0x40000, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 20:53:43 executing program 1: open(&(0x7f00000001c0)='./file0\x00', 0x4c44c3, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 616.992395] minix_free_inode: bit 1 already cleared [ 617.099694] FAULT_INJECTION: forcing a failure. [ 617.099694] name failslab, interval 1, probability 0, space 0, times 0 [ 617.113724] CPU: 1 PID: 30083 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 617.121983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.131474] Call Trace: [ 617.134152] dump_stack+0x13e/0x194 [ 617.137787] should_fail.cold+0x10a/0x14b [ 617.141945] should_failslab+0xd6/0x130 [ 617.146017] kmem_cache_alloc_node+0x288/0x7a0 [ 617.150625] ? netlink_has_listeners+0x1d8/0x310 [ 617.155421] __alloc_skb+0x9a/0x4c0 [ 617.159279] ? skb_trim+0x160/0x160 [ 617.162917] ? netlink_has_listeners+0x1ff/0x310 [ 617.167674] kobject_uevent_env+0x6d1/0xc50 [ 617.172004] device_add+0xa02/0x1400 [ 617.175725] ? device_private_init+0x180/0x180 [ 617.180315] netdev_register_kobject+0x180/0x390 [ 617.185162] register_netdevice+0x7ce/0xc70 [ 617.189485] ? netdev_change_features+0x80/0x80 [ 617.194176] __tun_chr_ioctl+0x20a3/0x33d0 [ 617.198428] ? tun_chr_close+0x60/0x60 [ 617.202338] ? tun_chr_compat_ioctl+0x30/0x30 [ 617.206923] do_vfs_ioctl+0x75a/0xfe0 [ 617.210736] ? selinux_file_mprotect+0x5c0/0x5c0 [ 617.215509] ? ioctl_preallocate+0x1a0/0x1a0 [ 617.220028] ? security_file_ioctl+0x76/0xb0 [ 617.220662] kauditd_printk_skb: 19 callbacks suppressed [ 617.220669] audit: type=1800 audit(1586897623.347:14619): pid=30084 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=15751 res=0 [ 617.224464] ? security_file_ioctl+0x83/0xb0 [ 617.224570] SyS_ioctl+0x7f/0xb0 [ 617.248047] audit: type=1800 audit(1586897623.347:14620): pid=30087 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=15792 res=0 [ 617.250695] ? do_vfs_ioctl+0xfe0/0xfe0 [ 617.250711] do_syscall_64+0x1d5/0x640 [ 617.250729] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 617.250737] RIP: 0033:0x45c889 20:53:43 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$ppp(r0, &(0x7f00000001c0)="d64f8f62179861301eb1dd3751b9c7111b9a747d2a0ea309c3f77db86e38ea06edb2fc9df1860758bf12fdea273131a20aa313cc58f58f78b1c5d8e654ef19daa584fb124de332a0737403842d1860ad0ae089f9b363af9e8a244b08462784ff58b27f6abddd5cb9d4233ba4e4d06e6f5787fddca6ea0abc1a961e9c949144a016b980343f92a70329764734faf7788eb384d22026c51242bf2c527704b09c5aeebd07a749bf15acddfff54a78ecbcc2188ce9fc8d256bccddbf30e0b9f807c957a63484ed65d3990de7f942f6e945be5040323f693ddc2547390c8df53b9dbb3f2367cccd779f6b5cb8bbe4117f0cf6a04a76335840d3", 0xf7) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:53:43 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0xe, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000005000000004000000c003000000000000d0000000f8010000d0000000f8010000f0020000f0020000f0020000f0020000f0020000040000000000000000000000ff010000000000000000000000000001000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000626f6e645f736c6176655f300000000073797a6b616c6c6572310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000500000000000000fe800000000000000000000000000000ff010000000000000000000000000001000000000000388ad4f8586aaa9a00000000000000000000000000000000000064756d6d79307154000000000000000076657468305f746f5f626f6e6400000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000001280100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000000000000000000000000000000000000028006970763668656164657200000000000000080000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c3000000000000000000069705f767469300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f80000000000000000000000000000000000672fb81c2027d7875bafc136a90000000000000000280069636d7036000000000000000000000000000000000000000000000000000018830000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800"/1056], 0x473) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) [ 617.250749] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.302743] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 617.310101] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 617.317951] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 617.325324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 617.332629] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000053 20:53:43 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000000000)=""/41, 0x29) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) r2 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(r2, 0x0, 0xe, &(0x7f0000000280)=0x7f, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 617.333964] audit: type=1804 audit(1586897623.347:14621): pid=30088 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/430/bus" dev="sda1" ino=16039 res=1 [ 617.377505] MINIX-fs: mounting unchecked file system, running fsck is recommended 20:53:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:43 executing program 2: r0 = gettid() r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8, 0x0) bind$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) timer_create(0x6, &(0x7f0000044000)={0x0, 0x12, 0x2}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x1d3) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) sendfile(r2, r3, 0x0, 0x8400fffffffb) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}}, 0x0) timer_getoverrun(0x0) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000240)) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000000)=r0) tkill(r0, 0x1000000000015) 20:53:43 executing program 0 (fault-call:12 fault-nth:84): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 617.540211] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 617.575853] audit: type=1804 audit(1586897623.667:14622): pid=30093 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/430/bus" dev="sda1" ino=16039 res=1 [ 617.630552] audit: type=1804 audit(1586897623.667:14623): pid=30093 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/430/bus" dev="sda1" ino=16039 res=1 [ 617.661736] audit: type=1800 audit(1586897623.757:14624): pid=30104 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=15783 res=0 [ 617.686804] audit: type=1804 audit(1586897623.867:14625): pid=30110 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir689926280/syzkaller.BgL1Ld/453/bus" dev="sda1" ino=15785 res=1 [ 617.750862] FAULT_INJECTION: forcing a failure. [ 617.750862] name failslab, interval 1, probability 0, space 0, times 0 [ 617.762537] CPU: 1 PID: 30111 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 617.770881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.780359] Call Trace: [ 617.782969] dump_stack+0x13e/0x194 [ 617.786613] should_fail.cold+0x10a/0x14b [ 617.790774] should_failslab+0xd6/0x130 [ 617.794784] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 617.799902] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 617.805365] ? __alloc_skb+0x9a/0x4c0 [ 617.809193] __kmalloc_node_track_caller+0x38/0x70 [ 617.814134] __kmalloc_reserve.isra.0+0x35/0xd0 [ 617.818816] __alloc_skb+0xca/0x4c0 [ 617.822455] ? skb_trim+0x160/0x160 [ 617.826092] ? netlink_has_listeners+0x1ff/0x310 [ 617.830864] kobject_uevent_env+0x6d1/0xc50 [ 617.835204] device_add+0xa02/0x1400 [ 617.838934] ? device_private_init+0x180/0x180 [ 617.843530] netdev_register_kobject+0x180/0x390 [ 617.848318] register_netdevice+0x7ce/0xc70 [ 617.852640] ? netdev_change_features+0x80/0x80 [ 617.857310] __tun_chr_ioctl+0x20a3/0x33d0 [ 617.861563] ? tun_chr_close+0x60/0x60 [ 617.865605] ? tun_chr_compat_ioctl+0x30/0x30 [ 617.870113] do_vfs_ioctl+0x75a/0xfe0 [ 617.873946] ? selinux_file_mprotect+0x5c0/0x5c0 [ 617.878754] ? ioctl_preallocate+0x1a0/0x1a0 [ 617.883170] ? security_file_ioctl+0x76/0xb0 [ 617.887647] ? security_file_ioctl+0x83/0xb0 [ 617.892059] SyS_ioctl+0x7f/0xb0 [ 617.895424] ? do_vfs_ioctl+0xfe0/0xfe0 [ 617.899387] do_syscall_64+0x1d5/0x640 [ 617.903267] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 617.908448] RIP: 0033:0x45c889 [ 617.911638] RSP: 002b:00007f7283c41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.919383] RAX: ffffffffffffffda RBX: 00007f7283c426d4 RCX: 000000000045c889 [ 617.926776] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 617.934049] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 617.941318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 20:53:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 617.948605] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000054 20:53:44 executing program 0 (fault-call:12 fault-nth:85): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:44 executing program 5: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x341940, 0x30) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) r1 = socket$key(0xf, 0x3, 0x2) syncfs(r1) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x4, 0x5, 0x6, 0x100000000, 0x2, 0x88a, 0x2, 0x3fa52fed, 0x2}}, 0x43) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) [ 618.098667] minix_free_inode: bit 1 already cleared [ 618.183687] FAULT_INJECTION: forcing a failure. [ 618.183687] name failslab, interval 1, probability 0, space 0, times 0 [ 618.195044] CPU: 1 PID: 30149 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 618.203036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.212382] Call Trace: [ 618.214975] dump_stack+0x13e/0x194 [ 618.218603] should_fail.cold+0x10a/0x14b [ 618.222740] should_failslab+0xd6/0x130 [ 618.226705] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 618.231806] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 618.238461] ? __alloc_skb+0x9a/0x4c0 [ 618.242265] __kmalloc_node_track_caller+0x38/0x70 [ 618.247194] __kmalloc_reserve.isra.0+0x35/0xd0 [ 618.251853] __alloc_skb+0xca/0x4c0 [ 618.255496] ? skb_trim+0x160/0x160 [ 618.259124] ? netlink_has_listeners+0x1ff/0x310 [ 618.263869] kobject_uevent_env+0x6d1/0xc50 [ 618.268192] device_add+0xa02/0x1400 [ 618.273544] ? device_private_init+0x180/0x180 [ 618.278114] netdev_register_kobject+0x180/0x390 [ 618.282862] register_netdevice+0x7ce/0xc70 [ 618.287170] ? netdev_change_features+0x80/0x80 [ 618.291836] __tun_chr_ioctl+0x20a3/0x33d0 [ 618.296061] ? tun_chr_close+0x60/0x60 [ 618.299939] ? tun_chr_compat_ioctl+0x30/0x30 [ 618.304424] do_vfs_ioctl+0x75a/0xfe0 [ 618.308227] ? selinux_file_mprotect+0x5c0/0x5c0 [ 618.312967] ? ioctl_preallocate+0x1a0/0x1a0 [ 618.317456] ? security_file_ioctl+0x76/0xb0 [ 618.321850] ? security_file_ioctl+0x83/0xb0 [ 618.326337] SyS_ioctl+0x7f/0xb0 [ 618.329686] ? do_vfs_ioctl+0xfe0/0xfe0 [ 618.333755] do_syscall_64+0x1d5/0x640 [ 618.337731] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 618.342918] RIP: 0033:0x45c889 [ 618.346188] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.353890] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 618.361416] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 618.368679] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 618.375931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 20:53:44 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000000000)=""/41, 0x29) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) r2 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(r2, 0x0, 0xe, &(0x7f0000000280)=0x7f, 0x4) [ 618.383198] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000055 20:53:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 618.457043] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 618.467350] minix_free_inode: bit 1 already cleared [ 618.481645] audit: type=1800 audit(1586897624.717:14626): pid=30165 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=15760 res=0 20:53:44 executing program 0 (fault-call:12 fault-nth:86): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 618.524778] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 618.583021] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 618.596077] minix_free_inode: bit 1 already cleared 20:53:44 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000001c0)=0x9, 0x4) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r1, r1, &(0x7f0000000480), 0xa198) [ 618.694185] FAULT_INJECTION: forcing a failure. [ 618.694185] name failslab, interval 1, probability 0, space 0, times 0 [ 618.705865] CPU: 1 PID: 30194 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 618.713751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.723264] Call Trace: [ 618.725854] dump_stack+0x13e/0x194 [ 618.729250] audit: type=1800 audit(1586897624.947:14627): pid=30196 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=15781 res=0 [ 618.729493] should_fail.cold+0x10a/0x14b [ 618.729509] should_failslab+0xd6/0x130 [ 618.729522] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 618.763968] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 618.769445] ? __alloc_skb+0x9a/0x4c0 [ 618.773238] __kmalloc_node_track_caller+0x38/0x70 [ 618.778187] __kmalloc_reserve.isra.0+0x35/0xd0 [ 618.782857] __alloc_skb+0xca/0x4c0 [ 618.786490] ? skb_trim+0x160/0x160 [ 618.790137] ? netlink_has_listeners+0x1ff/0x310 [ 618.794902] kobject_uevent_env+0x6d1/0xc50 [ 618.799219] device_add+0xa02/0x1400 [ 618.802924] ? device_private_init+0x180/0x180 [ 618.807498] netdev_register_kobject+0x180/0x390 [ 618.812262] register_netdevice+0x7ce/0xc70 [ 618.816571] ? netdev_change_features+0x80/0x80 [ 618.821247] __tun_chr_ioctl+0x20a3/0x33d0 [ 618.825473] ? tun_chr_close+0x60/0x60 [ 618.829527] ? tun_chr_compat_ioctl+0x30/0x30 [ 618.834010] do_vfs_ioctl+0x75a/0xfe0 [ 618.837884] ? selinux_file_mprotect+0x5c0/0x5c0 [ 618.842638] ? ioctl_preallocate+0x1a0/0x1a0 [ 618.847039] ? security_file_ioctl+0x76/0xb0 [ 618.851431] ? security_file_ioctl+0x83/0xb0 [ 618.855835] SyS_ioctl+0x7f/0xb0 [ 618.859197] ? do_vfs_ioctl+0xfe0/0xfe0 [ 618.863175] do_syscall_64+0x1d5/0x640 [ 618.867075] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 618.872436] RIP: 0033:0x45c889 [ 618.875623] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.883326] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 618.890589] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 618.898993] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 618.906267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 618.913552] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000056 [ 618.932501] MINIX-fs: mounting unchecked file system, running fsck is recommended 20:53:45 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x840) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000140)={0xfffffff7, [[0x0, 0x0, 0x7fff, 0xe0cb, 0x2, 0x3, 0xfffffff9, 0x81], [0x2, 0x9282, 0x0, 0x7f, 0x48fc, 0x0, 0xb25, 0x200], [0x2, 0x3, 0x8, 0x1, 0x4, 0xab, 0x7fffffff, 0x3ff]], [], [{0x80000000, 0x6b03}, {0x9, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x3, 0xad}, {0xffffffff, 0x7}, {0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x4}, {0x3, 0x100, 0x0, 0x1, 0x1}, {0xffffffff, 0x8001}, {0x3, 0x80000000, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x7fffffff, 0x1}, {0x8, 0x2, 0x1, 0x1, 0x1}], [], 0x5}) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:53:45 executing program 0 (fault-call:12 fault-nth:87): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:45 executing program 1 (fault-call:8 fault-nth:0): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 619.180622] FAULT_INJECTION: forcing a failure. [ 619.180622] name failslab, interval 1, probability 0, space 0, times 0 [ 619.192328] CPU: 1 PID: 30221 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 619.200526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 619.210241] Call Trace: [ 619.213142] dump_stack+0x13e/0x194 [ 619.216770] should_fail.cold+0x10a/0x14b [ 619.221095] should_failslab+0xd6/0x130 [ 619.225152] kmem_cache_alloc_node+0x288/0x7a0 [ 619.229727] ? netlink_has_listeners+0x1d8/0x310 [ 619.234486] __alloc_skb+0x9a/0x4c0 [ 619.238206] ? skb_trim+0x160/0x160 [ 619.241819] ? netlink_has_listeners+0x1ff/0x310 [ 619.246566] kobject_uevent_env+0x6d1/0xc50 [ 619.250876] device_add+0xa02/0x1400 [ 619.254577] ? device_private_init+0x180/0x180 [ 619.259144] netdev_register_kobject+0x180/0x390 [ 619.263896] register_netdevice+0x7ce/0xc70 [ 619.268200] ? netdev_change_features+0x80/0x80 [ 619.272944] __tun_chr_ioctl+0x20a3/0x33d0 [ 619.277175] ? tun_chr_close+0x60/0x60 [ 619.281053] ? tun_chr_compat_ioctl+0x30/0x30 [ 619.285532] do_vfs_ioctl+0x75a/0xfe0 [ 619.289329] ? selinux_file_mprotect+0x5c0/0x5c0 [ 619.294067] ? ioctl_preallocate+0x1a0/0x1a0 [ 619.298472] ? security_file_ioctl+0x76/0xb0 [ 619.302863] ? security_file_ioctl+0x83/0xb0 [ 619.307253] SyS_ioctl+0x7f/0xb0 [ 619.312076] ? do_vfs_ioctl+0xfe0/0xfe0 [ 619.316034] do_syscall_64+0x1d5/0x640 [ 619.319910] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 619.325079] RIP: 0033:0x45c889 [ 619.328253] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 619.335943] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 619.343198] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 619.350451] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 619.357703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 619.364958] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000057 [ 619.450308] FAULT_INJECTION: forcing a failure. [ 619.450308] name failslab, interval 1, probability 0, space 0, times 0 [ 619.461766] CPU: 1 PID: 30231 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 619.469657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 619.479014] Call Trace: [ 619.481598] dump_stack+0x13e/0x194 [ 619.485223] should_fail.cold+0x10a/0x14b [ 619.489375] should_failslab+0xd6/0x130 [ 619.493458] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 619.498570] __kmalloc_node+0x38/0x70 [ 619.502508] kvmalloc_node+0x88/0xd0 [ 619.506222] alloc_netdev_mqs+0x76/0xb70 [ 619.510447] ? tun_set_headroom+0x50/0x50 [ 619.514620] __tun_chr_ioctl+0x1902/0x33d0 [ 619.518869] ? tun_chr_close+0x60/0x60 [ 619.522772] ? tun_chr_compat_ioctl+0x30/0x30 [ 619.527368] do_vfs_ioctl+0x75a/0xfe0 [ 619.531175] ? selinux_file_mprotect+0x5c0/0x5c0 [ 619.535940] ? ioctl_preallocate+0x1a0/0x1a0 [ 619.540362] ? security_file_ioctl+0x76/0xb0 [ 619.544776] ? security_file_ioctl+0x83/0xb0 [ 619.549186] SyS_ioctl+0x7f/0xb0 [ 619.552555] ? do_vfs_ioctl+0xfe0/0xfe0 [ 619.556533] do_syscall_64+0x1d5/0x640 [ 619.560472] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 619.565661] RIP: 0033:0x45c889 [ 619.568851] RSP: 002b:00007f6960a59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 619.576564] RAX: ffffffffffffffda RBX: 00007f6960a5a6d4 RCX: 000000000045c889 [ 619.583921] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000006 [ 619.591199] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 619.598475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 619.607240] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000000 [ 619.648754] minix_free_inode: bit 1 already cleared 20:53:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:46 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000000000)=""/41, 0x29) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) socket$inet(0x2, 0x0, 0x2) 20:53:46 executing program 0 (fault-call:12 fault-nth:88): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:46 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c3, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:53:46 executing program 1 (fault-call:8 fault-nth:1): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:46 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) write$P9_RCREATE(r3, &(0x7f00000000c0)={0x18, 0x73, 0x2, {{0x8, 0x1, 0x1}, 0x10001}}, 0x18) [ 620.604988] audit: type=1800 audit(1586897626.837:14628): pid=30252 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16037 res=0 [ 620.632715] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 620.635946] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 620.705918] attempt to access beyond end of device [ 620.721514] FAULT_INJECTION: forcing a failure. [ 620.721514] name failslab, interval 1, probability 0, space 0, times 0 [ 620.732827] CPU: 1 PID: 30272 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 620.740716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.750074] Call Trace: [ 620.752677] dump_stack+0x13e/0x194 [ 620.756319] should_fail.cold+0x10a/0x14b [ 620.760579] should_failslab+0xd6/0x130 [ 620.764544] kmem_cache_alloc_node+0x288/0x7a0 [ 620.769114] ? netlink_has_listeners+0x1d8/0x310 [ 620.773881] __alloc_skb+0x9a/0x4c0 [ 620.777507] ? skb_trim+0x160/0x160 [ 620.781118] ? netlink_has_listeners+0x1ff/0x310 [ 620.785859] kobject_uevent_env+0x6d1/0xc50 [ 620.790167] device_add+0xa02/0x1400 [ 620.793870] ? device_private_init+0x180/0x180 [ 620.798701] netdev_register_kobject+0x180/0x390 [ 620.803444] register_netdevice+0x7ce/0xc70 [ 620.807749] ? netdev_change_features+0x80/0x80 [ 620.812405] __tun_chr_ioctl+0x20a3/0x33d0 [ 620.816638] ? tun_chr_close+0x60/0x60 [ 620.820513] ? tun_chr_compat_ioctl+0x30/0x30 [ 620.825006] do_vfs_ioctl+0x75a/0xfe0 [ 620.828810] ? selinux_file_mprotect+0x5c0/0x5c0 [ 620.833570] ? ioctl_preallocate+0x1a0/0x1a0 [ 620.837990] ? security_file_ioctl+0x76/0xb0 [ 620.842401] ? security_file_ioctl+0x83/0xb0 [ 620.846810] SyS_ioctl+0x7f/0xb0 [ 620.850166] ? do_vfs_ioctl+0xfe0/0xfe0 [ 620.854142] do_syscall_64+0x1d5/0x640 [ 620.858467] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 620.863696] RIP: 0033:0x45c889 [ 620.866992] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.874790] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 620.882047] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 620.889311] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 620.896592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 620.903853] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000058 [ 620.915663] FAULT_INJECTION: forcing a failure. [ 620.915663] name failslab, interval 1, probability 0, space 0, times 0 [ 620.927365] CPU: 0 PID: 30278 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 620.935271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.944631] Call Trace: [ 620.947228] dump_stack+0x13e/0x194 [ 620.948088] loop5: rw=2049, want=6434, limit=52 [ 620.950883] should_fail.cold+0x10a/0x14b [ 620.955547] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 620.959693] should_failslab+0xd6/0x130 [ 620.959704] kmem_cache_alloc_trace+0x47/0x7b0 [ 620.959715] ? __lock_is_held+0xad/0x140 [ 620.959730] __hw_addr_create_ex+0x5b/0x300 [ 620.959742] __hw_addr_add_ex+0x1c1/0x290 [ 620.959753] dev_addr_init+0xfb/0x1b0 [ 620.959762] ? dev_mc_flush+0x30/0x30 [ 620.959776] alloc_netdev_mqs+0x11d/0xb70 [ 620.959786] ? tun_set_headroom+0x50/0x50 [ 620.959800] __tun_chr_ioctl+0x1902/0x33d0 [ 620.959813] ? tun_chr_close+0x60/0x60 [ 620.959828] ? tun_chr_compat_ioctl+0x30/0x30 [ 620.959839] do_vfs_ioctl+0x75a/0xfe0 [ 620.959851] ? selinux_file_mprotect+0x5c0/0x5c0 [ 620.959860] ? ioctl_preallocate+0x1a0/0x1a0 [ 620.959888] ? security_file_ioctl+0x76/0xb0 [ 620.959896] ? security_file_ioctl+0x83/0xb0 [ 620.959908] SyS_ioctl+0x7f/0xb0 [ 620.959916] ? do_vfs_ioctl+0xfe0/0xfe0 [ 620.959927] do_syscall_64+0x1d5/0x640 [ 620.959943] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 620.959957] RIP: 0033:0x45c889 [ 620.959962] RSP: 002b:00007f6960a59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.959972] RAX: ffffffffffffffda RBX: 00007f6960a5a6d4 RCX: 000000000045c889 [ 620.959978] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000006 [ 620.959982] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 620.959986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 620.959992] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000001 [ 621.106144] attempt to access beyond end of device [ 621.111257] loop5: rw=0, want=6434, limit=52 [ 621.115812] Buffer I/O error on dev loop5, logical block 3216, async page read [ 621.142503] attempt to access beyond end of device [ 621.148283] loop5: rw=0, want=6434, limit=52 20:53:47 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) bind$can_raw(r3, &(0x7f0000000240), 0x10) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f00000001c0)={0x1, 0x0, {0x800, 0x7fff, 0x3018, 0x9, 0x3, 0x4, 0x1, 0x3}}) [ 621.152796] Buffer I/O error on dev loop5, logical block 3216, async page read [ 621.165807] attempt to access beyond end of device [ 621.171197] loop5: rw=0, want=6434, limit=52 20:53:47 executing program 0 (fault-call:12 fault-nth:89): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 621.218147] minix_free_inode: bit 1 already cleared [ 621.313125] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 621.341359] attempt to access beyond end of device [ 621.349771] FAULT_INJECTION: forcing a failure. [ 621.349771] name failslab, interval 1, probability 0, space 0, times 0 [ 621.360089] loop5: rw=2049, want=6434, limit=52 [ 621.361146] CPU: 0 PID: 30301 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 621.361153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.361158] Call Trace: [ 621.361176] dump_stack+0x13e/0x194 [ 621.361192] should_fail.cold+0x10a/0x14b [ 621.361206] should_failslab+0xd6/0x130 [ 621.366940] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 621.373755] kmem_cache_alloc_node+0x288/0x7a0 [ 621.373768] ? netlink_has_listeners+0x1d8/0x310 [ 621.373787] __alloc_skb+0x9a/0x4c0 [ 621.373799] ? skb_trim+0x160/0x160 [ 621.373810] ? netlink_has_listeners+0x1ff/0x310 [ 621.373820] kobject_uevent_env+0x6d1/0xc50 [ 621.373838] device_add+0xa02/0x1400 [ 621.373853] ? device_private_init+0x180/0x180 [ 621.373867] netdev_register_kobject+0x180/0x390 [ 621.373878] register_netdevice+0x7ce/0xc70 [ 621.373889] ? netdev_change_features+0x80/0x80 [ 621.373906] __tun_chr_ioctl+0x20a3/0x33d0 [ 621.373920] ? tun_chr_close+0x60/0x60 [ 621.373936] ? tun_chr_compat_ioctl+0x30/0x30 [ 621.465647] do_vfs_ioctl+0x75a/0xfe0 [ 621.469468] ? selinux_file_mprotect+0x5c0/0x5c0 [ 621.474221] ? ioctl_preallocate+0x1a0/0x1a0 [ 621.479317] ? security_file_ioctl+0x76/0xb0 [ 621.483709] ? security_file_ioctl+0x83/0xb0 [ 621.488212] SyS_ioctl+0x7f/0xb0 [ 621.491567] ? do_vfs_ioctl+0xfe0/0xfe0 [ 621.495531] do_syscall_64+0x1d5/0x640 [ 621.499546] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 621.504720] RIP: 0033:0x45c889 20:53:47 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000000000)=""/41, 0x29) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) [ 621.507892] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.516554] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 621.523981] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 621.531257] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 621.538531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 621.545806] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000059 20:53:47 executing program 1 (fault-call:8 fault-nth:2): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 621.580249] attempt to access beyond end of device 20:53:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 621.620660] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 621.627641] loop5: rw=0, want=6434, limit=52 [ 621.635210] Buffer I/O error on dev loop5, logical block 3216, async page read [ 621.648726] attempt to access beyond end of device [ 621.667060] loop5: rw=0, want=6434, limit=52 20:53:47 executing program 0 (fault-call:12 fault-nth:90): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 621.697227] attempt to access beyond end of device [ 621.702481] loop5: rw=0, want=6434, limit=52 [ 621.718532] Buffer I/O error on dev loop5, logical block 3216, async page read 20:53:48 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, &(0x7f0000000200)=0x8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000240)=0xa3e, 0x4) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f00000001c0)) [ 621.818435] minix_free_inode: bit 1 already cleared [ 621.841485] FAULT_INJECTION: forcing a failure. [ 621.841485] name failslab, interval 1, probability 0, space 0, times 0 [ 621.853011] CPU: 1 PID: 30339 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 621.861242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.870600] Call Trace: [ 621.873181] dump_stack+0x13e/0x194 [ 621.876812] should_fail.cold+0x10a/0x14b [ 621.880960] should_failslab+0xd6/0x130 [ 621.884928] kmem_cache_alloc_node+0x288/0x7a0 [ 621.889496] ? netlink_has_listeners+0x1d8/0x310 [ 621.894328] __alloc_skb+0x9a/0x4c0 [ 621.897941] ? skb_trim+0x160/0x160 [ 621.901554] ? netlink_has_listeners+0x1ff/0x310 [ 621.906823] kobject_uevent_env+0x6d1/0xc50 [ 621.911373] device_add+0xa02/0x1400 [ 621.915092] ? device_private_init+0x180/0x180 [ 621.919815] netdev_register_kobject+0x180/0x390 [ 621.924565] register_netdevice+0x7ce/0xc70 [ 621.929072] ? netdev_change_features+0x80/0x80 [ 621.933737] __tun_chr_ioctl+0x20a3/0x33d0 [ 621.937989] ? tun_chr_close+0x60/0x60 [ 621.941876] ? tun_chr_compat_ioctl+0x30/0x30 [ 621.946367] do_vfs_ioctl+0x75a/0xfe0 [ 621.950170] ? selinux_file_mprotect+0x5c0/0x5c0 [ 621.954930] ? ioctl_preallocate+0x1a0/0x1a0 [ 621.959341] ? security_file_ioctl+0x76/0xb0 [ 621.963754] ? security_file_ioctl+0x83/0xb0 [ 621.968155] SyS_ioctl+0x7f/0xb0 [ 621.971504] ? do_vfs_ioctl+0xfe0/0xfe0 [ 621.975479] do_syscall_64+0x1d5/0x640 [ 621.979361] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 621.984540] RIP: 0033:0x45c889 [ 621.987849] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.995564] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 622.002830] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 622.010099] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 622.017354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 622.024606] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000005a [ 622.034891] FAULT_INJECTION: forcing a failure. [ 622.034891] name failslab, interval 1, probability 0, space 0, times 0 [ 622.046378] CPU: 0 PID: 30336 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 622.054276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.063750] Call Trace: [ 622.066339] dump_stack+0x13e/0x194 [ 622.069980] should_fail.cold+0x10a/0x14b [ 622.074138] should_failslab+0xd6/0x130 [ 622.078124] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 622.083237] ? dev_addr_init+0xfb/0x1b0 [ 622.087214] ? dev_addr_init+0x155/0x1b0 [ 622.091282] __kmalloc_node+0x38/0x70 [ 622.095101] kvmalloc_node+0x88/0xd0 [ 622.098820] alloc_netdev_mqs+0x5e5/0xb70 [ 622.102982] __tun_chr_ioctl+0x1902/0x33d0 [ 622.107245] ? tun_chr_close+0x60/0x60 [ 622.111123] ? tun_chr_compat_ioctl+0x30/0x30 [ 622.115610] do_vfs_ioctl+0x75a/0xfe0 [ 622.119491] ? selinux_file_mprotect+0x5c0/0x5c0 [ 622.124354] ? ioctl_preallocate+0x1a0/0x1a0 [ 622.128862] ? security_file_ioctl+0x76/0xb0 [ 622.133272] ? security_file_ioctl+0x83/0xb0 [ 622.137688] SyS_ioctl+0x7f/0xb0 [ 622.141053] ? do_vfs_ioctl+0xfe0/0xfe0 [ 622.145024] do_syscall_64+0x1d5/0x640 [ 622.149248] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 622.154433] RIP: 0033:0x45c889 [ 622.157624] RSP: 002b:00007f6960a59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.165470] RAX: ffffffffffffffda RBX: 00007f6960a5a6d4 RCX: 000000000045c889 [ 622.172733] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000006 [ 622.180105] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 622.187362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 622.194746] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000002 20:53:48 executing program 0 (fault-call:12 fault-nth:91): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 622.242888] kauditd_printk_skb: 3 callbacks suppressed [ 622.242895] audit: type=1800 audit(1586897628.477:14632): pid=30348 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16044 res=0 [ 622.284733] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 622.315509] attempt to access beyond end of device [ 622.325819] loop5: rw=2049, want=6434, limit=52 [ 622.331710] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 622.341293] attempt to access beyond end of device [ 622.346634] loop5: rw=0, want=6434, limit=52 [ 622.353746] Buffer I/O error on dev loop5, logical block 3216, async page read 20:53:48 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000000000)=""/41, 0x29) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) [ 622.371010] audit: type=1804 audit(1586897628.607:14633): pid=30348 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/435/bus" dev="sda1" ino=16097 res=1 [ 622.374024] attempt to access beyond end of device [ 622.401148] loop5: rw=0, want=6434, limit=52 [ 622.415148] attempt to access beyond end of device [ 622.422716] loop5: rw=0, want=6434, limit=52 [ 622.427285] Buffer I/O error on dev loop5, logical block 3216, async page read [ 622.463071] audit: type=1804 audit(1586897628.677:14634): pid=30348 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/435/bus" dev="sda1" ino=16097 res=1 [ 622.510423] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 622.519922] FAULT_INJECTION: forcing a failure. [ 622.519922] name failslab, interval 1, probability 0, space 0, times 0 [ 622.528409] audit: type=1800 audit(1586897628.687:14635): pid=30364 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16037 res=0 [ 622.531236] CPU: 1 PID: 30368 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 622.559249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.568694] Call Trace: [ 622.571289] dump_stack+0x13e/0x194 [ 622.574930] should_fail.cold+0x10a/0x14b [ 622.579075] should_failslab+0xd6/0x130 [ 622.583040] kmem_cache_alloc_node+0x288/0x7a0 [ 622.587762] ? netlink_has_listeners+0x1d8/0x310 [ 622.592515] __alloc_skb+0x9a/0x4c0 [ 622.596127] ? skb_trim+0x160/0x160 [ 622.599740] ? netlink_has_listeners+0x1ff/0x310 [ 622.604488] kobject_uevent_env+0x6d1/0xc50 [ 622.608827] device_add+0xa02/0x1400 [ 622.612546] ? device_private_init+0x180/0x180 [ 622.617129] netdev_register_kobject+0x180/0x390 [ 622.621907] register_netdevice+0x7ce/0xc70 [ 622.626261] ? netdev_change_features+0x80/0x80 [ 622.630917] __tun_chr_ioctl+0x20a3/0x33d0 [ 622.635139] ? tun_chr_close+0x60/0x60 [ 622.639011] ? tun_chr_compat_ioctl+0x30/0x30 [ 622.643489] do_vfs_ioctl+0x75a/0xfe0 [ 622.647273] ? selinux_file_mprotect+0x5c0/0x5c0 [ 622.652124] ? ioctl_preallocate+0x1a0/0x1a0 [ 622.656528] ? security_file_ioctl+0x76/0xb0 [ 622.660926] ? security_file_ioctl+0x83/0xb0 [ 622.665320] SyS_ioctl+0x7f/0xb0 [ 622.668669] ? do_vfs_ioctl+0xfe0/0xfe0 [ 622.672629] do_syscall_64+0x1d5/0x640 [ 622.676563] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 622.681749] RIP: 0033:0x45c889 [ 622.684940] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.692739] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 622.700002] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 20:53:48 executing program 1 (fault-call:8 fault-nth:3): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:49 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x80, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0xffffffffffffff87) sendfile(r0, r0, &(0x7f0000000480), 0xa198) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r2 = accept4$inet(r1, &(0x7f0000000280)={0x2, 0x0, @multicast1}, &(0x7f00000002c0)=0x10, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000004c0)={'broute\x00', 0x0, 0x3, 0x98, [], 0x7, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/152}, &(0x7f0000000440)=0x78) [ 622.707258] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 622.714597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 622.721913] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000005b [ 622.808628] minix_free_inode: bit 1 already cleared [ 622.961736] FAULT_INJECTION: forcing a failure. [ 622.961736] name failslab, interval 1, probability 0, space 0, times 0 [ 622.973947] CPU: 0 PID: 30391 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 622.981850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.991195] Call Trace: [ 622.993793] dump_stack+0x13e/0x194 [ 622.997426] should_fail.cold+0x10a/0x14b [ 623.001570] should_failslab+0xd6/0x130 [ 623.005529] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 623.010751] ? __lockdep_init_map+0x100/0x560 [ 623.015244] __kmalloc_node+0x38/0x70 [ 623.019038] kvmalloc_node+0x88/0xd0 [ 623.022744] alloc_netdev_mqs+0x75c/0xb70 [ 623.026878] __tun_chr_ioctl+0x1902/0x33d0 [ 623.031114] ? tun_chr_close+0x60/0x60 [ 623.035537] ? tun_chr_compat_ioctl+0x30/0x30 [ 623.040041] do_vfs_ioctl+0x75a/0xfe0 [ 623.043845] ? selinux_file_mprotect+0x5c0/0x5c0 [ 623.048620] ? ioctl_preallocate+0x1a0/0x1a0 [ 623.053054] ? security_file_ioctl+0x76/0xb0 [ 623.057460] ? security_file_ioctl+0x83/0xb0 [ 623.061862] SyS_ioctl+0x7f/0xb0 [ 623.065211] ? do_vfs_ioctl+0xfe0/0xfe0 [ 623.069175] do_syscall_64+0x1d5/0x640 [ 623.073065] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 623.078242] RIP: 0033:0x45c889 [ 623.081489] RSP: 002b:00007f6960a59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.089219] RAX: ffffffffffffffda RBX: 00007f6960a5a6d4 RCX: 000000000045c889 [ 623.096585] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000006 [ 623.103844] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 623.111178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 623.118478] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000003 [ 623.149852] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 623.160194] minix_free_inode: bit 1 already cleared 20:53:49 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:init_var_run_t:s0\x00', 0x24, 0x1) timer_gettime(r1, &(0x7f0000000140)) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:53:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:49 executing program 0 (fault-call:12 fault-nth:92): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:49 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 20:53:49 executing program 1 (fault-call:8 fault-nth:4): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 623.711887] audit: type=1800 audit(1586897629.947:14636): pid=30414 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16039 res=0 [ 623.748032] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. 20:53:50 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) [ 623.850783] FAULT_INJECTION: forcing a failure. [ 623.850783] name failslab, interval 1, probability 0, space 0, times 0 [ 623.862137] CPU: 1 PID: 30442 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 623.862386] print_req_error: I/O error, dev loop5, sector 0 [ 623.870036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.870042] Call Trace: [ 623.870062] dump_stack+0x13e/0x194 [ 623.870079] should_fail.cold+0x10a/0x14b [ 623.870094] should_failslab+0xd6/0x130 [ 623.870106] kmem_cache_alloc_node+0x288/0x7a0 [ 623.870115] ? netlink_has_listeners+0x1d8/0x310 [ 623.870132] __alloc_skb+0x9a/0x4c0 [ 623.870142] ? skb_trim+0x160/0x160 [ 623.870153] ? netlink_has_listeners+0x1ff/0x310 [ 623.870163] kobject_uevent_env+0x6d1/0xc50 [ 623.870189] device_add+0xa02/0x1400 [ 623.870205] ? device_private_init+0x180/0x180 [ 623.870220] netdev_register_kobject+0x180/0x390 [ 623.870234] register_netdevice+0x7ce/0xc70 [ 623.870246] ? netdev_change_features+0x80/0x80 [ 623.870259] __tun_chr_ioctl+0x20a3/0x33d0 [ 623.870274] ? tun_chr_close+0x60/0x60 [ 623.904336] audit: type=1800 audit(1586897630.097:14637): pid=30444 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16039 res=0 [ 623.905242] ? tun_chr_compat_ioctl+0x30/0x30 [ 623.905256] do_vfs_ioctl+0x75a/0xfe0 [ 623.905271] ? selinux_file_mprotect+0x5c0/0x5c0 [ 623.990107] ? ioctl_preallocate+0x1a0/0x1a0 [ 623.994520] ? security_file_ioctl+0x76/0xb0 [ 623.998913] ? security_file_ioctl+0x83/0xb0 [ 624.003306] SyS_ioctl+0x7f/0xb0 [ 624.006676] ? do_vfs_ioctl+0xfe0/0xfe0 [ 624.010636] do_syscall_64+0x1d5/0x640 [ 624.014515] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 624.019692] RIP: 0033:0x45c889 [ 624.022883] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.030947] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 624.038198] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 624.045452] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 624.052708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 624.059961] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000005c [ 624.070133] FAULT_INJECTION: forcing a failure. [ 624.070133] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 624.082218] CPU: 0 PID: 30440 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 624.090126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.099488] Call Trace: [ 624.102086] dump_stack+0x13e/0x194 [ 624.105730] should_fail.cold+0x10a/0x14b [ 624.110866] ? save_trace+0x290/0x290 [ 624.114772] __alloc_pages_nodemask+0x1bf/0x700 [ 624.119438] ? save_trace+0x290/0x290 [ 624.123247] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 624.123497] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 624.128285] alloc_pages_current+0xe7/0x1e0 [ 624.128298] ? rcu_read_lock_sched_held+0x10a/0x130 [ 624.128310] __get_free_pages+0xb/0x40 [ 624.128319] __dev_alloc_name+0xe3/0x2b0 [ 624.128327] ? kasan_unpoison_shadow+0x30/0x40 [ 624.128337] ? __dev_get_by_name+0x140/0x140 [ 624.128350] dev_get_valid_name+0xa0/0x1c0 [ 624.165978] ? dev_alloc_name+0x160/0x160 [ 624.170139] __tun_chr_ioctl+0x1921/0x33d0 [ 624.174496] ? tun_chr_close+0x60/0x60 [ 624.178422] ? tun_chr_compat_ioctl+0x30/0x30 [ 624.182925] do_vfs_ioctl+0x75a/0xfe0 [ 624.186730] ? selinux_file_mprotect+0x5c0/0x5c0 [ 624.191493] ? ioctl_preallocate+0x1a0/0x1a0 [ 624.196001] ? security_file_ioctl+0x76/0xb0 [ 624.200411] ? security_file_ioctl+0x83/0xb0 [ 624.204969] SyS_ioctl+0x7f/0xb0 [ 624.208326] ? do_vfs_ioctl+0xfe0/0xfe0 [ 624.212349] do_syscall_64+0x1d5/0x640 [ 624.216294] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 624.221470] RIP: 0033:0x45c889 [ 624.224891] RSP: 002b:00007f6960a59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.232602] RAX: ffffffffffffffda RBX: 00007f6960a5a6d4 RCX: 000000000045c889 [ 624.239864] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000006 20:53:50 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x41c2, 0x80) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) [ 624.247573] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 624.255203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 624.262711] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000004 20:53:50 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x101002, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, @none, 0xfb}, 0xa) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:53:50 executing program 0 (fault-call:12 fault-nth:93): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:50 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) [ 624.323173] audit: type=1800 audit(1586897630.557:14638): pid=30457 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16001 res=0 [ 624.379773] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 624.395385] attempt to access beyond end of device [ 624.403847] loop5: rw=2049, want=6434, limit=52 [ 624.414420] audit: type=1800 audit(1586897630.647:14639): pid=30469 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16044 res=0 [ 624.444066] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 624.456338] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 624.474633] attempt to access beyond end of device [ 624.480668] loop5: rw=0, want=6434, limit=52 [ 624.499223] Buffer I/O error on dev loop5, logical block 3216, async page read [ 624.531959] FAULT_INJECTION: forcing a failure. [ 624.531959] name failslab, interval 1, probability 0, space 0, times 0 [ 624.543549] CPU: 0 PID: 30481 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 624.551449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.560925] Call Trace: [ 624.563512] dump_stack+0x13e/0x194 [ 624.567141] should_fail.cold+0x10a/0x14b [ 624.571281] should_failslab+0xd6/0x130 [ 624.575243] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 624.580334] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 624.585798] ? __alloc_skb+0x9a/0x4c0 [ 624.589588] __kmalloc_node_track_caller+0x38/0x70 [ 624.594518] __kmalloc_reserve.isra.0+0x35/0xd0 [ 624.599192] __alloc_skb+0xca/0x4c0 [ 624.602801] ? skb_trim+0x160/0x160 [ 624.606412] ? netlink_has_listeners+0x1ff/0x310 [ 624.611166] kobject_uevent_env+0x6d1/0xc50 [ 624.615478] device_add+0xa02/0x1400 [ 624.619177] ? device_private_init+0x180/0x180 [ 624.623758] netdev_register_kobject+0x180/0x390 [ 624.628504] register_netdevice+0x7ce/0xc70 [ 624.632809] ? netdev_change_features+0x80/0x80 [ 624.637474] __tun_chr_ioctl+0x20a3/0x33d0 [ 624.641694] ? tun_chr_close+0x60/0x60 [ 624.645579] ? tun_chr_compat_ioctl+0x30/0x30 [ 624.650071] do_vfs_ioctl+0x75a/0xfe0 [ 624.653857] ? selinux_file_mprotect+0x5c0/0x5c0 [ 624.658595] ? ioctl_preallocate+0x1a0/0x1a0 [ 624.662994] ? security_file_ioctl+0x76/0xb0 [ 624.667386] ? security_file_ioctl+0x83/0xb0 [ 624.671776] SyS_ioctl+0x7f/0xb0 [ 624.675127] ? do_vfs_ioctl+0xfe0/0xfe0 [ 624.679085] do_syscall_64+0x1d5/0x640 [ 624.682966] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 624.688136] RIP: 0033:0x45c889 [ 624.691311] RSP: 002b:00007f7283bdec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.699000] RAX: ffffffffffffffda RBX: 00007f7283bdf6d4 RCX: 000000000045c889 [ 624.706267] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 624.713517] RBP: 000000000076c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 624.720770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 20:53:50 executing program 1 (fault-call:8 fault-nth:5): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:50 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) [ 624.728026] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000005d 20:53:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 624.796805] attempt to access beyond end of device [ 624.809338] audit: type=1800 audit(1586897631.037:14640): pid=30490 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16113 res=0 20:53:51 executing program 0 (fault-call:12 fault-nth:94): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 624.851601] loop5: rw=0, want=6434, limit=52 [ 624.852632] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 624.863714] Buffer I/O error on dev loop5, logical block 3216, async page read [ 624.895989] attempt to access beyond end of device [ 624.901316] loop5: rw=0, want=6434, limit=52 [ 624.919799] FAULT_INJECTION: forcing a failure. [ 624.919799] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 624.931735] CPU: 0 PID: 30505 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 20:53:51 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d00)={0x0, 0x0}, &(0x7f0000000d40)=0xc) syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000200)='./file0\x00', 0x4a4, 0xa, &(0x7f0000000c00)=[{&(0x7f0000000240)="aa3bff3f07ff8065b43104f4245f6e580f4be59703a25233669ad82c92632cf36ff88fb4fa15c8d16cac85ecdb7c7c0c2b592de5a02ba6b0575aeacb5dbb63e354042fceb3e8c30caf", 0x49, 0xffffffff}, {&(0x7f00000002c0)="efa6e6f8d1c6a0f933f44e6a979e3158c9f450cd34942cf2784c6beb5f31df22b58a674344a1b99c98d9f108742b355f6050475bcf20d205c6a120b9afb9c139a2c10021545783e560f915e5f46bb39d023b6972f5548a631a0b9d7b21c979d633fe31e62a6068461564ad28003206acc5a8cbe044383d436b3c1b414521df2cd4a1c60afd9450891ef763bbd38b62455aac4e51c8957d561d98a1623e15e3206b", 0xa1, 0x7}, {&(0x7f0000000380)="3de7b82635e9ab3cecf6a8153e5b885e91f25d5355f3804fc8ac2f4c0094b616bc35981e88928440c8d929b9b9a386fae65d8f286c06ddbb11341779f6613d7a01c810d5dc2ee428791f69857d5199a30af938466a1b5ac8a98f21cd692086391762cf78a1175c72a15c98ecf9a46822b17f0346825938416cd8ab4274ab0c36930e7fa91293c3df90a7dd243ff2f3c5e456e069ba0ce0b08f0f", 0x9a, 0x34f}, {&(0x7f0000000580)="e4dccaf7f8693c35a716b3fa8314c17b280981dfd16c4aee1955a6fa6028640bfdb81c356ba861ae34baf62b95f74ff78bdd3e436a831d88f37265d78175c8a3d33289a82a0d8b9e69be12217545e1be5d3a7ad9b854dcb40e7da0fb5632e08eeec539c63b50eae1efe5", 0x6a, 0x7}, {&(0x7f0000000440)="45870c8af64eddf4c2caff03", 0xc, 0x17}, {&(0x7f0000000500)="2d10438b22a98b089f0a326322400f6759bcff47d3e02813df1e240801c53627", 0x20, 0x3}, {&(0x7f0000000600), 0x0, 0xbe}, {&(0x7f0000000980)="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", 0xfe, 0x101}, {&(0x7f0000000a80)="ec6865626cc08b611b14f4d5b951ce074be4eb4b10641f0637fd8f36e9350ec0c65a4ad055f02b1a335fb88ea55a259fdf6c4f3618ad63fc0de0e4d6525b595a3343672a9a6766112eb64fd46e3a57d7c8887c5fa7d7ba9fa010", 0x5a, 0x400}, {&(0x7f0000000b00)="0e7ec6201736cb5bb2646bc265f11800b2529bcf247f64ae2a8f7dda2ec574275700bc6b799cf72b9843b23be5e5f0bbd00470ccae75aa8f57189439fd620c1354288b6495a660d7f6a9e72787dc0654e0abf1a9e85f0fe027af9341e46bfeabba749d0715261b6acf3883c1135a9e58fa6a565bd0d2dec9067a0a88ab04c2f8e2bd745d6a851794e9b7b58a8782ae21ae0f6e60d1c912c89ff378f423595963e36dcf64bc51d1e8e8bf22994777e574aae9784b82b0f808b69fb854b1725dd1f2d368173f3447401a5892c0165fd08dadf395", 0xd3, 0x6}], 0x3010000, &(0x7f0000000d80)=ANY=[@ANYBLOB="6461782c67716e6f656e666f7263652c616c6c6f6373697a653d092c6e6f61747472322c646f6e745f6d6561737572652c646566636f6e746578743d73797361646d5f752c736d61636b66736465663d6d696e6978002c61707072616973655f747970653d696d617369672c7375626a5f747970653d232c6f626a5f75730706000000000000002c657569643c", @ANYRESDEC=r1, @ANYBLOB=',smackfshat=minix\x00,\x00']) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_mount_image$tmpfs(&(0x7f0000000ec0)='tmpfs\x00', &(0x7f0000000f00)='./bus\x00', 0xfffffffffffffffa, 0x5, &(0x7f0000002140)=[{&(0x7f00000020c0)="d38c2a77dba59cd2537c74a2e062a2ae97b63b6dfe5c2f619396afb2b02829ac42c6b616e43db2f0b74cf5da1c5ac417fb0ad11075f74ef098334f68ed201c0e1399cafa06211c74abc59ff5bfff6e50aa201b35d89cbb56218ab12c50936deabb9c110ee05ce0ea46931af4d914", 0x6e, 0x80}, {&(0x7f0000000fc0)="a6fef4aae5ce33fb2743fb20b047e8b56c2ad91d5aaa92ed403504120b7ab18bea988a5d7c4d3ccb4318fdad2f38177cbac443a52e31c7d3fe5f8c647bda7bf5f2872ef66877409d1e59295f3c2848ff46fee3321f176050ca2c4332871891e57e8a44cb420a5f95d71391003998a6af9180e8", 0x73, 0x20}, {&(0x7f0000001040)="31057d5cc4730be4aa1fa0ed353610824bd27027b400a5531935c3fd1a2c441db2b07490138f74b9fa63544842ae2c4df1450148ca14cc3cd1fc1e170a9ac5d29a4056ead29ce6e0d1ce5f3b7e43df03a285b6f28579a93064a6cb7010ad01a24973f7f684d45d813ea37e87e7c635601045ad531564b834ca31bde57913983696d8778deb1c33e0725904d4f92bf7aea54c7724a719b9bb36a4b0cd50cff5ec8cf7dfacd03d757cb1fbb0e74e40889051e02d92ac38a2fc2c55ee1b86cca0e5c892bc3d9e2c5bea191506e7c90d715a8ee01102f24a99a09c4eda6732bb42543737ee44e3766986336494aef7842b2884e5c0c24ba5d0a851779bbb062c2d5ea4535a8d4fb5ce6892b7cbe5859c6d8ed759e4fab49ffd85837b0b0618cd8379cc058e947161009fcf5b4d9a36eb9c442408b085d4197957f96dfbb5df9284ff31db801cfd516f7fb0697a882affff318bd3ebef958b983dfd9b1fd3c7214abe8195e4bafdf9d76e2811463a449cd8797eee10ca4a00490061a1462c1f9e01a35e6d740fe7ab146be4f25b6a273fc9af1bd48a674438110dfccc1e1bcf04fd07239d9a68bddb6821a856c1bfe1ea9aeff2ad14545895dc6a3bb16a01926f5bbe68ed9c83b337e9cf4cbfc3d9d723deaec52473a784324650c32de895ea71188a5c0e54b700e7f47f6fd04a02aa2ddcf29c1fed5a6ebd93c330c651d5e3fb9737a33670ab5ad6034df58e43ded304d95c96bbcf1452935afd9a598bc9451100e969534ed681e29666fcc4182960412dbfa11505d49355931fb62fab17c67a1e235cb5ee2e1018e4bc625802d3c87093be98d78a129ce64dba0dc4c58be778cd30370930af63a16f435d9d89540ad7a39690f2bc99bba24df1a3eb0f606788ba8b29f37e2459beb94463b5ea89da4bebf2e960b53f23b4e7e667030a6604ed1163ef71be5c042b19e2dc5c089d5eaf089f8cda8f1fe2660cccc874c7d16de28de363eaa39828b6161b0eb93852c7c7d06c031640b1e86c6cb3010aa43cec6f5974873db25fc3b713b9aac801e2c0e11fbed6d333fcd0baa32b23209d9ad2a01a68ea7cccbd98e33945bfe1ad9f156c8ce818d1c81de3fdd22fa2e4aac9ab73e9a2ef53f86e40ae7d7312a14154d6b76b8fc97a5541201b8333b4d72b4be5a39665f79059e84bfcdbc7834bdda29cf1a2a2081d773ad4e1c13633fe1409fff6cf3711f265dac76b4fdf72d8aa4b285406a5891b03e44f6026f3be69a4a2218d51709b1f862efabb421c4cf185454c03cdde93d979533dd216b3b15f6ac91b5f4b1dce697cb39193339850e28b3465031e9d36db6154e89c69177efb30cfbfa86d893471958c19b9d434de0eaf0b6e455b0cd274b4ed9972b677bd54e558f1c96b2fd97825285dfdd751a65c74cc7bb51e754811a5f797d4c51086c8e3d1e6bde9435b703cf0d739db4c82e5df7e856d900d16fed02552754e74f62ae23f0f702af4d6b4557b54cdcc1fee65bd81ec8922aec762fa7da187fe41a0fa362cc6ef41c79d1e325628159af203fedad679c2953385e4ebc8a5dfc00c8dd420c09e332946d879c8d210d72eb7c477dde70dd95265f2e006b86d2168e939fda2ef5c293d6ff8d8f285c7e5c623b7d79305e44f4df285a1f419838edbf94cf8094cbf6a272a948108896b228f780cb3323339af1de3f5587c199ade4e415c156e73ad323456a6678ac4f557e0c6b5074f3aa7623ffe7bf10b512f66aa781fed6f169429d185ff51980dac53b61a2da7ddbfa4ddbc548f8fb749dc45e33f54b0c278b98d190ee6076ea922b1b7a16c8e664280ee5d751dea901e57e406a4c14ab74d611351f4f8b997f9db69905c2d2f7daa07dfdc2e0a17663de8c081cd2993a1a9f046fea9ec79c1bd35b441a90aa2ddf60ee6ad179bd11a0210cc41be12a199ad76932a7faf51a183acde2480ed3b74352c2a1b4117a196accfe307d19b6e41895bf67c42b8eb4f4766eb957a8a7b5178a6c8b807e94e1912a04a187bfae22278a87ab44582df893f165f565e44299ba53e620d2f480cbcdc6a2d58c37720bc312908e62fd55b324384eabec01a076096c7b3d8be71aa4bd9241b4b9f2f59a971c8f8d3da1e021f050c7183f66aa533bb196108645e78a4d6e0c20768799770f91ff0fa8abe0c4348dc0fdd3322dfe5287cd82b50e9475b56468bc8369c9d5e25ebee7891e7b377a9d72c18e5b270552593bd1f2368aca7316b91e04eb012886e73720eb6a6303fc33bbf12272a9d5f1d5f0fbb46bb91705992fac4c772ed74c4b3f7290988d7c1f23cec18c3a3f21f1e1a07a1407e7f76f4f8fa531babd07a83a6571ff2f56c1cea799c02f63659ef2d127ea543a4b369f0cf652d3575c0a81868e88f56251ba442283b3c1b79d5b89b3a3ead3a296da82f1fd76be33365ea39d867a9e6a810dfccb499e51d3a5408ca0b7c6ed910dc13a065edd4f8bdbcf7bdc00522d096643012bfeb3e0276c25f8ec116eb597b121ca394e86bcfef74f1f326418c9ce6660210f9703b131babcbaaa83cd3f0e23a25de272b513a499152925ab02ed2b7740c50ae26527d3eecd805882aedf383f204a60f81a538d32286ea4f64421e7401ba548422ac0ef58ed22c4b2fc69e465e791b091eff66d8ed1619ab791ea24d2a3a930a4a9b3155d830f4b2106d47f319f518d64390d90d5a3f81316cfb99fa1678525d8956804a297b826383852a095caa04abfa6a2b89d803e074112791bd66719ea4100e37d852b7b6fe16002b27401eb50e69fa4ebd13822f2f65bd5d8ccbf1540e4358591ea79b1764f4a8c0883fbdafafbc6a808b7bdd63c087be27c55f247a8cfa675f730f359e85780d0c1eb076d15cd86739e5993b0708755b6d3905513203ea46aff88a1930563470d4a9a2436c3d5133b234d8ddf5b38f6ca94b157daac9e6eb6b42aa281a46326ea07c024e316bf9c681d7e85da1fe5b050bf5a3f8111892780fdd06dda04b57c8a09719d89b168b8a25a66687f11c46ba85aa8aa7562be7512246be1592f1d6c908eaa881811ed38038ceb4fd1be32aa254fa6bc2cd45ee28434a6380d23f51906445a247e4e33ed70793d297eef472392c5a4920e5c4be2295c9e9f662f03057e3222dbf039869d781254c166bae271f8803e9325ba1272d9d41dd319c37d0a63cdd03bfe94e615e042a992b426e84e79e2da529364bb2b2a1da7ba9f0e166ca63da2e50f3e0b930dc201b279d8615cf3228c3f39f0c99f4e10e9e347646b6b085dbe135710a6ece7915e3c4f297ff1b19e5886ff706226f6e063ca2e97121697c865fb6e3979ddea9273967e82068030404ac150d1daafc3d4436761eb7e9b5811d11468cf983626884cffa04e1d7f4af079929d10b529fa6d17110302ef0369dbfd068cf817c229bb49951704220a8817df6f930a87050be24a7b98645d01e2546fe12d24fea27fb65d14dd036816f046600f6cb078f4ccd9565ffe31ebb10808bd4642903c424fb82df03a1dc0fd3a50e5dc1ca4d349a2d595541c97c1c6e13a1f802099e32013af8805e63083369a15256551c73a5e2a92da51b8fc5f3aef1fbd7a9d531b6dd3c79dd5c1e0109f787c94bccf504eff1082fd7d225b38640f6734778020906e8b1f490ce64db03143c50cc3544b463c7ed21b1fa28e740c0a359a2371fb370a3faeae4a0637030492fdcaad942ddfefc51b95cd7ed612d7522b57b7e72e584e3e1d67f3e7e941356ee866f44497740335bf29eff503952ac9d514a0666223f04d37eaf66c3c09a9a82b23d7a31b56ce76445dcb497a3b1c02584cb28652a6ef227a68148b7e14adc14c93f0f2b65c8fa050243729927ff22071d3e9b0d5792b5f2331d571c29d840bb0a322a901055e76bba9772f578a618bd4e8fdedf9dce6c69e1577024f41e70697e64c647f7c7764b9e79529db49898af44993a385a4aac757cc4941001fe1f093a1bbd6e93544ba7256f404c4f59ed1ab5894f655edc7016544642804dd30f43dfa6a2192936a4298e262c05348240f13f10b684a61367f2864df369accfdfed4883d983d166117d7694d481c93b93235d2c9eb9fb0ddb1d6de0fa5e0230609de5a81a8a0bda65f17f0bf58435449832cfbce04fb845ba493eb6919750546c9126c1420c8992ae0b0f2198d8e52a1720e1692011cf94160f9dadc4d400a6b6c4d299d8450f26ab365e1ca0ffa097cbf9260fcb09afc7307ed4fd4853711cae2aa0470fa75ff6388763444e860c6075008c7202ab0c32f19b040b08b515212795b447bf8650ee8c90109bddb6f51244b767913715311ec3dc1dec49891f249dfeaf3a6442c8a71842db7ba8b2cc127eaadd9f44c133b850ce8729111c5c22fefb7776539d99f909c96b9510bf9dbce6b13ce2af414c2b719da9ec8a35389e239247942d292988bd9597a2dcb85c5bc0dac5f2580a39aea28b5bd2b3d58bc1c25c6f2a21a2a8ed160bf43f06ade44227d3e45daa2391f38b59824d6fd1884a80e9ff050095b28033dbfa39df78d710f8c5335de0f67d2d8d99efaf8508092e59f3cbbbabfe10cbe5cf6b759a260175c86b40500bbec9f30881b69c9b3412f78552696a594349e322221cd44e81a61dba0074a6ae32e764c9b736ca070e21a7e2283d07a4b818f4973677b8a2ab66d646ac60dcace9f5431533125853bf00d1260ef777bc9cdd2b23c61f8f857188422bbb3c4b48bcd47e994b5f3397d18b0cce89dd082f55171a230a66f91e8ac374e04d8a5656f16b0563eb21dcba04de0e2565150329a709c2770f16fc8a3eced04d672c82cd8874d6fe39592bb2deb77c64faf58261ec5f8556c8fb9b1f022f78db78e6bf8f7f7e19036a5237c05481f38607798777d45a361d197faf53a453c93bc0fab589a6a91a72b928eda28b48b6fe40490ce0b15c8fab032dc3314e439c52b71f6975a70cece853b065d39c566113ae145adb17982ee5888dac21d179ab2a550e49ba1289032c61d9ad6b9ed613afe0c1b6b337c4956fd9d9cfa3ed3838c7c4925e19734c2f0335e43c8ca3511c9b19453921bc10a0797450b258f457cccb4c1ec2816b640da9f8c368e3f78d376ccc024cf3a8b20c06fd8fadb9a331010d5bfbe0b43b8808b628166eae33abea0994944adda6dff8967387ff92af1723c58df64c185ac5cc9e94fb6085aa636ccffda290c5952f8c18dab402de7ef1362742993a4495a5b053ddf10db87b242d7353ef395c287988e36f0062f65d1067a4c3e929c8c4ffcbd3c70609e48c42775b835427dfb22f66af095c05a6fee70891c332a1171a60ff1b06d5e099bc0f06f9c2e1400b1e9422f7dd93b613b8df7d35f80cbe7e6c0b238867d6fc7eaa1bfa94295a0fdf6d92bcdf279ab82643afced9e23ea2ad3165512e5f895ed8ac1b912b937f3d5d293f32fe6eaa7e628e181a88db6a51f7ebb018223011ebe76becdc1e34b77706ca4e8730c6cd11ea8a154838e073b17eda0c7cc43dc897bcda4a142a4a629f98cd301f3f2de0b8191409f2976a714134d2eaf52ba8ccdabf93803d31bc05b3e9f686e992be2381d10eec8f270b49eb4d9914c8d7780d4bd3698bbfbf054bc9905bafc8babad60f977bef047afea9452ac72edc73044cba67d56b35cdbac612d0d18676dbeac39148b35c8fdf870521af53892e9f09350fe35d7b4c028646948e779fb6c716a2f4e3c835eb7fdf8171c08a37988d4915540a94ac6684af7f8392d8a3283d081629a0d17357ba8fdee4b68887047608143c446efaad0e22", 0x1000}, {&(0x7f0000002040)="5c22baad1c496e484bfcf4e569152785aed47e1bb8f02cc99c364568901995a0afdc33bd611616322d7e72898fce7be8097339b0c09dc428fa9726e843707b559d0c6b84f41312d8bca97b13e4fc3355236a6d5b", 0x54, 0x800}, {&(0x7f0000002280)="7363697b5b24cf165f4b8a4f7f861e4d0430e2562706795e46585b2a583c93ffa61ac56726c7ef056b981abbe5ff05186366f0d02885434266f9990f4987ec09bfc44ffb", 0x44, 0x7}], 0x0, &(0x7f0000000f40)={[{@mode={'mode', 0x3d, 0x2400}}], [{@dont_measure='dont_measure'}]}) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cgroup.events\x00', 0x0, 0x0) write$vhci(r4, &(0x7f0000000e40)=@HCI_EVENT_PKT={0x4, "80966d3dd2298b0d410927de7c57db8a799ed0ec662b984c684ab9bb234aacfffa7b4118d638d16f000656ff104405eae340739861964fd6d3e4e93a1ab5875bb274987e6a13f4656bb938aa99ab"}, 0x4f) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002200)='/dev/vcs\x00', 0x541040, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000002240), 0x4) mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x2010, r2, 0x83000000) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r6, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r6, r6, &(0x7f0000000480), 0xa198) [ 624.939666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.949024] Call Trace: [ 624.951625] dump_stack+0x13e/0x194 [ 624.955269] should_fail.cold+0x10a/0x14b [ 624.959425] ? save_trace+0x290/0x290 [ 624.963236] __alloc_pages_nodemask+0x1bf/0x700 [ 624.967917] ? save_trace+0x290/0x290 [ 624.971846] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 624.976887] alloc_pages_current+0xe7/0x1e0 [ 624.981472] ? rcu_read_lock_sched_held+0x10a/0x130 [ 624.986496] __get_free_pages+0xb/0x40 [ 624.990407] __dev_alloc_name+0xe3/0x2b0 [ 624.994471] ? kasan_unpoison_shadow+0x30/0x40 [ 624.999060] ? __dev_get_by_name+0x140/0x140 [ 625.003480] dev_get_valid_name+0xa0/0x1c0 [ 625.007719] ? dev_alloc_name+0x160/0x160 [ 625.011866] __tun_chr_ioctl+0x1921/0x33d0 [ 625.016095] ? tun_chr_close+0x60/0x60 [ 625.019978] ? tun_chr_compat_ioctl+0x30/0x30 [ 625.024471] do_vfs_ioctl+0x75a/0xfe0 [ 625.028262] ? selinux_file_mprotect+0x5c0/0x5c0 [ 625.033002] ? ioctl_preallocate+0x1a0/0x1a0 [ 625.037406] ? security_file_ioctl+0x76/0xb0 [ 625.041798] ? security_file_ioctl+0x83/0xb0 [ 625.046193] SyS_ioctl+0x7f/0xb0 [ 625.049544] ? do_vfs_ioctl+0xfe0/0xfe0 [ 625.053514] do_syscall_64+0x1d5/0x640 [ 625.057407] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 625.062596] RIP: 0033:0x45c889 [ 625.065795] RSP: 002b:00007f6960a59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.073772] RAX: ffffffffffffffda RBX: 00007f6960a5a6d4 RCX: 000000000045c889 [ 625.081137] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000006 [ 625.088398] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 20:53:51 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) [ 625.095800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 625.103079] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000005 [ 625.120015] minix_free_inode: bit 1 already cleared [ 625.205327] FAULT_INJECTION: forcing a failure. [ 625.205327] name failslab, interval 1, probability 0, space 0, times 0 [ 625.217278] CPU: 1 PID: 30501 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 625.225355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.234712] Call Trace: [ 625.235737] audit: type=1800 audit(1586897631.457:14641): pid=30517 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16001 res=0 [ 625.237480] dump_stack+0x13e/0x194 [ 625.237499] should_fail.cold+0x10a/0x14b [ 625.237515] should_failslab+0xd6/0x130 [ 625.237525] kmem_cache_alloc_trace+0x2db/0x7b0 [ 625.237540] ? device_private_init+0x180/0x180 [ 625.237552] kset_create_and_add+0x49/0x190 [ 625.283921] netdev_register_kobject+0x1bf/0x390 [ 625.288674] register_netdevice+0x7ce/0xc70 [ 625.292993] ? netdev_change_features+0x80/0x80 [ 625.297694] __tun_chr_ioctl+0x20a3/0x33d0 [ 625.302067] ? tun_chr_close+0x60/0x60 [ 625.306151] ? tun_chr_compat_ioctl+0x30/0x30 [ 625.310653] do_vfs_ioctl+0x75a/0xfe0 [ 625.314451] ? selinux_file_mprotect+0x5c0/0x5c0 [ 625.319198] ? ioctl_preallocate+0x1a0/0x1a0 [ 625.323808] ? security_file_ioctl+0x76/0xb0 [ 625.328215] ? security_file_ioctl+0x83/0xb0 [ 625.332659] SyS_ioctl+0x7f/0xb0 [ 625.336011] ? do_vfs_ioctl+0xfe0/0xfe0 [ 625.339974] do_syscall_64+0x1d5/0x640 [ 625.343852] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 625.349165] RIP: 0033:0x45c889 [ 625.352361] RSP: 002b:00007f7283c41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.356429] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 625.360196] RAX: ffffffffffffffda RBX: 00007f7283c426d4 RCX: 000000000045c889 [ 625.360203] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 625.360222] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 625.360227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 625.360231] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000005e 20:53:51 executing program 0 (fault-call:12 fault-nth:95): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 625.391062] ip6t_REJECT: ECHOREPLY is not supported. [ 625.431142] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. 20:53:51 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 20:53:51 executing program 1 (fault-call:8 fault-nth:6): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 625.606206] FAULT_INJECTION: forcing a failure. [ 625.606206] name failslab, interval 1, probability 0, space 0, times 0 [ 625.617592] CPU: 1 PID: 30527 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 625.625612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.635304] Call Trace: [ 625.637898] dump_stack+0x13e/0x194 [ 625.641542] should_fail.cold+0x10a/0x14b [ 625.645706] should_failslab+0xd6/0x130 [ 625.649659] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 625.649797] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 625.662090] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 625.667635] ? __alloc_skb+0x9a/0x4c0 [ 625.671517] __kmalloc_node_track_caller+0x38/0x70 [ 625.676444] __kmalloc_reserve.isra.0+0x35/0xd0 [ 625.681192] __alloc_skb+0xca/0x4c0 [ 625.684807] ? skb_trim+0x160/0x160 [ 625.688420] ? netlink_has_listeners+0x1ff/0x310 [ 625.693164] kobject_uevent_env+0x6d1/0xc50 [ 625.697503] device_add+0xa02/0x1400 [ 625.701209] ? device_private_init+0x180/0x180 [ 625.705858] netdev_register_kobject+0x180/0x390 [ 625.710624] register_netdevice+0x7ce/0xc70 [ 625.714932] ? netdev_change_features+0x80/0x80 [ 625.719605] __tun_chr_ioctl+0x20a3/0x33d0 [ 625.723850] ? tun_chr_close+0x60/0x60 [ 625.727740] ? tun_chr_compat_ioctl+0x30/0x30 [ 625.732311] do_vfs_ioctl+0x75a/0xfe0 [ 625.736100] ? selinux_file_mprotect+0x5c0/0x5c0 [ 625.740841] ? ioctl_preallocate+0x1a0/0x1a0 [ 625.745241] ? security_file_ioctl+0x76/0xb0 [ 625.749637] ? security_file_ioctl+0x83/0xb0 [ 625.754036] SyS_ioctl+0x7f/0xb0 [ 625.757406] ? do_vfs_ioctl+0xfe0/0xfe0 [ 625.761723] do_syscall_64+0x1d5/0x640 [ 625.765609] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 625.770781] RIP: 0033:0x45c889 [ 625.773962] RSP: 002b:00007f7283c41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.781740] RAX: ffffffffffffffda RBX: 00007f7283c426d4 RCX: 000000000045c889 [ 625.788993] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 625.796942] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 625.804217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 625.811470] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000005f [ 625.955263] FAULT_INJECTION: forcing a failure. [ 625.955263] name failslab, interval 1, probability 0, space 0, times 0 [ 625.967709] CPU: 1 PID: 30553 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 625.975762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.985123] Call Trace: [ 625.987731] dump_stack+0x13e/0x194 [ 625.991378] should_fail.cold+0x10a/0x14b [ 625.995555] should_failslab+0xd6/0x130 [ 625.999539] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 626.004659] ? find_held_lock+0x2d/0x110 [ 626.008729] __kmalloc_node+0x38/0x70 [ 626.012667] kvmalloc_node+0x88/0xd0 [ 626.016389] tun_attach+0x5d9/0xed0 [ 626.020022] ? mod_timer_pending+0xf10/0xf10 [ 626.024898] ? rcu_read_lock_sched_held+0x10a/0x130 [ 626.029914] __tun_chr_ioctl+0x206d/0x33d0 [ 626.034152] ? tun_chr_close+0x60/0x60 [ 626.038045] ? tun_chr_compat_ioctl+0x30/0x30 [ 626.042561] do_vfs_ioctl+0x75a/0xfe0 [ 626.046538] ? selinux_file_mprotect+0x5c0/0x5c0 [ 626.051310] ? ioctl_preallocate+0x1a0/0x1a0 [ 626.055728] ? security_file_ioctl+0x76/0xb0 [ 626.060128] ? security_file_ioctl+0x83/0xb0 [ 626.064597] SyS_ioctl+0x7f/0xb0 [ 626.067961] ? do_vfs_ioctl+0xfe0/0xfe0 [ 626.071931] do_syscall_64+0x1d5/0x640 [ 626.075814] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 626.081689] RIP: 0033:0x45c889 [ 626.084913] RSP: 002b:00007f6960a59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 626.092753] RAX: ffffffffffffffda RBX: 00007f6960a5a6d4 RCX: 000000000045c889 [ 626.100031] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000006 [ 626.108359] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 626.116166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 626.123606] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000006 [ 626.162410] ip6t_REJECT: ECHOREPLY is not supported. [ 626.307521] minix_free_inode: bit 1 already cleared 20:53:53 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 20:53:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:53 executing program 0 (fault-call:12 fault-nth:96): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:53 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f00000001c0)={0x1000, 0x4}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r2, r2, &(0x7f0000000480), 0xa198) sched_setparam(0x0, &(0x7f0000000200)=0x6) 20:53:53 executing program 1 (fault-call:8 fault-nth:7): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:53 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000200)={0xb8, &(0x7f0000000280)="d24e8112fbd2ae551955d1ede93e31930207871250048616e50a1928db3ccce918eb49e0631e3152f82e8069772496d965aa9cc9bf7826509be77c64680f3ce35928fc1ac6b5854fcf07ccfb9242312367c57cd28ed627f9e53de7a236d7f5cd075d4a3daed1010b614394533be4c3d8bbfc5e9a1a3d8d6e48028025c4999b4e00c989c2570eec1f08ea3660fc4df43d40391617bfedb4216cd39ff47c2defe4f820f68cbeffda1dd6b9dc3a3ab8ba75bd877b93ce0c80de"}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r5, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r5, r5, &(0x7f00000000c0), 0x8080fffffffe) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000140)="647756e6deea7e8e6db7ed0b80a48e8f17931437336a195d3e10aa9d3adffadbf78c2deb5cdd5c64cd8cea654bb0fe1fa389f160544d775b268daafe7084691f3c6a3b99eea40f71e7bf84090b03", 0x4e, 0x0, 0x0, 0x0, r5}]) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) [ 627.378632] kauditd_printk_skb: 2 callbacks suppressed [ 627.378640] audit: type=1800 audit(1586897633.617:14644): pid=30576 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16124 res=0 20:53:53 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) [ 627.422091] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 627.435037] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 627.452934] audit: type=1800 audit(1586897633.647:14645): pid=30577 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16131 res=0 [ 627.492375] attempt to access beyond end of device [ 627.499679] loop5: rw=2049, want=6434, limit=52 [ 627.517010] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 627.533490] attempt to access beyond end of device [ 627.539577] loop5: rw=0, want=6434, limit=52 [ 627.551195] Buffer I/O error on dev loop5, logical block 3216, async page read [ 627.564589] FAULT_INJECTION: forcing a failure. [ 627.564589] name failslab, interval 1, probability 0, space 0, times 0 [ 627.576127] CPU: 1 PID: 30603 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 627.582327] audit: type=1800 audit(1586897633.807:14646): pid=30604 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16130 res=0 [ 627.584456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 627.584462] Call Trace: [ 627.584480] dump_stack+0x13e/0x194 [ 627.584498] should_fail.cold+0x10a/0x14b [ 627.584514] should_failslab+0xd6/0x130 [ 627.584527] __kmalloc_track_caller+0x2e1/0x7b0 [ 627.584537] ? kstrdup_const+0x35/0x60 [ 627.584548] ? mark_held_locks+0xa6/0xf0 [ 627.584557] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 627.584568] kstrdup+0x36/0x70 [ 627.616895] attempt to access beyond end of device [ 627.617247] kstrdup_const+0x35/0x60 [ 627.617260] kvasprintf_const+0xf1/0x180 [ 627.617274] kobject_set_name_vargs+0x56/0x150 [ 627.621843] loop5: rw=0, want=6434, limit=52 [ 627.625645] dev_set_name+0xa4/0xc0 [ 627.625658] ? device_initialize+0x420/0x420 [ 627.625668] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 627.625681] ? __lockdep_init_map+0x100/0x560 [ 627.625697] netdev_register_kobject+0xc0/0x390 [ 627.625711] register_netdevice+0x7ce/0xc70 [ 627.625722] ? netdev_change_features+0x80/0x80 [ 627.625737] __tun_chr_ioctl+0x20a3/0x33d0 [ 627.625754] ? tun_chr_close+0x60/0x60 [ 627.625772] ? tun_chr_compat_ioctl+0x30/0x30 [ 627.625788] do_vfs_ioctl+0x75a/0xfe0 [ 627.638779] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 627.642489] ? selinux_file_mprotect+0x5c0/0x5c0 [ 627.642505] ? ioctl_preallocate+0x1a0/0x1a0 [ 627.642523] ? security_file_ioctl+0x76/0xb0 [ 627.642533] ? security_file_ioctl+0x83/0xb0 [ 627.642544] SyS_ioctl+0x7f/0xb0 [ 627.642552] ? do_vfs_ioctl+0xfe0/0xfe0 [ 627.642566] do_syscall_64+0x1d5/0x640 [ 627.642583] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 627.642590] RIP: 0033:0x45c889 [ 627.642598] RSP: 002b:00007f6960a59c78 EFLAGS: 00000246 [ 627.649562] attempt to access beyond end of device [ 627.650968] ORIG_RAX: 0000000000000010 [ 627.650976] RAX: ffffffffffffffda RBX: 00007f6960a5a6d4 RCX: 000000000045c889 [ 627.650982] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000006 [ 627.650987] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 627.650993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 627.650998] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000007 [ 627.662207] FAULT_INJECTION: forcing a failure. [ 627.662207] name failslab, interval 1, probability 0, space 0, times 0 [ 627.683957] loop5: rw=0, want=6434, limit=52 [ 627.710599] CPU: 1 PID: 30585 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 627.719606] Buffer I/O error on dev loop5, logical block 3216, async page read [ 627.719633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 627.860399] Call Trace: [ 627.863483] dump_stack+0x13e/0x194 [ 627.867203] should_fail.cold+0x10a/0x14b [ 627.871368] should_failslab+0xd6/0x130 [ 627.875371] __kmalloc_track_caller+0x2e1/0x7b0 [ 627.880063] ? kstrdup_const+0x35/0x60 [ 627.884041] ? save_trace+0x290/0x290 [ 627.887930] kstrdup+0x36/0x70 [ 627.891138] kstrdup_const+0x35/0x60 [ 627.894852] __kernfs_new_node+0x2e/0x470 [ 627.899108] kernfs_new_node+0x7b/0xe0 [ 627.903055] kernfs_create_dir_ns+0x3c/0x130 [ 627.907460] sysfs_create_dir_ns+0xb7/0x1d0 [ 627.912011] kobject_add_internal+0x27f/0x830 [ 627.916602] kobject_init_and_add+0xde/0x120 [ 627.921017] ? kobject_add_internal+0x830/0x830 [ 627.928337] ? kernfs_create_dir_ns+0xf0/0x130 [ 627.933291] ? dev_uevent_filter+0x3c/0xd0 [ 627.937649] ? dev_uevent_name+0xf0/0xf0 [ 627.941799] ? kobject_uevent_env+0x26c/0xc50 [ 627.946418] ? sysfs_create_dir_ns+0xf2/0x1d0 [ 627.951145] net_rx_queue_update_kobjects+0x18d/0x3e0 [ 627.956467] netdev_register_kobject+0x26e/0x390 [ 627.961231] register_netdevice+0x7ce/0xc70 [ 627.965567] ? netdev_change_features+0x80/0x80 [ 627.970766] __tun_chr_ioctl+0x20a3/0x33d0 [ 627.975029] ? tun_chr_close+0x60/0x60 [ 627.978930] ? tun_chr_compat_ioctl+0x30/0x30 [ 627.983439] do_vfs_ioctl+0x75a/0xfe0 [ 627.987240] ? selinux_file_mprotect+0x5c0/0x5c0 [ 627.992018] ? ioctl_preallocate+0x1a0/0x1a0 [ 627.996446] ? security_file_ioctl+0x76/0xb0 [ 628.000855] ? security_file_ioctl+0x83/0xb0 [ 628.005273] SyS_ioctl+0x7f/0xb0 [ 628.008647] ? do_vfs_ioctl+0xfe0/0xfe0 [ 628.012625] do_syscall_64+0x1d5/0x640 [ 628.016527] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 628.021718] RIP: 0033:0x45c889 [ 628.024907] RSP: 002b:00007f7283c41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.032614] RAX: ffffffffffffffda RBX: 00007f7283c426d4 RCX: 000000000045c889 [ 628.039888] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 628.047325] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 628.054598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 628.061887] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000060 [ 628.069541] kobject_add_internal failed for rx-0 (error: -12 parent: queues) 20:53:54 executing program 0 (fault-call:12 fault-nth:97): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:54 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 20:53:54 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) sendfile(r0, r1, &(0x7f0000000480), 0xa198) 20:53:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 628.189008] minix_free_inode: bit 1 already cleared [ 628.200240] audit: type=1800 audit(1586897634.437:14647): pid=30619 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16130 res=0 20:53:54 executing program 1 (fault-call:8 fault-nth:8): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 628.287740] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 628.298350] FAULT_INJECTION: forcing a failure. [ 628.298350] name failslab, interval 1, probability 0, space 0, times 0 [ 628.309731] CPU: 0 PID: 30633 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 628.310042] audit: type=1800 audit(1586897634.547:14648): pid=30635 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16124 res=0 [ 628.317623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.317628] Call Trace: [ 628.317645] dump_stack+0x13e/0x194 [ 628.317663] should_fail.cold+0x10a/0x14b [ 628.317676] should_failslab+0xd6/0x130 [ 628.317685] kmem_cache_alloc+0x2b5/0x770 [ 628.317695] ? memcpy+0x35/0x50 [ 628.317705] ? kstrdup+0x56/0x70 [ 628.317716] __kernfs_new_node+0x6f/0x470 [ 628.317728] kernfs_new_node+0x7b/0xe0 [ 628.317739] kernfs_create_dir_ns+0x3c/0x130 [ 628.317751] sysfs_create_dir_ns+0xb7/0x1d0 [ 628.317762] kobject_add_internal+0x27f/0x830 [ 628.317776] kobject_init_and_add+0xde/0x120 [ 628.317785] ? kobject_add_internal+0x830/0x830 [ 628.317795] ? kernfs_create_dir_ns+0xf0/0x130 [ 628.317805] ? dev_uevent_filter+0x3c/0xd0 [ 628.317814] ? dev_uevent_name+0xf0/0xf0 [ 628.317822] ? kobject_uevent_env+0x26c/0xc50 [ 628.317831] ? sysfs_create_dir_ns+0xf2/0x1d0 [ 628.317853] net_rx_queue_update_kobjects+0x18d/0x3e0 [ 628.317870] netdev_register_kobject+0x26e/0x390 [ 628.317885] register_netdevice+0x7ce/0xc70 [ 628.317897] ? netdev_change_features+0x80/0x80 [ 628.317912] __tun_chr_ioctl+0x20a3/0x33d0 [ 628.317927] ? tun_chr_close+0x60/0x60 [ 628.317944] ? tun_chr_compat_ioctl+0x30/0x30 [ 628.317955] do_vfs_ioctl+0x75a/0xfe0 [ 628.317966] ? selinux_file_mprotect+0x5c0/0x5c0 [ 628.317977] ? ioctl_preallocate+0x1a0/0x1a0 [ 628.317999] ? security_file_ioctl+0x76/0xb0 [ 628.318007] ? security_file_ioctl+0x83/0xb0 [ 628.318018] SyS_ioctl+0x7f/0xb0 [ 628.318027] ? do_vfs_ioctl+0xfe0/0xfe0 [ 628.318038] do_syscall_64+0x1d5/0x640 [ 628.318052] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 628.318063] RIP: 0033:0x45c889 [ 628.450160] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 628.452592] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.452605] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 628.452610] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 628.452616] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 628.452622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 628.452628] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000061 [ 628.453148] kobject_add_internal failed for rx-0 (error: -12 parent: queues) [ 628.485821] ip6t_REJECT: ECHOREPLY is not supported. [ 628.575353] attempt to access beyond end of device [ 628.580550] loop5: rw=2049, want=6434, limit=52 20:53:54 executing program 0 (fault-call:12 fault-nth:98): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:54 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x404}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) [ 628.586161] ip6t_REJECT: ECHOREPLY is not supported. [ 628.593602] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 628.663845] FAULT_INJECTION: forcing a failure. [ 628.663845] name failslab, interval 1, probability 0, space 0, times 0 [ 628.675743] CPU: 1 PID: 30656 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 628.683645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.693001] Call Trace: [ 628.695616] dump_stack+0x13e/0x194 [ 628.699266] should_fail.cold+0x10a/0x14b [ 628.703424] should_failslab+0xd6/0x130 [ 628.707411] kmem_cache_alloc_trace+0x2db/0x7b0 [ 628.712082] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 628.717533] ? kfree_const+0x33/0x40 [ 628.721253] ? rcu_read_lock_sched_held+0x10a/0x130 [ 628.726267] ? kfree+0x205/0x260 [ 628.729638] device_private_init+0x45/0x180 [ 628.733970] device_add+0xcd6/0x1400 [ 628.737303] ip6t_REJECT: ECHOREPLY is not supported. [ 628.737683] ? device_initialize+0x420/0x420 [ 628.737694] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 628.737705] ? device_private_init+0x180/0x180 [ 628.737720] netdev_register_kobject+0x180/0x390 [ 628.762079] register_netdevice+0x7ce/0xc70 [ 628.766402] ? netdev_change_features+0x80/0x80 [ 628.771085] __tun_chr_ioctl+0x20a3/0x33d0 [ 628.775337] ? tun_chr_close+0x60/0x60 [ 628.776241] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 628.779231] ? tun_chr_compat_ioctl+0x30/0x30 [ 628.779245] do_vfs_ioctl+0x75a/0xfe0 [ 628.779259] ? selinux_file_mprotect+0x5c0/0x5c0 [ 628.779270] ? ioctl_preallocate+0x1a0/0x1a0 [ 628.779289] ? security_file_ioctl+0x76/0xb0 20:53:54 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) open(&(0x7f00000001c0)='./file0\x00', 0x1, 0x20) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:53:54 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r1) r2 = socket$inet6(0xa, 0x3, 0x80) r3 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) r4 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYRES32], 0x1) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000040)={0x2, [0x0, 0x0]}) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) r6 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=ANY=[], 0x0) ioctl$sock_ifreq(r6, 0x891d, &(0x7f0000000000)={'team_slave_0\x00', @ifru_addrs=@phonet={0x23, 0x7, 0x3}}) [ 628.799881] audit: type=1800 audit(1586897634.917:14649): pid=30660 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16127 res=0 [ 628.803888] ? security_file_ioctl+0x83/0xb0 [ 628.803904] SyS_ioctl+0x7f/0xb0 [ 628.803915] ? do_vfs_ioctl+0xfe0/0xfe0 [ 628.809582] ip6t_REJECT: ECHOREPLY is not supported. [ 628.828732] do_syscall_64+0x1d5/0x640 [ 628.828751] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 628.828760] RIP: 0033:0x45c889 [ 628.828764] RSP: 002b:00007f6960a59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.828774] RAX: ffffffffffffffda RBX: 00007f6960a5a6d4 RCX: 000000000045c889 [ 628.828779] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000006 [ 628.828785] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 628.828790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 628.828794] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000008 [ 628.933821] FAULT_INJECTION: forcing a failure. [ 628.933821] name failslab, interval 1, probability 0, space 0, times 0 [ 628.945319] minix_free_inode: bit 1 already cleared [ 628.950775] CPU: 1 PID: 30658 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 628.958661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.968017] Call Trace: [ 628.970620] dump_stack+0x13e/0x194 [ 628.974260] should_fail.cold+0x10a/0x14b [ 628.978427] should_failslab+0xd6/0x130 [ 628.982404] kmem_cache_alloc+0x2b5/0x770 [ 628.986559] ? memcpy+0x35/0x50 [ 628.989856] ? kstrdup+0x56/0x70 [ 628.993235] __kernfs_new_node+0x6f/0x470 [ 628.997399] kernfs_new_node+0x7b/0xe0 [ 629.001295] kernfs_create_dir_ns+0x3c/0x130 [ 629.005722] sysfs_create_dir_ns+0xb7/0x1d0 [ 629.010049] kobject_add_internal+0x27f/0x830 [ 629.014640] kobject_init_and_add+0xde/0x120 [ 629.019144] ? kobject_add_internal+0x830/0x830 [ 629.023818] ? kernfs_create_dir_ns+0xf0/0x130 [ 629.028455] ? dev_uevent_filter+0x3c/0xd0 [ 629.032693] ? dev_uevent_name+0xf0/0xf0 [ 629.036756] ? kobject_uevent_env+0x26c/0xc50 [ 629.041253] ? sysfs_create_dir_ns+0xf2/0x1d0 [ 629.045759] net_rx_queue_update_kobjects+0x18d/0x3e0 [ 629.050964] netdev_register_kobject+0x26e/0x390 [ 629.055732] register_netdevice+0x7ce/0xc70 [ 629.060212] ? netdev_change_features+0x80/0x80 [ 629.064921] __tun_chr_ioctl+0x20a3/0x33d0 [ 629.069165] ? tun_chr_close+0x60/0x60 [ 629.073065] ? tun_chr_compat_ioctl+0x30/0x30 [ 629.077574] do_vfs_ioctl+0x75a/0xfe0 [ 629.081395] ? selinux_file_mprotect+0x5c0/0x5c0 [ 629.086163] ? ioctl_preallocate+0x1a0/0x1a0 [ 629.090585] ? security_file_ioctl+0x76/0xb0 [ 629.094996] ? security_file_ioctl+0x83/0xb0 [ 629.099394] SyS_ioctl+0x7f/0xb0 [ 629.102747] ? do_vfs_ioctl+0xfe0/0xfe0 [ 629.106710] do_syscall_64+0x1d5/0x640 [ 629.110591] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 629.115767] RIP: 0033:0x45c889 [ 629.118962] RSP: 002b:00007f7283c41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.126652] RAX: ffffffffffffffda RBX: 00007f7283c426d4 RCX: 000000000045c889 20:53:55 executing program 0 (fault-call:12 fault-nth:99): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 629.134044] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 629.141313] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 629.148579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 629.155836] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000062 [ 629.163743] kobject_add_internal failed for rx-0 (error: -12 parent: queues) 20:53:55 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 20:53:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:55 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) timer_create(0x1, &(0x7f0000044000)={0x0, 0x15, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000ed", @ANYRES16=r3, @ANYBLOB="04002cbd70000000000008000000120001002e2f6367726f75702f73797a3100000008000800ac1414bb"], 0x30}, 0x1, 0x0, 0x0, 0x1020}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000001680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x48, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40801}, 0x20004090) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) r4 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x473) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000000)=r0) ptrace$setregs(0xd, 0x0, 0x10001, &(0x7f0000000140)="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") 20:53:55 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) [ 629.271349] audit: type=1800 audit(1586897635.508:14650): pid=30682 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16120 res=0 [ 629.321559] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 629.353910] FAULT_INJECTION: forcing a failure. [ 629.353910] name failslab, interval 1, probability 0, space 0, times 0 20:53:55 executing program 1 (fault-call:8 fault-nth:9): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 629.365221] CPU: 0 PID: 30696 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 629.373207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.382567] Call Trace: [ 629.385148] dump_stack+0x13e/0x194 [ 629.388766] should_fail.cold+0x10a/0x14b [ 629.392903] should_failslab+0xd6/0x130 [ 629.396869] kmem_cache_alloc+0x2b5/0x770 [ 629.401010] __kernfs_new_node+0x6f/0x470 [ 629.405142] kernfs_new_node+0x7b/0xe0 [ 629.409015] __kernfs_create_file+0x3d/0x319 [ 629.413410] sysfs_add_file_mode_ns+0x1e1/0x450 [ 629.418169] kobject_add_internal+0x3e2/0x830 [ 629.422651] kobject_init_and_add+0xde/0x120 [ 629.427056] ? kobject_add_internal+0x830/0x830 [ 629.431712] ? kernfs_create_dir_ns+0xf0/0x130 [ 629.436279] ? dev_uevent_filter+0x3c/0xd0 [ 629.440496] ? dev_uevent_name+0xf0/0xf0 [ 629.444542] ? kobject_uevent_env+0x26c/0xc50 [ 629.449031] ? sysfs_create_dir_ns+0xf2/0x1d0 [ 629.453687] net_rx_queue_update_kobjects+0x18d/0x3e0 [ 629.458872] netdev_register_kobject+0x26e/0x390 [ 629.463614] register_netdevice+0x7ce/0xc70 [ 629.467923] ? netdev_change_features+0x80/0x80 [ 629.472582] __tun_chr_ioctl+0x20a3/0x33d0 [ 629.476804] ? tun_chr_close+0x60/0x60 [ 629.480683] ? tun_chr_compat_ioctl+0x30/0x30 [ 629.485170] do_vfs_ioctl+0x75a/0xfe0 [ 629.488958] ? selinux_file_mprotect+0x5c0/0x5c0 [ 629.493698] ? ioctl_preallocate+0x1a0/0x1a0 [ 629.498097] ? security_file_ioctl+0x76/0xb0 [ 629.502489] ? security_file_ioctl+0x83/0xb0 [ 629.506902] SyS_ioctl+0x7f/0xb0 [ 629.510265] ? do_vfs_ioctl+0xfe0/0xfe0 [ 629.514234] do_syscall_64+0x1d5/0x640 [ 629.518133] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 629.523305] RIP: 0033:0x45c889 [ 629.526477] RSP: 002b:00007f7283bffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.534170] RAX: ffffffffffffffda RBX: 00007f7283c006d4 RCX: 000000000045c889 [ 629.541428] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 629.548681] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 629.555943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 629.563198] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000063 [ 629.570840] kobject_add_internal failed for rx-0 (error: -12 parent: queues) [ 629.583903] audit: type=1800 audit(1586897635.508:14651): pid=30686 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16127 res=0 [ 629.605571] attempt to access beyond end of device 20:53:55 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) [ 629.636120] loop5: rw=2049, want=6434, limit=52 20:53:55 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 20:53:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffb) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="110700000000000000000600000008000300ea256d9e1e285787be04a4829107fd4cb131e4adeb76c83efff8bc591040b2148ab66ac3f600b89ada4c45e5ef435601d5eb5b0c07ff91027c32edd5f1622ba5023be7102a21a60000e5008a06b07e9301dbdc3b50736055a5b0555b4418988b76c1226229c917c15b22023a472b8cfa5132f90cdadcd74977db7b2f24e417d2caec1532ccdf4e8648e193eddbe3f5c272c39d785f3d81d177a92307d4c338ce60c3518e06f377b3f8150104e4464494a14db0187fca4593dffe8324d6d904fe80c16defc2de904ea87e6497786ed33c743c3c7852241d97c085a7b38443de035066a83417", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c757ad0b1ec53edba1a863d829e86e8ea", @ANYRES16=r1, @ANYBLOB="00002bbd7000fddbdf250100000008002b00eaca000008003a00bc0000000800390007000000050037000100000005002a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4094) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 629.662746] Buffer I/O error on dev loop5, logical block 3216, lost async page write 20:53:55 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x404820, 0x98) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0x0, 0x800000}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:53:56 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) [ 629.709172] audit: type=1804 audit(1586897635.568:14652): pid=30688 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir689926280/syzkaller.BgL1Ld/459/bus" dev="sda1" ino=16121 res=1 [ 629.738904] minix_free_inode: bit 1 already cleared [ 629.770267] FAULT_INJECTION: forcing a failure. [ 629.770267] name failslab, interval 1, probability 0, space 0, times 0 [ 629.781816] CPU: 0 PID: 30720 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 629.789713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.799073] Call Trace: [ 629.801674] dump_stack+0x13e/0x194 [ 629.805321] should_fail.cold+0x10a/0x14b [ 629.809477] should_failslab+0xd6/0x130 [ 629.813460] kmem_cache_alloc_trace+0x2db/0x7b0 [ 629.818135] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 629.823590] ? kfree_const+0x33/0x40 [ 629.827308] ? rcu_read_lock_sched_held+0x10a/0x130 [ 629.832323] ? kfree+0x205/0x260 [ 629.835702] device_private_init+0x45/0x180 [ 629.840032] device_add+0xcd6/0x1400 [ 629.843753] ? device_initialize+0x420/0x420 [ 629.848275] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 629.853734] ? device_private_init+0x180/0x180 [ 629.859283] netdev_register_kobject+0x180/0x390 [ 629.864049] register_netdevice+0x7ce/0xc70 [ 629.868377] ? netdev_change_features+0x80/0x80 [ 629.873055] __tun_chr_ioctl+0x20a3/0x33d0 [ 629.877300] ? tun_chr_close+0x60/0x60 [ 629.881201] ? tun_chr_compat_ioctl+0x30/0x30 [ 629.885703] do_vfs_ioctl+0x75a/0xfe0 [ 629.889510] ? selinux_file_mprotect+0x5c0/0x5c0 [ 629.894274] ? ioctl_preallocate+0x1a0/0x1a0 [ 629.898701] ? security_file_ioctl+0x76/0xb0 [ 629.903231] ? security_file_ioctl+0x83/0xb0 [ 629.907657] SyS_ioctl+0x7f/0xb0 [ 629.911028] ? do_vfs_ioctl+0xfe0/0xfe0 [ 629.915012] do_syscall_64+0x1d5/0x640 [ 629.918911] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 629.924101] RIP: 0033:0x45c889 [ 629.927292] RSP: 002b:00007f6960a59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.935012] RAX: ffffffffffffffda RBX: 00007f6960a5a6d4 RCX: 000000000045c889 [ 629.942368] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000006 [ 629.949640] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 629.956910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 629.964178] R13: 00000000000005a3 R14: 00000000004c8411 R15: 0000000000000009 20:53:56 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) [ 630.062377] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 630.084034] minix_free_inode: bit 1 already cleared 20:53:56 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x488142, 0x1e) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000001c0)=""/23) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:53:56 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) [ 630.110662] audit: type=1804 audit(1586897636.348:14653): pid=30734 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/442/bus" dev="sda1" ino=15873 res=1 20:53:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 630.233639] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 630.387718] minix_free_inode: bit 1 already cleared 20:53:58 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback}, &(0x7f0000000040)=0x8) 20:53:58 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 20:53:58 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f00000000c0)=0x9) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:58 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) r2 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) r3 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) lseek(r3, 0x4200, 0x1) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) write$FUSE_INTERRUPT(r1, &(0x7f00000001c0)={0x10, 0xfffffffffffffffe, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) r5 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x1) recvmsg(r5, &(0x7f0000000180)={&(0x7f0000000200)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000280)=""/165, 0xa5}, {&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f00000004c0)=""/190, 0xbe}, {&(0x7f0000000580)=""/83, 0x53}, {&(0x7f0000000980)=""/107, 0x6b}, {&(0x7f0000000a00)=""/238, 0xee}, {&(0x7f0000000b00)=""/164, 0xa4}, {&(0x7f0000000bc0)=""/119, 0x77}], 0x8}, 0x32000) 20:53:58 executing program 1 (fault-call:8 fault-nth:10): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:58 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) [ 632.336227] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 632.373187] ip6t_REJECT: ECHOREPLY is not supported. 20:53:58 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) [ 632.394629] ip6t_REJECT: ECHOREPLY is not supported. [ 632.408963] kauditd_printk_skb: 4 callbacks suppressed [ 632.408972] audit: type=1804 audit(1586897638.648:14658): pid=30784 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/444/bus" dev="sda1" ino=16138 res=1 [ 632.448639] FAULT_INJECTION: forcing a failure. [ 632.448639] name failslab, interval 1, probability 0, space 0, times 0 [ 632.460087] CPU: 1 PID: 30805 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 632.467991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.477346] Call Trace: [ 632.479930] dump_stack+0x13e/0x194 [ 632.483550] should_fail.cold+0x10a/0x14b [ 632.487701] should_failslab+0xd6/0x130 [ 632.491682] __kmalloc_track_caller+0x2e1/0x7b0 [ 632.496361] ? trace_hardirqs_on+0x10/0x10 [ 632.500600] ? kstrdup_const+0x35/0x60 [ 632.504494] ? __lock_acquire+0x5f7/0x4620 [ 632.508736] ? save_trace+0x290/0x290 [ 632.512547] kstrdup+0x36/0x70 [ 632.515750] kstrdup_const+0x35/0x60 [ 632.519473] __kernfs_new_node+0x2e/0x470 [ 632.523626] kernfs_new_node+0x7b/0xe0 [ 632.527517] kernfs_create_dir_ns+0x3c/0x130 [ 632.531931] sysfs_create_dir_ns+0xb7/0x1d0 [ 632.536345] kobject_add_internal+0x27f/0x830 [ 632.540844] kobject_add+0x11f/0x180 [ 632.544557] ? kset_create_and_add+0x190/0x190 20:53:58 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) [ 632.549153] device_add+0x36a/0x1400 [ 632.552967] ? device_private_init+0x180/0x180 [ 632.557736] netdev_register_kobject+0x180/0x390 [ 632.562622] register_netdevice+0x7ce/0xc70 [ 632.566976] ? netdev_change_features+0x80/0x80 [ 632.571699] __tun_chr_ioctl+0x20a3/0x33d0 [ 632.576123] ? tun_chr_close+0x60/0x60 [ 632.580027] ? tun_chr_compat_ioctl+0x30/0x30 [ 632.584548] do_vfs_ioctl+0x75a/0xfe0 [ 632.588354] ? selinux_file_mprotect+0x5c0/0x5c0 [ 632.593145] ? ioctl_preallocate+0x1a0/0x1a0 [ 632.597571] ? security_file_ioctl+0x76/0xb0 [ 632.601997] ? security_file_ioctl+0x83/0xb0 [ 632.606409] SyS_ioctl+0x7f/0xb0 [ 632.609781] ? do_vfs_ioctl+0xfe0/0xfe0 [ 632.613754] do_syscall_64+0x1d5/0x640 [ 632.617637] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 632.622821] RIP: 0033:0x45c889 [ 632.626096] RSP: 002b:00007f6960a59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.633788] RAX: ffffffffffffffda RBX: 00007f6960a5a6d4 RCX: 000000000045c889 [ 632.641062] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000006 [ 632.648326] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 632.655712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 632.662970] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000000a [ 632.671406] kobject_add_internal failed for tap0 (error: -12 parent: net) 20:53:58 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) [ 632.694782] audit: type=1804 audit(1586897638.928:14659): pid=30822 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/444/bus" dev="sda1" ino=16138 res=1 20:53:59 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x4a42, 0x8) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x800, 0x80) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) readlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000200)={0x3, @null, 0xffffffffffffffff}) sendfile(r0, r1, 0x0, 0x8400fffffffb) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0x0, 0x4}, 0x10) 20:53:59 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{r1, r2+10000000}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r3 = socket$inet6(0xa, 0xa, 0xffff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x3) tkill(r0, 0x1000000000015) 20:53:59 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) [ 632.752585] audit: type=1804 audit(1586897638.978:14660): pid=30802 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir970422014/syzkaller.8DO5Te/585/bus" dev="sda1" ino=16152 res=1 20:53:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x10000050, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f00000007c0)="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", 0x286) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500)}], 0x1, 0xa) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x200280, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x91) ioctl$TCSBRK(r3, 0x5409, 0x5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x4200, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000180)=0x1, &(0x7f00000001c0)=0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 632.818008] minix_free_inode: bit 1 already cleared 20:53:59 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) 20:53:59 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) timer_create(0x1, &(0x7f0000044000)={0x0, 0x15, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000ed", @ANYRES16=r3, @ANYBLOB="04002cbd70000000000008000000120001002e2f6367726f75702f73797a3100000008000800ac1414bb"], 0x30}, 0x1, 0x0, 0x0, 0x1020}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000001680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x48, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40801}, 0x20004090) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) r4 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x473) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000000)=r0) ptrace$setregs(0xd, 0x0, 0x10001, &(0x7f0000000140)="d76e947980af3c34fb451ef01c32c0978e38269b39f0dc8f6d628f865ac1edefc8e32a5984b5cde39882b07831f8e5c1125a286f302625f5d1cad490b3a3c628cb967b0c317f2e51333a6c9cc90b18bf674a6daf06ea9c623a7e130b768e3bc09e4a19bd03aaa3c8d353a43c6f1281ce7d267ce9c91b1270fdc63879c2ceea1383f0f881dda39a7c52205154c76c1f217dfa422e6e6f845df5c7d63f0cf6a04bb41335aaa92a1b44df8e69bcffb8ff2ea33b91240a1418bed717f38af551c9b3fbf789af91fc18175bb0a0e484b88d3fab140ca9416cda877f7a736229eabe3d759c6ef3d7dcd7cb53e1d08beeefda261c9449ecba7b21a6d0c3678bce7871c5930119366f8e1615ffaa4900d2026a691f186850c2bca863fd1b187104e6f596533073c51a463416226d4fd98ed0677672f789664c69f9cfbce08e060485f98302aa2d9f881cf03336eea40bbc5be14290a05339ea6510f36c6a56eca796118589bb5f43eb1fede414d406d9391eb6524eb577d5f68584acab3e3a7ad7e007d83e22f3eac1840070a6fb7864bd0679847357e8718b07ed639ddb8608dba41000476dfac949f7c917bd863ed10100981e645c758d4d323e3157b94d28a3539c30165d363e568d0ad71f55f1a40f0f1049daa82f38f11c95ba3bdcce0320e7d7c4432025510ef480a02c045ab47ebb15356aac8404be2644d608734c2513a67bade5966cfef06bfa5d49c3b690eabd1b97ec0519451541cff8749d943967f93697c99093b7c50fc968b478abcfdd858969df384561f49c27dd06a0a3408b3cc7735cdf5a32047b0064dda5a2f296f37d4ab5215ef92158ef5d746562cc222e76b8b12519d4e9269a0c388b5a731e682e9fbdaf569833c8ae5b46a35b609b270d7f36790ffc8ac4691c2f5cb76c73bda1193367922410e67ad23b7b8c2b07842f441aef631af0b959219d09775013f363774ab41d01b3e6590395d191b4603cc036697d1a7837f1fa1285fbf5bc3b242219569247ff5969fd089d58cfb373fa229339d32a0ddc8c98e7da8d319670400855be864e93c092517568034467ab1e06ca499f562d2fd96a2465712f4bdd12d51ee977ba7713082ad2743c4dace2b470168e76b5ab412d582aa8158219f1f439e2acd539d423a09649e327dbd5ba9bc2ff064d2c1c3dcb677bbfd72b91306662e307a5cb14ae2622d1284430716b07b9114cce57ce87386dee08be6534cf8c9796d11a75dc909289972850fc5f5a14ff81d0317571de67ded0c9967de930029d7f77bfe05b66839325fcbd62bbf26d40a4c460061a40011ab1c0df864886e8c6c0e46e294d7f01acc58bf4f51fe72578ec33a9f70820a1ca6ed89baacad3178f0fece05211febb9ea651c076cd9d42fd613c4a7c08845adaa40315bc8cbaec7e96ea2244b515caef35c260950c3a804150c2b94f988b8aa90efba6d54667433d6a27be2da45f6e0bc1deb29ad39f7943eb7c1fb511041edf4a2766e15cbbf3fd4bbfbeaea6c7d7e894077718a200c8b97c03d12648c8a441c34e3edc5990d0d12cab8a52ea4282a26fee0bfd3f38ab14487a74a4bb80a8836b94dfd51a2e869ea51665136d0f5631e28c9cf7cd2e0624602664d23aeb5afb3e0fd420dae4e47edeba15936a0d0645e5716cd70926f776f95fd1f2e5d767e870ca9eb0f8af70b8f5c5235a28722f5f8e1623aca976fda178e5fe421274190ee551e667148815c4369c8a422ad1cffc111233fb46f1e096c588fbddddd567d8cd02082ce98a3e5c30c8ce6e8defff2c151f8f41c310e93098854e3d356f6eeb8d3f3ab1a9009ef78b04dfbb027ee48d3edf8d5b3583287aa6e841366495598090bcd36fd5f8c2939a7dc31f0e7a01267da2f7195456dd87371fe9cc8b325fbfc221380e89e3091d77025265e7db1a19a9c693a58777979a1acb02b782c3aca707e11e57db520dcafdbf34ebb7c4aa7af8a8e18bb8ce9f9d2d1bcb11559b6881d9f70eb5e8c267e9d0366038f6db82a4df65eaa9db76a6e3842ce631d135758204bd9dfe076f88db7d9f2be6a00bf93810b5fa0f1c00688104c41df2e260e01e674d7c587b350e9472935adad3a4feb137364e45c2298797956812fb2191b0a0c5a7901d2b498e600d8569574360698cd48b65c41e57cbe32090cfe8af8f09b1edf5a6d8c7acd7aa1507af9cbc371c347781355a98ce798b2b35fce8dca3495366da8a572e4c133866873b5334203400d15132a10c18f523d0e4facca46855a62a935e83d441d574725a649fe15522958223b64549092459e03152eaf171842915509bd90dcbb502c1d8f8a617f0ce6d85ba7cf1f75595f9471c7545efd5a3f4a25e893e47abcceb5cebca72d82d83fc885110b1b6b17be4eca25da9019a1c46f21d42433aab47d28e0e7fd17354d7e5700fbadd37b283d155f243e666488e65ccef8a153ea29e0d986ad88a023992c3aa03444986815a6ebad66595c62ea03cc00b57282aa6a76652aafc7c0927d69511327e994323bf88bfde774e2faa48da56733c5e738e0fc1a844ebf75bdfee98c811a14f4ec54d508f1349c110d64601855de949e2ad93b027b57726b9aba05b659ad5d1490fe2d9c1626418289bf90202da7d1c2b4b7425ec9f5388bba4956ac5bad42294bd716ef9c097990e4f41afd4bdd46045e701b05ec0ed5469d6ffc309a2abd05d35465beb030e5d3c71705f29592a52e9b9e82f760a3c83c0f1fc21979977de952532030a46b755a538ec461ec15f9995bfcff3e63e0844841cb4c50c86c2cabbd245619e90c501941ffbdfc78f67952f457d809089ddfbab11c3860dae7b42e3de40cb29647b2e256aba6bbab9b92d0bee6a2ba51b0f5c7149d27fa2aab5329ed0892b9338dccdb17eaadb52af318609ccff3d28ebc4175929e2598f5183585edc101486c636cd583cfd55e544691c855c59bfe3eaee1d660f887d38d3a3ab736a4528183ab098b8694b6602f5b7011ad86ff05e2ab9a7789128ce8d679f9c73f72e95b6bb880218c45582606c929ccf6c678775a85c54d12a83b8300a176c2ebf722ce55aa8c9f8b329659d94fada1d706dade32656437e707142b05cfa366adfdcb91371d7e1ec159726b4f51d4b1f6a99a45d6fe599abc7cd6f69d406a9a2ba19b0243929f9b50846c916a760cf9671d507399737dcf1638d819a43805eeac43ec49d06cfcdd04f0565e496edc2eeafc99db7f3d7545ca96743bdcb6a6fdf87d257ce02c511f68d8fc49ce4eef0dde5a3183912094f2189641bea0d8c69398c9d542f6bd22b60e88eaf481a66c1fbfde9a87e5f503907ea00a8592a8eef9ee0cb14964980b54b064b48898ffbcd511ad197d215b7bac08fff5d98818ffb24d9612fced678e852c16b7e41c9c6132a83b9d7d9a2b3e4e1065d1e9301bbe0611dbdf79abf6a6c2b172c09161954fa1ac16f9ae15d816274990e8f00736543e900492e0f473e7fdf7872731c2e792682de04c95867fa928581805de08818b20991d99365f409f4e8ec77a22c3e354b91a46a7870118e93cfb4cc4f6bc178bd05dcccc00b48f4734d62c3b7dac4956a17d3f3b5cfda898fbecd709dff5c7582e720b3d4e36f497c8c48ef85041d64ff2fae7ab996d647492daa539c4a5faeaac3234642a9fe149e6f1d682baa52a2bbaeb60d2ede0c667d3c236f9b5ec45c4aa03bc9130cf98d76a4c156ba6112579ade090b7130a5a5f1fe1d86eef33ec1999edb4565d0aee268386a6a510cca0798c72316891a93eed111351bfbcfc52124ef3a973f9e106f0b21de5c4262fd1e413dbbdca0e189dcd17cb39564dcb9c5c76560ea88d492f639cbbfff1185b7747f1c59f0a858c8efb710074600dbbccaed1db173bb84e0691257db04e0ca7224e71e71184e3bc148da1e6ca4a7ad43ab630b03d050d219db8646f91a6ae4659c962d7389afe7618b73e3bea47313d5fbff49f48c0727a6bb75a556f324921ca894ed80c51043c808f4445ab8595a0ac607b9485e9ff2bfd0fc5273746944aa2f441b982b7fd9e0db0502fc9e026e2bb08d7fed7aab34add937cc428953324b864bfa6ad88007e34de9200b051386cb823621b061d973f5b69c7e8ee222d2e22f9f7f42f47f78dafe03f29d86555f98334025647845f4ecbe4eb99fe5641536871d22d9e3169eee4a76f62187b66cf1edbd2108cf73ea613e27d8c7fb1ef3d78717e136f7bc9d8c4cb6c8ca1d979214b399587d88be7ed1b142797c8688c9a1cff470d7894d5d37c54b19b4fa97e285538504db69b30da62e73f24b75bac1013dc6257a9eb2ad537b4f2054881add49a9859677a198f726e06beb5632c1a18dfb7dde4ebde56e223841f726b4d4adabceb225c6132a054dbcf0e0bbfce4988f5657ab24c0cfb18052a0b11ec3df2bbd683521e85936c7ce542967c5b379c60496c76073a34a86be3d98043cdf88b0a8cd6e6cad3ebcef5060da320f910930ebcbb1e59b69f7b0bb3ee447d12a2d82818cf2c3c5849e7d8c796d205ac830a70153e2f7339357525b69fa72283b432872802758ebecef102c65ee384cdbe8c8c48bcbc62c79ff188f523d455eb6ef5cb57126f3279cc86b80f58521331c29629aac7abc6f06a3526ca2c2779477564debc6be2f0816275ecd43e62a75f75c9400c69041e17c4a3cea78aa2787af517486c8a3260f037344a38d470f1f660dd251c9c5de861ffa61e6ddf17331560e7d6c7a192e520942c6d834901dfb067e46d193ed233e154fec4e27db5d8563a92843f3615b7c7493e88c079999cb88a745c75395a8aa984198534137e80c39c74ec103dfbced7bcbf04133e2eff86172a5583cbbee31be8285f745a534ea69ec14f7f284fa443b5cb680b79157bb3b6ed8b1c6a78bee445d7f59927b6abf5c365b578fd3d072dec7042c93363cfb7c6e8eaebd7a91316bf3d35d1585f93e6062b44bfbac7b2706edf5cf2bd1cc278188d18c55f068e7a614a26a83e722a7887bc195dbd2df35b4fb9010ba5c625df88c8cd408e898121eb516a8443907b12b644e82bde799105566ac7b12507222a5a329fb9eaada1ecca1ff905a55112cb7f92285ea214267459dcb1228576df9b91fb04c61ebf0b89f667a8b234d441793e9039a5798c98cf122f61ac21926d24025ab650918dcf92e22e763dc27ee22e665f1ee4de90c4a438f6779bf2c8e1acddb54493fe22e79d3eaed29832a08a3cc0e1d740b6281025cc3cf42e8266131cf017c6a4f9ea9ba14ecdc092169af1b9b662b40e7e790e5250c2bd382fa411e38233bf11ff04773bc658542c498721c842d165c1d2928d0ee5b44343848958b48914d7ffce148e51eb6a833b373a3f654030a5d7e18b6ec8624a01bd8a441ead82f7d1577d205728c0657fa0b2d859ea021fe0cfc61d384022ee17b967d86e399f428d94d841412106df6ffb857ae281102599b2191d176e63721f4167c892e561993ce00a791490b98096ed5a0ece54f070b760b90f306dffe34bd714dc33b7427e9ca2b987a45d72e0d6ec5e9a0d624b4ac73093027df6c73c674abeb475430b8b7bab42b702b45a476456a335ee4294a47ce626e3438bc99c321b9a0260f2113dfb1612fa097524811f71d46acc4daf7456fccaa1b1d4efc78e4a2bb3538c2e02e7fd68f912827bd606d0b6b067ae586e53fd1dbddc33fada6b925b390d38e298653170c5be65373528ad96c33fe775c883f04f6258341d53760c50b2ede652cb5d0050a07fb4a057d339742649e2134870de94745e43a9132") [ 632.938793] audit: type=1800 audit(1586897639.178:14661): pid=30852 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16149 res=0 [ 632.965875] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 632.993027] audit: type=1804 audit(1586897639.228:14662): pid=30852 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/445/bus" dev="sda1" ino=16157 res=1 [ 633.066096] audit: type=1804 audit(1586897639.258:14663): pid=30852 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/445/bus" dev="sda1" ino=16157 res=1 20:53:59 executing program 1 (fault-call:8 fault-nth:11): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 633.095541] audit: type=1804 audit(1586897639.268:14664): pid=30859 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir104419066/syzkaller.rvUCWh/504/bus" dev="sda1" ino=16158 res=1 20:53:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:53:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 633.260835] FAULT_INJECTION: forcing a failure. [ 633.260835] name failslab, interval 1, probability 0, space 0, times 0 [ 633.272414] CPU: 0 PID: 30889 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 633.280305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.289922] Call Trace: [ 633.292528] dump_stack+0x13e/0x194 [ 633.296152] should_fail.cold+0x10a/0x14b [ 633.300385] should_failslab+0xd6/0x130 [ 633.304443] kmem_cache_alloc+0x44/0x770 [ 633.308488] ? kmem_cache_alloc+0x127/0x770 [ 633.312794] ? __kernfs_new_node+0x6f/0x470 [ 633.317097] ? kernfs_new_node+0x7b/0xe0 [ 633.321155] ? kernfs_create_dir_ns+0x3c/0x130 [ 633.325720] ? sysfs_create_dir_ns+0xb7/0x1d0 [ 633.330198] ? kobject_add_internal+0x27f/0x830 [ 633.335115] ? kobject_add+0x11f/0x180 [ 633.339009] ? device_add+0x36a/0x1400 [ 633.342906] radix_tree_node_alloc.constprop.0+0x1b4/0x300 [ 633.348543] idr_get_free_cmn+0x5b0/0x900 [ 633.352719] idr_alloc_cmn+0xe8/0x1e0 [ 633.356612] ? __fprop_inc_percpu_max+0x1d0/0x1d0 [ 633.361449] ? __lock_is_held+0xad/0x140 [ 633.365604] idr_alloc_cyclic+0xc4/0x1c8 [ 633.369759] ? ida_simple_remove+0x50/0x50 [ 633.374174] ? __radix_tree_preload+0x1c3/0x250 [ 633.378959] __kernfs_new_node+0xaf/0x470 [ 633.383107] kernfs_new_node+0x7b/0xe0 [ 633.387105] kernfs_create_dir_ns+0x3c/0x130 [ 633.391507] sysfs_create_dir_ns+0xb7/0x1d0 [ 633.395818] kobject_add_internal+0x27f/0x830 [ 633.400304] kobject_add+0x11f/0x180 [ 633.404100] ? kset_create_and_add+0x190/0x190 [ 633.408824] device_add+0x36a/0x1400 [ 633.412628] ? device_private_init+0x180/0x180 [ 633.417206] netdev_register_kobject+0x180/0x390 [ 633.422087] register_netdevice+0x7ce/0xc70 [ 633.426413] ? netdev_change_features+0x80/0x80 [ 633.431083] __tun_chr_ioctl+0x20a3/0x33d0 [ 633.435319] ? tun_chr_close+0x60/0x60 [ 633.439205] ? tun_chr_compat_ioctl+0x30/0x30 [ 633.443705] do_vfs_ioctl+0x75a/0xfe0 [ 633.447517] ? selinux_file_mprotect+0x5c0/0x5c0 [ 633.452260] ? ioctl_preallocate+0x1a0/0x1a0 [ 633.456764] ? security_file_ioctl+0x76/0xb0 [ 633.461174] ? security_file_ioctl+0x83/0xb0 [ 633.465581] SyS_ioctl+0x7f/0xb0 [ 633.468936] ? do_vfs_ioctl+0xfe0/0xfe0 [ 633.472949] do_syscall_64+0x1d5/0x640 [ 633.476833] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 633.482099] RIP: 0033:0x45c889 [ 633.485272] RSP: 002b:00007f6960a59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.492978] RAX: ffffffffffffffda RBX: 00007f6960a5a6d4 RCX: 000000000045c889 [ 633.500240] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000006 [ 633.507846] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 633.515196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 633.522560] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000000b [ 633.751709] audit: type=1804 audit(1586897639.988:14665): pid=30900 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/445/bus" dev="sda1" ino=16157 res=1 [ 633.777837] audit: type=1804 audit(1586897640.018:14666): pid=30901 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/445/bus" dev="sda1" ino=16157 res=1 20:54:00 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x98) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x800, 0x400, 0x3, {0x6, @sdr={0x33424752, 0x100}}, 0x7}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r1, r1, &(0x7f0000000480), 0xa198) [ 633.916849] minix_free_inode: bit 1 already cleared 20:54:00 executing program 1 (fault-call:8 fault-nth:12): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 633.998528] audit: type=1800 audit(1586897640.238:14667): pid=30911 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16149 res=0 [ 634.034896] MINIX-fs: mounting unchecked file system, running fsck is recommended 20:54:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = mq_open(&(0x7f00000000c0)='posix_acl_access\x00', 0x1, 0xc2643005afb3902e, &(0x7f0000000140)={0x1, 0x8000, 0x4, 0x1f}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10442, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000240)={0x5fb, 0x3, 0xad}) mq_timedreceive(r1, &(0x7f00000002c0)=""/175, 0xaf, 0x9, &(0x7f0000000180)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 634.052420] attempt to access beyond end of device 20:54:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 634.073415] loop5: rw=2049, want=6434, limit=52 [ 634.078606] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 634.102455] attempt to access beyond end of device [ 634.107882] loop5: rw=0, want=6434, limit=52 [ 634.112473] Buffer I/O error on dev loop5, logical block 3216, async page read [ 634.167580] minix_free_inode: bit 1 already cleared [ 634.319922] FAULT_INJECTION: forcing a failure. [ 634.319922] name failslab, interval 1, probability 0, space 0, times 0 [ 634.331449] CPU: 0 PID: 30938 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 634.339346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.348715] Call Trace: [ 634.351325] dump_stack+0x13e/0x194 [ 634.354959] should_fail.cold+0x10a/0x14b [ 634.359114] should_failslab+0xd6/0x130 [ 634.363087] kmem_cache_alloc+0x2b5/0x770 [ 634.367222] ? save_trace+0x290/0x290 [ 634.371008] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 634.376030] __kernfs_new_node+0x6f/0x470 [ 634.380172] kernfs_new_node+0x7b/0xe0 [ 634.384052] __kernfs_create_file+0x3d/0x319 [ 634.388554] sysfs_add_file_mode_ns+0x1e1/0x450 [ 634.393210] device_create_file+0xc8/0x100 [ 634.397432] ? acpi_bind_one+0x6c0/0x6c0 [ 634.401505] device_add+0x3a5/0x1400 [ 634.405207] ? device_private_init+0x180/0x180 [ 634.409789] netdev_register_kobject+0x180/0x390 [ 634.414547] register_netdevice+0x7ce/0xc70 [ 634.418871] ? netdev_change_features+0x80/0x80 [ 634.423549] __tun_chr_ioctl+0x20a3/0x33d0 [ 634.428476] ? tun_chr_close+0x60/0x60 [ 634.432365] ? tun_chr_compat_ioctl+0x30/0x30 [ 634.436863] do_vfs_ioctl+0x75a/0xfe0 [ 634.440685] ? selinux_file_mprotect+0x5c0/0x5c0 [ 634.445470] ? ioctl_preallocate+0x1a0/0x1a0 [ 634.449867] ? security_file_ioctl+0x76/0xb0 [ 634.454257] ? security_file_ioctl+0x83/0xb0 [ 634.458652] SyS_ioctl+0x7f/0xb0 [ 634.461999] ? do_vfs_ioctl+0xfe0/0xfe0 [ 634.465956] do_syscall_64+0x1d5/0x640 [ 634.469893] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 634.475080] RIP: 0033:0x45c889 [ 634.478256] RSP: 002b:00007f6960a59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.485954] RAX: ffffffffffffffda RBX: 00007f6960a5a6d4 RCX: 000000000045c889 [ 634.493360] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000006 [ 634.500625] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 634.508022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 634.515301] R13: 00000000000005a3 R14: 00000000004c8411 R15: 000000000000000c 20:54:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = semget$private(0x0, 0x7, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x1000]) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x1f, 0x8, 0x7, 0x4, 0x8]) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:54:02 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x2043c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:54:02 executing program 1 (fault-call:8 fault-nth:13): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:54:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 635.849419] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 635.861998] minix_free_inode: bit 1 already cleared [ 635.913991] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 635.958020] minix_free_inode: bit 1 already cleared 20:54:02 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) getresgid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000140)=0x0) write$P9_RGETATTR(r1, &(0x7f0000000180)={0xa0, 0x19, 0x2, {0x200, {0x1, 0x4, 0x7}, 0x140, r3, r4, 0xffff, 0x85, 0x8311, 0x7, 0x9, 0xfffffffffffffff8, 0x19, 0x80000001, 0x9, 0x9f, 0xfff, 0x1, 0x81, 0x80000001, 0x7}}, 0xa0) tkill(r0, 0x1000000000015) 20:54:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:54:02 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x384b326d, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000980)="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", 0x309, 0x34f9}], 0x8000, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x2000, 0x0) readlinkat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/168, 0xa8) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r3 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x473) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) r6 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000006240)=ANY=[], 0x0) io_submit(0x0, 0xa, &(0x7f00000061c0)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0xfff8, 0xffffffffffffffff, &(0x7f0000000740)="0cf4869c1105401bd750f0d0f97febdc8f81a32d29614e053a4fb0b1dbae87acd5a6f67266647a13504430a45271fb699d06f3f08bb91af8208c04c3a92a22557fb81c0c686c878484f263382bc04665059f50f683d3a241818c8de3b5f816a8a611b5cbf1f0300531a0ccd7abe8", 0x6e, 0xffffffffffffb8b8, 0x0, 0x3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000800)="cc01072e48f13f50e3c3ed510723a6269d5cd19a160cbbbbed89830fd24710eafbad07aec8d4d8202dc5bef59b43e2f771bf3f9c85628ba27b48ed066a336d0c376004bc39585560838228bd0da39e8ea9f76100ff1cebc9f3bc54a00874071bc0490acabefe306d4c435abae906d2907617f5d6acad57e95f847239aae307df21d6ff2ca696839d91c1857246ba569ea1a3fdfc16e2ae83537c629378b7ec9803358e", 0xa3, 0xfffffffffffffff7, 0x0, 0x0, r0}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x6, 0xfff, r1, &(0x7f0000003cc0)="5c529f5a806915061c966214bf8396bf594cb47fedee89a845ce745e201878c4df193d1ad27485ef1f59614a854642e919d7a6791c547150e8df852d195a46c3af843559497c646dc4b00624493c6b37efd895897dcee95147d8c264fa069319ac5fd3736ee0cba4a0ad124b219224e48d33e27400b3535308096aa872312597ddaa3b79a7e52d58d614ee4dd8fce45f256c95", 0x93, 0x1, 0x0, 0x1}, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000003d80), 0x0, 0xffff}, &(0x7f0000004ec0)={0x0, 0x0, 0x0, 0x6, 0x800, r0, &(0x7f0000003e00)="2733e4c467303b1823619602efcdb583562e2d32b55ebe1c383a6f583bfa46042ede1250df93584c2166f4407bfabf1d90b1f8156778620920dc2d0882afaf9d24a562395d3bd7907e4a9b90d4d62d17626da7ec3e2dc1deb8faaa72d47b8f810a13a5ff050079395f3b3d862cba1f0b53aa8ddab838279774da6e65db56b43fc5f93ab9af97ebb9ba058bf5950ebc2efc36742c1aacc99462f1eac4cd6c4af22bfe2b03cb1172249049681c03c20883a6fc66b3c3a6d6f287fc59ec17b4cbd3ca1359e7ec786d6733f9832af2f5e839e4c77374da7086b10d90340652a71d3506a1b734e4a2ed7b071ddca8d0170399258fd7d9b2fe406d18933eedeac414070f3288527c8acc90940c324c3906492b490562f3ea7bc5a547ae37d8265f6e2b6561e2617f243085b2e33a862351d4ac5f011f15febaa98f00e007d8d8757c30e0520cb385555237740be95ad2ff5da5b88547f1ec12c2ccfc9dd1234e973cff7abae1efac0acacb17962d160ebdb3e210e6fc4459b7bc2e7363e9bada62351b22c9ef40a8b8234e92c1bc38be9dc219b59459f5041bf8ffb5fb1ea30f610d4629fe56d5f9c2c43c8a656be602120a6e19fabf40f3937c23aebc434b6fcad83286237dfe530d8168c83287611054d97d062222dc8c5cea5c27ee2ae1a9adbd31defae7063752d13f9ef1ad65fbee6b24e0dec2e45e2a0c98d4cfc4ff92024de9d00964159ae557b2486632662fed221f06128a5974f9fb38d1615336972ab03639879e2fe6400a85ba411e587d44715466428a26e7aa08aa48bb04b8fd04aa579d9f64b0025682112637550a63cb123152aa280a76ef3c0047900eac2ecf4084d89c4aae21282ae52d93a0c1f0041a932ea7ec974e6b26030587ee681054c2e1c02236dbd7b103de9568a365b49a80c5cd1ade57b90bc2432ac0ca3ee76d3ae6be18cdb631dcab764a508bf3793c796fb3d1eb9402baa17c3735d8406291941582bef9c4406ccddc5feb436f058fd52cdc14fe35367ba5f642379763b7c5939f7740dbd2747716a462b2e4c0f065dcba67532601b201e6343089b57ad146e196230be28ef6d04e9de13cecc8c29a86f4e537bc27bc70d7dfaea1534a1bfbc0ed3260fa76d2e1602f32548c452b806495fdadfc79a06cf21816ef4771009a7a78f61d766fc8d5260fc82564d4cf009ecfe6747817af42c39ba4652540cf77d22163dafca5944380d00d7add47b278fb89893a8f3529e7cd7294656bc7205f3080f510096bbc7ef0d8e63f0d12bae40121e3e0373595814004be9d417cda31ca6017d9ce64ac0b42364f141a9c3e4513f36c0609bac8f3a8a8141b74da8ab63cf32995c1979fcc85b813644be7fd1574a5fb7e02527cfd9b403f49a51dd23aabf8f6cb55a6ee59c938b7ff6f560079de4833d036dfed6c77cc9f8055f321fdab06b8bd2820c3763d719a9c6fb78ddcb4fa90e24cd52273f4fd5a25885c929bcd0c18633510343dd9a0123603649ef578c60f553d86d3bd3d871d5c3635f3e8b1428fe4b434cb72ab9009c35443606bbf5a56b802d49ad56efadf8d24f7d71dea6fd94a8a12fd07f50b02d7cc542df296d934ed34719e907c513260b1747263ae3411286a7575346d88b3b3bde80b92b396c27f36f116c4293994eaf70b17643c9fc047903a8b1892673c14a8a447ed631c0a40e44554e90b8ac75dc1486c7ec9ec90b6b42be3f3d9d63bb4dc64dea5496a9a162c0f03c5d08a4001cd5b3cc0f635c73259da047fdc30a9e3ae5ab852007812d5220eb2b19df4f8813e57c43b609d60018767bc98e3c11d2b74cf309a6d5fd8a3522bda65f375a672dcd14922f136b989a78c42ef4f53e99e948deb68c8a92016986c8bd9331cd7a999ba2a3295ef07eb27b1fdea61a03a021c269bd0a21995b6e56635b2a7dc1abe3e258a4101e2653947f9a5e9735037cb55e7915d11d0a796714683d4e6a4ad5521e84feedfc93a2e640752ffbfaea6bea6dcf5d6f8abe20ea10be2684c8377fb24bd83860aa9b439efffc63cd4f25ef8bfc70cb5332213385e407d4eb337cc6155771c1a0fc6f707e57888d4ba1804a4a574c16808532720ebde12b0656d3ba77bfdc40e253e7ba481e88ef39eb6c94e1387403de1da15ff67ee5c45849bceea5f898c82b31852e13acf19f4e7ec09121e7c9cd82fcda36abc505b6441f7dd9105fe856c8e96f4993bf1f8601e06d9f15adae7bdc7edb5bcdc238add308f9c8ebb67c89760be7475bd87c65512ea1b47009a34087ac9c03ecb141d75b6012090f53e2447d65bd6bed6a9dd732341798a76cb013f3c92c5b10e6a6c99e6cd75bf27e8825e692a33dda6a6835c75f8dab0bac0ddc8b5ef1e77b438c59086dd0bdcf49ac5a719889096426d7e8ef95647cc3f852942e06162b60e89d53536b37f83ef96e4f6250d6d9e4b5b47725ab50f98b58269b3f343b42c7884090426ec79b51918d76f9d197b9296611380391821f990878f77a5e8beb29598adb72d32a1c1592aec7cdca121a639f306efacc0b0768fa677ef9fbe5836268eb8247eae4aca5b8bfa66c4bf8458959f43353b7dacbaf6e4a3cfd629ac21a93eb7c8eb5e08a74d969bdef28f200e97e1a3660ed9734be974b9c90f739397836f38644a0a6c599ec4d695a5dbcb48a587ad0137d32c956025d991a6afff29eab10fd1e8c9b4565bbfedf376f51c6d3e5159bcedcf6b0a4d13514a088a40cc4a3280b6784ca2746be4f273b7bcda4628b2222630c1df28038f6a68c0af3e76fd771f256a131485f2c9c62b25469aaab0b47348856e7ed46a81f3f6c7cca3dee4cf302e16080b31800570497c2d721834cb83c8b3ccab1f920eeed01b7f281c9d78ca6003b11446b7130d9a215922adb15cd481aa8c2b608866e0209ff0da80e6b642ba26792105edabc086b697c53eafae63733d8353f03e1df303baebdf6f36a850a9a3762427b7baf3c90d52cd2e0a3732557fb5ac1c2f8dd37cb8078f88fdf3262701dcc3d3d576f66ce16254cd679d632051531d8bd53b9c05624946879801ebeef814653293e69268289b483a1ae3112dd8c2ba0e31427db5e12bb2f991c92e8a4c8a5e277116aab1097c00fd54108892a19494a30ea0ec6d3c78faa55a4627d9285151d56727d641c4966d141fdaea4266e39d8b50f40902bdebf8a9141c4e5916fa2ea6bdede05d20faa94a85682ba627f1b8c5f15ecd26389ba52650f95c0aa6bea89fb958b60759ac166a891b06c3b64a7d53cbe056eefb8410303787910b35290f1bf76c5c062d0c8e26dc2e299d6f3611d788575eb4ca6ac43ec2b8b3895fb7386c08168d901d357d75d14a288ac1c470b5af473298b1cc0463c7b7ee6088217606471b0aaf1edaadc97b04e2d2e8b252527a4c66962b3a997b5c20c2e2cf9b1e7916d0a261c4e6a1dc27dc36276ba4cf5b1637b56991d5bcf179d2abfd8be06908a4cc206f44013949da342f3d63bfd6489b2bdfba259c14846c8c75d29d0eed3267e435924907c0a02c08475ead55e6b2fb40b97df0c3bf58c62fabd30c1b3af94a3ee77ff8da5837fa6ed83b2981047bb90e38e8e860c6f37d051ea4f2c96624a9e4d185e212e1cdd973208dcc86e6ab2e24c076b6972213e1a94071d6cbd06f1d910b7c34962ec0e5aacf1779b4fe7a9ceb6223d2d1eb72f50c5c3fa57b6792dcf9a1dbe23c83f80a468166550ad6ca7bf6e6a81045521bed9baa2c3bd60a27c9bde153f1d37ab6c09b3999ecb481ff6c283ba99ff85a947fbebe094b0ab740fe3ad31c2df078482abf93ff65228b5d960ad35c4da356d8857885d99d90cc87160900c3bb5f04c728ab282bb238fd98967848d977d38a373d005c31192792abbe9298c01c7a6a7c21d0adc626bb99c36e04e998db8f8f59a218f63f7312877a988da8e21838fdda3bd85c8495c72a6b3bc7f3c9aaaad3e90029f825c688a9769264c04165e95e1a040598c038866c74c496510efdddb83c14004d48df1e5b4ed30565840d24ac42edcceca755735620642694c9672d3f43dc3304e512a85abc677d49831e7c1b70da21b283315e4059f1aa1fda768763d4f266512825feaa902231fe3f5426afdc37f45f6177b929d5071fabdcd80104b23d52a66fc2fbcf796bc92e69b62e1f36c3a95b2e3f5de140985def9e86f12f3b01dd48f3b69d8e9373249af091cb192822ad02479d0e457cce48a2b28fbfc2cb7f170bb04c293f45b3a02866b3259c063b1fd345e36c7a0cf82428c3fbb5f5c69ce3b27c614434b0941065ae7e7d6bb636d83f62e4436e9eb24df63ab7d52a76ace7d5e765fecfcf375c3737cae4f3ad1e30665be49cd044a1711ee5de7a6ecba779d735ce26b9d459fa289a15bd7ee4445b5ffa9dc5d0578e8d825648cc7c7271999ff8c38f6da15e4ba58ca3bf643ab1b56f2e67172314caa06632e3e5709976f9c5a54d9782e93ec32f02ed58553c4712f31dae0caad8b4e3a7b5d7773991857865352c47294667139be07307c2e95c0d692023c1766c64ceed013aa1a114431fe900a9a7f0be393a38d2da0aea398183449dfe8d680a8a5acdab35e3e607c4ccda3d1da8350f39b09c94860a768266b8b1f865ce28ac6def4ac85f0db91cc4fa291f4f9bad7847cb4155b474fe20852fe3189eeda1cbba676db352d555f02fbbb2ddf2b0ca84a8b311b199bc9d5322d4128820629765477f35ae0b551c31ae7b62808277478fd739323b5f48f68f9b5540fdf168ea28d94392042aa51720fc3b9bd30c254068e4376f9b8e45a7b74acd1d34c0edfaa8695115503677a96464a9db35b6108db6788ae2cb1b4200759e0fbafe2cba0c477f8fd12cdfa594693d945bd33b0a5a7dde1a68b4d984b9275d7220bba982688d6dfbdc030db34a9f1d61f27bc87d7ddde9ad510b7d56127c35f6a31a5ee901e2685914af5a3ededca0d2ab699ca81d8b3b889921d1e5c01dfb232e51f7477d3d2ee58d74968bbcb3d50d2774f3344794759b5801f67e447cc51f28687d30dc46d53769c747e3affffdce229ab52d8115f05558ff7e6bfe779e310350eb382c99cd4a65a1715c871c6b2e855eb160a74a066fe5e9d3a85b575082c046edfc843fb3fffc2df1550f92734ed1a24225187e393ff21182955c4df83c9d80177bc3f2b5db712771b9bc539e20b5833390bc3105a089e0352a25c794cb04bfd186552e27966fc046890da8ef75458825e68f6641a82ae7ea5e89d9c59d8ff9990b61e90a6070b08156f62ac1fc6be34a1624c6d9138780c272edfb558c8f5a92ec92487e4fdf35f1eeef8976fb9cf1b1e1d33fa5975b0107b07b26ee94ef59754680d26ee33d71980b76459561595a99208ee550cac6007b587519c03e2e4b3569a0ac63639d93a39792879cae1fd2106def15800e0a44d2311d3182426c20281e380b6fbd008ee36472c244796f21f82147664969deecabe8deeed41c26ea2dda0c153a513745f68dc51f527aa10fe19b75cc0bf555b0a1ef7595c25766708fe4f1d2e6a6f244e6d7868b09ab199030e2006ba6c78d0be30e0ddf28b1a8d6e5caf503b13b4f9535525bd343f74b873719152c6859d1cf093c19a8fd2f7336f00f0e69aad3ad548c017e861561719c1ed97346207afcfff6280d41f7df312bd045bf8d18ee63bef76cd652a530c1466a20a20ad2601bfb77f1638d9830fac8acbe2853cf76c43ba69c19b9bb4a672b63cfc35fecd79817f55232d3b7b51c02dd01adfbe02dcdd4b3c6f7927ab3baf7c9b3478a5ab56e1be9b6", 0x1000, 0x8, 0x0, 0x2}, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000004f00)="da222fc5a72d8427b5e42560a74eb948ebf660c6aa244e0efa2185bf93bed470beec24f9bc2887ace7a6545c8bc06d098eebe2d2b49f15", 0x37, 0x401}, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x3, 0x169d, r3, &(0x7f0000004f80)="ac7e1931c70b54", 0x7, 0x4, 0x0, 0x2, r4}, &(0x7f0000005080)={0x0, 0x0, 0x0, 0xa, 0x7ff, r0, &(0x7f0000005000)="06c15540d3ea457a26f577dbfa95be7dc61eea60bc769396f9f2e348bef101ba5e5a53dcec5b38c44b2007f51d18653cc6f4c452c43e4177b34241d444067933dae3abc30e7faee79bf4ad", 0x4b, 0x0, 0x0, 0x1, r1}, &(0x7f0000005140)={0x0, 0x0, 0x0, 0x8, 0x20, r6, &(0x7f00000050c0)="c52b03fbeb83d40cdc93a77b692f4e4423b60831977cc47c676ea1cfbb8f59654b85c12f3d41d3e2a51f0532031c4a5b90021aebc4233e1340443645541ca8a9537d087af7f218b73a1c43c7", 0x4c, 0x10000, 0x0, 0x3}, &(0x7f0000006180)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000005180)="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", 0x1000, 0x2, 0x0, 0x2}]) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r7, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r7, r7, &(0x7f0000000480), 0xa198) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@isdn={0x22, 0xdb, 0x1f, 0xb, 0x5}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)="0a918ba47a0ba73ed8b9c6eb561057180d5c93f326f3c396946435becb101efff4f64d", 0x23}, {&(0x7f00000003c0)="3cbd750a4e40567a9a0693fbcbe5b2176efdd6ed88423e4165c56bf04a791f17575d4fc9187df1f840f0277bd0052060df8d27b364e1f08e8888eaa0492b1bc77180f64233a25002065ef6c0ac5f3ba745df14051cd3615b75ddf8ad9f4b6ba87f5e4d1061498693994ca57cd91ede541facba29ea0c285ecf75aa287057533814449b99c2efda196a7ef263e3dde84a044f4a488c", 0x95}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="dd8c38f96bf1dbea8f84cab15eaf0d5cdae667926d90794c4979822533181fcf78ed5ba958b25211b0ea3a252b23e4cc504973609d301d7bdcc7af7fb43b1c4c4f324409b19c0a79c431e78c5859972f901ecf2b1482471e7b9cca4238963f078804156a65c12cf439c1aa696594fcf67455d2eb4a01c2f23fc9c73e113d552192afd94b6721f94f2a9c0c26f651b0d3b1016de2a3ec152aeba933637e7e86f394e785d1527027c56ba4694ec11e307c6e0b68bcc9195d0961d41d360d0ee6092fb6f4d62d4c71dfdabbfa764e9599e851773b3cf9222ff638aa63a4573863b95588e85c1d7921a75d642930c210f860761db8465b2d8276a3b364fc4ddd08cdda08936b153b3a662af50950b5934f79b044bcc6001b9c4f87b64a249a5d6bd7d3a05ae48c48e8f38685607e592d9ee52cb00349896d1a24485694fc3609dba215772987d9e4d4ec1c491d8e02862c1d0f530aed9b5f8b23ce6b27da6d079cacbb723a35189a4d7bf58292966c2fd45cc53fa992079dd9a5f946d3a5cc27909f0a60a6c2c6d89c791a0b4a7fa1a1ff0aff30467c9ba852abfe988b3c318250aec9c80157ee002a9b29cd12d706f212bd5107a303e3c1848da1aa199d46451803071fb2bb6e20ce69910e29d902857f254f1cbb44e50255de2a8b36a9738baadd952d5cf5a173b4275dc774c0d5568251311f2a5cab356cad67f426e5843e9fc98f3d2c5ade423db13f389278c8fd1aecc442374af1cbf7385d0024e4ebf288f849772d501e5a95bb6867a2be187c591129b8df0a3b478c81bf94c29f6fe6895b4698ab4b74182e37e0f36654d9343d3371ac067a83bdebf920d1a73b16fff70aaa474c75de774a1ba8981c85897b6377922305a8c692e697f477a8c6ae8bff4d4920e801455aaf8990336cfec8b0f3e0e97dc144f3e3537841c98bffbabeed4f3c4439f819a62216dce525e395c9b2e1cd98f416da361fa537f4104b6e45fa9bc1677108c410b6be4f4c147f31423c8d59da0afdbd30120d32584d3b1657a611d428682366de527f7b37b22dfb245f5bdf020f00e1b69ea0d1912bf23f5b491639b7f07dcdd2fbd852d142e703b5ba0dd5f7f9f6733b4b9e855d6fa087ae064aa2b819649662aad2f45876737a84dbda6f84b326734d50cd65cb0bf9f67b36ae991114fc845deee9e5e9c484af67460079ffde0778f68fd2eb44f0b331e101173c05181bb5bd2415ee2a215cce6579a84f660e4d917bc7d2d2f3bdb7e2f5533717ec0791f1ae866c1d55f601f34d712bfe4c6a726e5f7ef7df242fa208a453095812059b29c8d070c15f578e86e7dbfca24731d558a4c9f08203c093ea32756e5307ce0db128b21528ca8a7c7a43a2c0da6bfa79a69db6af0422f1e0a6c1e246ee009dd1d559aa2c197dd8efdc1562a6411aa504ccb88a50180674e3b04bd22823e05afe010c51c76ee36832e552199a1dddbad43e515f9c836c6e882d1cb8c12c87b3671642a4dcadaf36722506d355675efdfe67eb41d55d2b01eafe25617007cc79549a2774ae95d98ce04f78cd67cec46ebf32f10b56de0cce48c24e30d53ea559bc49b6a7cf0a7ebdb8b14ccdc55a735009e7adf68216130f0c4f575ec21f7db72ca727362f3974b1d5343c067cf0f7f742d87d304500dff565e77da9b8c4aa98df8b9d975eea467909d745d7c5b65e8d885914c1f141699a6e8e7ef28644efbd0f4ca2c072899e89490e4ea9089158b0949f97bfa78cd09039087991ece0c36c3fd3562646e27121b9919aa2cbc4b04490b428d2ecf6a47d92adca649eea7a13beaaeecf66353dea09ad632c9fc117f7343520b189bb7e2ed778dfeddb018fe67ee4f50fafe897eca0cb69a9129c37847098294fd735fbeb4dc9cc17a87ed08163dcb96bbc0c0f59fc0e5d80417317cc5a0b38c8453fc1cccc3c998e071ebe423b912dc95d2820f4d1fd7d5c06cd379bcdf895542d2d7a1e4467b797707e73d8e76c917febda8d868a902a32cd46d3a42b7af7f49cfb456ea7516aeba08e04f37ca0c767152ec563a4cd2e7e22b7a2b111d51a6f83a3dafaabead85c13cbce7a43467e2ab01b63c568d3072641ec533c4f8a1475926546566c3f6286c1f498eaa1432504dcfd83d283867aa58f394b35db9f514d066b1213295ee4a3fadec94b6d598599944b4e33037a89c707e61b506b6374de516af5d0d53c22d180a78f24a85ce735da5346fba91b1a9fc846fb088c1b9aa414d2d9789262aeb09712390859ca435568540deac8632b7259c323d44e1c670a83c380f30a48e186a421cd15cd665cff3629a8f3b11e5634ace4d992818df1c94dca96a922eeb63f888d809fb20f9d7202dd63ec444b3b0dffce7c713fd2ad66dd17dc7884aff29b3999c0283e53eea68a768826bd1f1ed2b964fdc4256dab1e4522fd0e26f3fd04bcc8115ffbc87dea7a026193abf8b89eb6861bd761f03d0041c32b7014c031c946bea47fe376c144ae07161c8aa945de76b8ecdbc31f736b05bbf2e9ba012f32693ad22ac07937b0384ce41bea6e35aa5a586b52a4821b76dbfde5bcc1826c0f0bf6a32b9d0e23e668f0f33fdf24e62a62d85724c4401b8ec2aae37f0322ac07808bb33bdbe341e08685f393092d0479754756cabd829d2f4c0dd2a09892c7ca5dd4d6e17e3cebcd40c0ae8aa06d748147bc19024aee18e5bbb4587f6c910c31363cca5776769da1b2e4b637758c97c8dbc012f138db5e74a8fdc8b0b61062e38bcf50df4ef93e6a73ed70d886e22f330e50661b33761b34e54b42546357ae25f178a63856533709466616cf0ca44f04d1f364de57901dab17f520a5fb628f291d2a5e0244f27029dbce49b5013ff2ff101963cffadb6b5d3ff475be6df595e56d7bac687b8b86899acb1f96b6e87f52ea0cebe400dbe8bb5313468f06c3cb487528d2ae9922adcb923ec34e90c8a9aefc5f32f2b6b183b64cae46607e42aba81ffac2f967ea44f88b457c67067ec73c40ccc18fda2d30484b99991df1eed1ff583e93c423421b317a9a40d51a2159cfb078244144f31b3c38369183c7c23ef428d7e1c15e3223f23802b0019a8730d57832455772111ab2738b5d499a233c2fda14c96cbb7b31c7c9b5e89013e283bba6afa39efcb503c12ef3e07a216869d355dc6634828f76525e8d3ff373b98c5b0aca0b28c6481d85d3dd1039bdc2e3d891529316edf5021f887ae165f036708ff7999b9ed5f2594e40b746ce64f4da2c98d041a122e981f5d4c81b33de8bc74f4a6a3fd2d626a9cbab97d94589b3ed3b1bfb6ce6ac7ec563bdb4a7f187bf6182cf9100349fd723ee8fbdafd70ec192ef6da1df166878f532be63cad009c42021610bd58518da5549b37e2e366835b0317612f6820812dd699430b4848c26982b58c39138463eb8f62f5f560158873165c554a4c14f68d9832c2c7571a8adeda0cd80fba5017ac0e69d1c81b324468eb1602b6d213ab4f2a138671f66769e9db17731de86ee58aa7dd49b568023dbade0907d9022dae8834382dc7e80e795e9b08f6fdeb0229a753106b70cab8480eac298d521819e63e9cf698a1585c5548bbe98a443cbf24c69ab1d502b9876531afb5e4779e997145ccd3bb190cdb19328e97cffec74173e1d6641161c7e8b8db1b9c7f1a396250d2ff031c266e5ead9b8bf2f7fd9c477c92adc58de5aa25417e87fac2e9444261000febcd972b01701c1a208d070d9f1d3d53526332138c59fa98e9c0d7451109e64f015d215e41fe8879a3e62f6f75df0cd317ddabfbb47576f0e542a712b5af30a4b35f2aee6c901352dc5f8465a72d31e2631738cf4b353550c9a907a628f46724c2b19838731eb83ce7d21ba484e6bfc3d3ad1841055489ef5f00af502c80a8a2418147170a27cab5e59b4bed515f525bb7914604543258a128771313ce3468dae33b7b8a732b55563f5dd2d9493b8165d5bc7d4afa9018466d36110fe462314326005e13f7af90fc1aa01e6759f9bd58bc11b2cb1361a677dc5e2336e048d907cf3800a903717e9bc83d21969df439203ce41fb23a8cdb14911c396c7b97ae8b25739434bd9c4a6e01847cd6a37805e41b503a8d6a4f12d5a73497293c273c9aafd426700c48deef4f8dce04b78ba6a0f87ee189f980c24a395ab49a27622548ae524cc477aa9d93f9f545e11027ee19a08e4cabca85cf0a2cfa40faed26705dd89fc4496b8d475b7187015923de59026cb5a50ecbde21df9e074a3c35a2bd5916eef561037ed73f6b982433c418101b9846f15c9f8d3e271b2fd750e3eef7952e7ef8609f230c65893831632b7a42c2acab56adcedc067b68e62fe6849855a4ec47a2e4b4e47b3fb98b2e7ff57f1a0e8ceb685041b27da9f3e3b24c15e23de58683f9c13471fcbf7eca393550879bf9733002b8e1022d98191a554b7cdc812fc8de4c7c078348c49ee548e88142325050383d1b99ff3c004289231647e944e99f345d0596accdbaa595fbe89d2e0da0ac019c0f28d7546b6e59c730658a7ab9bd2eed4037850cc54226f6fc16ba0ffac6840c7215e6329866d33998521037c9e747b95e1bd6afef8733f7d0082a89d2c10ab340a35626211c58dc22631a2d5a5f9e03f70d4457d5c5cd76c01b4285c526c2daa9e68a6fcc7212bad9d2f4bcc36ac3255dfcb2e01a769f858e7e15d15aac574e3395c483d61e80de5a6792af058444e3d9cc8718ee4d849ab4dd346c39420498a8393ec3da3068db4b009e216b9fc3f272781c7853353fd1139b783de586cc884df39d13252681de0769c9628f34eeca75d446585ce5fbe39e770e3266ec4619371c2fd9a5fabfe53d5ac2855860ae5c24cb3afb56b060e08d100531f0fb41ff70674d14aa08d8ccdc217625cce8bcaaaf8097632ca89fe065249ebab7addcd127dd0299add17b936293b545356e5ab8ca0e6054341ce3a9ed0067f4531a11c523ad2ebc47242e5d33f744c539a6e78abf89724565beea5d83ae19bb25d93117fd87df9e81307a57ae22408b242773875254842e59b1c803cb01c11e6d51b76effe3bbbd0d04b78a72b4fe73a9ea7090b9c0ed2ff56d1fda0238b0950bcb3953afb7ee66a6f597b0c0679a9d73184765ac17106e3f62649c9f5310a9b9a28120920fb64383731c90c4f2830d5c647f3d177100029c5d57e50981ac8c1f3a9b9c9951eab1c14315d26836dca32ebe8f2ace2b875f8331192fdabc64d10243d90e9de738d4ff4a72acf66f4dfac874e51333e263fc9374420e2d63cd7fa90ceb659ba1be3f7c36fdeb6d31a5ce8385ea58e8ab15c728832a6424a4c615a57dab7652b94a7096bd3009f1c64541938777276bc06ae951dd1006fa61f4e5613b42e6a396ededb3cf861ab31e28c37844b6815f729494d0b827766e58323b41b833e59d38871c853cfb5065db398af5a50b057ad683ab44410c9792ad4ec134a4adc1341fe71e3c4e39324d1c661af499cf2050f40fc42c747c57dc02ed5fc435e2e15c3686dcd0421d3e7f941fd4147cd7ef2d44efc0ca1308ab0eeac3dda9a3b2b2c2ebf4d6112d3bb25cac20b200641e7559106ad90f45eddabfac9305e523473753fcef619ffc0c643078ddd060d6465b76ba5f9c0a3f1b96386e9d337194fd2306c105892315525977e6d64cb487c76149e20a1b25782a9c626b741caac9af21651884cbc1d87857bef73a1e7643c9d0318db4a121079dcd1a0708464ce576e79ea8e514e22aa9fc387087c1ce1de5e2774afa0a8643bfeb3f41d8d0714525de5e520c42664c5", 0x1000}, {&(0x7f00000004c0)="3ad67a9ac60fdf40d8cbb3968e6d860cddf9ca5176a2ea2a982dacf729e408ee76278781c2f5d4ab6555cdd26abcce056c78bf435b1bcb8208290f4a6dc1a7a1c8e118737cd4545d054e09ea845d83030a27d35cbebc7d2d901fcd571ad8b500d5e7dc82a446c73b00bfa3330f73dfb1d412c8d39b7ce2d478711de9706be324a4a061e3c88f35e646b1ec3f498abb741229772e206d85b2cfdd30f16cfd088cb6bf", 0xa2}, {&(0x7f0000002cc0)="2149406d3a1e68b0a6bdb2472e577502450c33493cb5e4b4a92c33f0e92cb29f47d4cfc6807fceb08431423c84c624f5267b77a52a3eba3a4942c57f1c0bb21f8aad9f29578893438d76ff5e030ceb9837194258a7641842f1d2ce5106c665b9e0e89742934c580b0804ec03942e54512c3b73e7e23687962e89eb61f63142c3ed5ff1d82d4a7ef7998a283ccd3b3bb02d2e43894191c53415edb092a3fc0aab7013f4cb563491c1d4a72ac57dfc9cb2d6a7dccecda2d89f8abb379cb982230c1569e6684563de2194028aede832265eb887c5ace48487c73444a513835c64c6a18b23d0bb3864aeed2b12faa0e4c012de529d5414b60d133183fd72537144ad1242d3afdb7f617c1cecb5c9915ad5a93950098ece4cf123d57080be6734995c57d713e0da3014c160a4f6634f3c61261487a3c5e0804095f38cbe1f42912a89ac91217066cd2f739ecf2c99b6355b854ff7bdf8bc88deb9da0be3642a4b8961add539e40afee6c1081889101bb36057d03270e3ffb1d3de87f7778eebf96af1554416bdf9f2af6367cef96fc5c489b13cd7ed42274ff41eba2093a458ae199ad7a1dee432a5cdc3e80a0a3d99b84e68915634b8f2baf94a6176e1014017c3ac911680a78264304626979930670af8c6f63f0113153c8dc2298278b2746af51c3363ed1b79b7ee43953ab11ed2c6b7809123944cdf05a626568ff4f313146094663b57ec5dfe3a6b96348d2445af2f002a40d3f27d339a39311dc19da614fe1c707451c931015c6403874493863bcf153f2c4f84fdc3a07fa5844897c53205f05bfbcd55b220c9ca51689ee89771b2980f5f61ffa158392d7c2b86eb3335427dcf9065f716243984778d5211bc9f4dce6de01f769aeeb390ee3c09733cce52a82b9ff8f163cd61580fca33fb5410ee916dccea41fcb42df8a52d4d167a78e3145edc0145cbbb938194ba7f96b1434751b31af986484ae8be95b75b1103ff722f512898c7054bc6014f4d7a762f9469efe705fd63de09fa5fd011f88f62a9cee625e8182f5d9333264c52bf45edaf1a224b77ed2ead3eeb043045cc551add71279386efea8171c77acd815472f0afc7363c420a258e369ec427cdd147a669bc456a10a818565b542f3cbc0aaacfcc72b6a33620364eb9c990a9a99ac7efeb0170a162fd0bbd62728eabb87ee97b8545e343f94fe20bbf33fa4e4edbf159dc1ec4dae20f3c7e02d4561931f4184509de7bcdd91e334408480ff5f74bba4555fba5a680c1f9a7aeb01334e4a058af9df4672fcf65d972a36355e5ceea768d7e999b238e3c500e2b27ccc8d1c7044cd5fe330c1bd4bdcea9746d8d771fa9e23aa5f527edfe04842f0cf1d71fc777c464564261c20b9778d92a4df8c6db656f9a86be34fec3f7568e6c622dca80be54eb5a0abd132a407f52b2ee46dff617f40749f2c4295b1fd47a01d30f3b83660d6946027dc83ee2a57abc29f1ae829489b35b584cbcea8c89bf7cc45cc0fe38529f2fb3856c23bd54e41d7eb2b46e7e14c4e8a61a915299ed3cfc5ecb5ac76c8ea66b939435afdd106388c91da0ac91fddc19ab1e9be5ade0452bca2fdc7320a189dd4805add58c6f193c0673dbce9a2c44254fef1fa25035a06c4b96398ad2f6156b3bd2f605bfbd482d56987c7b658bb48e4f62fd2417fa3c6eb4be83b781e73f16a9fb848edda94859a3f74ebdfb398e52cdc37113ebe2072eebfbe088db48300913d5466398f338c0fa2de0930345160c82e25ab46f65da323a172cc130765d2bf48b1e40bfab838711907be0fa373800b8e7bf58f5fb12d446a9c576a75b3c58fd0dbeafa46abc39978a6a4c87657f99972b168f442d6b7c0b766b24b129f2a2435e4a20c895841e4cd6545060e12086559b9d9b8051880a6ad071fa5c2e2fe6331d07bfffd7d9412da497afe24900ceff19841f304ed8de554a71129c40c41256ed29c073e37f0a539800231a8a5dce4759adc62ce8c44878c27d859e679ffbc9860f55f009fe3115f5300179bdf7860c9dcf01c32130d6d90e1665f7ead098d148b2df2fd72d36bc029975115d0603f18c0ac00de07d9e73d5ec670204180920a6e2a458f32a1623e3479bce3144d5af9397400b47a44cf4dece3942a0397d3c5147342712c830170901a24eae0ff94e83c76f4eebd2504fe357802cd0356b0cd4bb7d269f6f8061bdc86f58e200317fea0bc234d476ae10b652e211ebbcc1fb5a36ae081d58b875d152d1944cb0b0d7422241765702e64c175613a54c3c2b4369c5dd1ad30377514ac789ef637722ab5d7927937ad9ac506927febd4b8f034cc75866c5ab0a01cf04cc069b4f9c1d5f12d8b54a3260436613963976bab91054b37c6b1a100542fa2d31fb9a624f45155ad9a9422d065dfc70bd9c9020288b1b424cac1226aaf9f479baa863d3047cb66c2d5fc07503f8669875ba169a3b4f099f619730261c83114ea48793462a68f83f4932daf96076ac5d6d1991e49d7fa8a59956fd5474fae4715a33c5f72e89e039755f2e63807cee9ac0828a8ec5b9f4d211a518964576489ea052b9ba23032f7de8a75f2ece5b7b4246a4b888eb1407c64ea4b66d9470dcf049552727f83ea4550fa614e34f92cfa1938247f278a43bf582e1edf9de1377c7f7514bdd4cf41203c1bbd92da74a2117c06fe42bbc742f690c1d9150b37037bbb5af643ce4272e63579d94302716783a297e2f8ef2df7ca933a14bce51ac1abb64f71b97400facf14ffdbda31b70136c278e29ca4983631c19d9811b6f330294209fe690ef28a59f617dfbea05ff43668b56e928e55a6adf2da1433f80569067bc9044746982a8b7658e7ff46f94468fd442ef3241f3ef08953a3cd92a766bdd5fe7d6896ba91d77a65c782e2b4e09fad7511e969000d19319a5375c9a3d7f880fd1e09092b645ff931e859534b84b3505a357d2c444a91222419b8a44f13ec2dd15d6fd5e9aa89e0659eb5ab9894faa2a8cf661a53590eb8a36b8dc14679bd144e23157ebc6280365d0cdc04a2ef7cf482422804958c9ce81e85b48ad0807ea861851e55d3b5f3b2c41f208fec427899dc69b20fee081651160baece89ce7ca0cbdcadf3fc9219eeba9f84db59dc470cf0a4357c3847872cf6ad0c11b6cbadbf517f2a1edf4e0dc43ad535ac8c09c2a93ddeb75933cf0fd05262806ebd404106c27a68545446d429578d4a383e76a27a0324afe85bd362422809f85376ac1788b6fa43f77574dc8b1d768423727e6297aef08ff1486eb6a24b88322271fc7c4a23b242312466cfff3d91b3a5400d5f542266b1bdf9b55a796c345a1194607f0bc99ea813abd83f344fd3afb00f14facdb6ef9737d064041f504ad60559dfaa9ddef8425ea866f064bb899395903015c54ce70f610df9939a97e67123692cd982201df458379d6b276e01629a4284b4e8e3ea03cf96502ade0e2ae8679dbb570dfc5ee935fa235910b25430a7fb83e7b4d53b042847bbea37fd8a2d7612c65bbc21ae88f4cd6873a2ea897770b3c837a4ada43ae161c5dedfad5fe07cb007b52d9f71ad09dc29f479a9a574f1c630e2e8f9cb69865c2eea0e4e04625509da2cf1ebcc98a0d31af8521e023baf54bd6e906b539edc2db7367a132f3d77539bb06c86080f828ba254de71fa388226b85531a8c63097e7c269aa136199b91e5689185879ad59e8752bb3516b8b43660d5db32accb2c742ac5192e81d664726ccfae94b2f8651c9a7de79e6d32d8ae5e97d2fafb851425bc1988ab82143376d98b112d345f02ac55df2c582e149cca82c7d33b79d4a38a2d8bf8f3116b5b1be2eb2863643bffd7a1040806cc3d6710c885dffdd52694c9ef8ec0c7c40257711b89825d7eab9b09ac7f24744d98ed0558fbaddfe49b31e815a5082289f14480132609939cbfa0ea75588a2fedddfdcbf28a1919741819b01f27b1a7558640ec042e1aec597cf5618660d949dc2dfcc2140e72d961138c0e86a37ef0f1a23e26b026cb00f85626e2a2b8b715f58dbc9812634ee4b3d6143418b82b7410268e5c267bf27bc111a94eebbfbc1275da9c82fb0d09c4cf851f92d5ac753bd59cef1ff7d8614ad7eb4383c2f277f096c30e8b5895499e9cb20deb0805a2a0218f5af876233a0d1e1f975b92bc0d62c7bd69344bcece3899503e9d02fd76f09dd02de3d272846c26fb0e600e21d0f52d0d6b4d6a8fc7975dd8b80517e3f90cb42c93040a7262ce81fa101a38f6da7861fd5c5a7377de51ce74bb7ba3e628a2dc5fcf7fd2f11dafbf2a1fabbec81be939b3956dcb62b54834d9b906ec22386ddd7457d8806369de080877bbe6b033d7eb6006f92b807b6e9c9c0071202ae0b1ecb38f2928d0d08dc1f15f6396c0d1278768ad7baa2a71a544a76d433f90b38c13fc58bd13643d46fe8373d6d46052c6cb5f43f26b540a8e3159766b3c8ca39c599b2a3a25cb2bc58e599351415bcd555f8f923bf6e1df1684c5ad1ef72a94a9e46e3947475f5ea91e95dac71155edc243aab2c57dc93ec770289d14822c5d447b624e4f9ddd5455d26eefc6efbd328ca852078db9aea5303752703826274f51cc927fd71c19237a8fc2f45383fe81673f8ddbf29cdd6d5e549620cd34c1a15c8d957336e685a413b0d021115ad03e57b6782a5147a52d978362b44c37b6bb2d5495ce7859f3c6198433b05b0af42905aa45841f5d60603e059cd1674aa678f7d943d12183aeddfa1937a6adf0449f2d4adab9e825d5b0b528f3d974089fe35b19cce8c1a1b3be0d65e591e29ccabfa06a10c74b472d7eb15e173393fe8508a84d0c4c48208640640a27bafdcb16d680ca565e3f4898a48dd81b6819f5c04bbff79eb64261c1e2d76caba750d7ae3f8937a1064bab9644118033c9f37f3dcafde8d207d8416f44ffd81a7688d33e3fd31e18e54a5ca6a223daf201c47364f808299871ff661af97d1b7ad5322b9d18e514da1ed86d66b7c02c9caefd58259ea3f79a855115d7ea8b7decf1b2894224681af7cabf04b4bd3e63ef6e230ed0c1dc28e45bfcc4cc11539292c3c36d07ace93bc0e33907208b23f23c38c73e0401de313e4a8f92c02fe13916b70a5d251ed9f5369e459861ffac6fd5b34a9318e77b8c19598cd943856fe0479e973d23881d0eaf3ab42356fcf2e71feb7e05d5379d14c1e848aeb00c86bad6d31943325cf308530578c89cf4dd010a98da27abc7c334597f860f1925657f377efedac7e8d328a519606dd367267fdaefe7e18a3b53858f5e1ab0e8dd4295f4099d53d203965d2cc4722d4cfd76584f85b31576da986f49520b15886c307d6e44421f41ba5897bbd367e045307d43c999cd5dbf46fc544e226538cb10d6550764c05346e7e24da95f031b539e5bb31a0073dfe7869fcb6846679d59098fac53b65de1415d692e2f7214aa6afc49a502cbe9eabc59797bba9800522b9a1ae6e690bbc6c06b416b0d30e66cff1f837759e3ecccff81ac6e696c84ca3d74af7c91e70e1ad26f9df3b76ba13106da08d29594d64ef851ddb2dd2893a7e9708025977af5732fdae2e298e146a90eef11228c3d1ec0bc293636da748826a6970e14a8b8881fc6d9129ded41a45cbfcf4e5958ac869ebd22019f1067bb132be1cd0b11bd8cb1a02aa6634ddba6472e9a3b5ac98708235c7a50a2aa74e5f86eb1089d134c50c9ecf7a5efcd899aa3b916454ce68839036b00b2f64dfe3529c21d9d29eb1a707c9c497d9e5a99cdfc7cdd90091ffbe3fd1d43d0b45482a172605277752aa3d3b11e", 0x1000}, {&(0x7f0000000580)="b1b2a30e3f7ce482ad1829c2d9498602a02ed82ea3e818c47b35f68602a26e53999305660aebc6b795e4e9e1656362dbf15f45be578b9d6f690c6d2ef0689ca438287138877bd89eeab4f5dfdbae97814fb32f6d435a6d9b955802defbe28c9d951630b3330d62bd5d5fb9fa750d0c202c287406d8f02927da969b43df951f6dd51f0de9255206e3c8f24ba00641662bf7791be8e22faf96f7f0e9aa27da31b1d9c58b110f1dc8ecf78fc261e93d3f684c968a5653b45412", 0xb8}], 0x7}, 0x40091) 20:54:02 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000040)={0x6, 0x1a, 0x200, 0xafec, 0x7, 0xffff186e}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x40000, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000180)={0x8, "407a3123e90697df9c167f4ce1313ec907b62807b1309f66de4fc1b846e6d6c9"}) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)={0x4000000, 0x5, [0x99a, 0x601, 0xb3e, 0x2ed]}) [ 636.250158] MINIX-fs: mounting unchecked file system, running fsck is recommended 20:54:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x9, @fixed={[], 0x11}, 0x6}, 0xe) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)={'mangle\x00'}, &(0x7f00000000c0)=0x54) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x7fff, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) write$fb(r2, &(0x7f0000000240)="2cc6797ff5daa3d8a60003784f405e10b66493a2f381deb066", 0x19) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 636.418425] Unknown ioctl -1070311871 20:54:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r2, &(0x7f00000000c0)={0x38, 0x5, 0x21, 0x800, 0x9, 0x100, 0xad, 0xcc7, 0x10001, 0x2}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8640, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:54:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:54:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="c18f00000000000000006b00000008000100000000000008000300"/38, @ANYRES32=0x0, @ANYBLOB="27cb08abd46e1020a9dd740b339e3123708c9b9e2966a6c552dd2524af562356631368108028df9359528adfb85629c147eb858ff43d2d752096aa81d1f4b97627190c621761d0290a5ada2fcab56b420b93bb2e53edff0a8e2fbf9093a438ec"], 0x30}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000019c0)={0x18c0, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_FTM_RESPONDER={0x1158, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x98, 0x2, "06c38200e4689d7192991c1112656b2cda087712f2b98e224623bf1f931685ac128e4f18745f79274c8b0794e3117db904402e2503bd4d50160ad35af459e44b44c97a526c1b305bbf014e74a68a93717686663c428888d9d2cb514226c3231cda1bdf6a20ad3489872ce9b4b9a9f40cec84ce944fbd75a72abc6705b87776aec71087eabb93726cd7c5ac4f7dce8a617255ec0a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xae, 0x3, "6216766e404ef90d4682d84eedb13e829f11d34235fcdb7c6c6d2ca9187dd86cc2fa7e7344ae4d8345af0f18d74e9215383fab3eae6e14aa06b3026a8d1aab84bb0cb5f274178450dfa2d4c2395b0b14b8621916149a92bead48ef2a62f077fbc767669e0c4e8fa16fc29a6cb2a054b8d9490564b2aaeb81dd5276697277c53ea8f9e1f647a9bcc583796068fcbcec34f43e5920d84cd128d86149cfc4523066846d91fc9b12efd32333"}]}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf0}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3}, @NL80211_ATTR_IE_RIC={0x72c, 0xb2, "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"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x3}]}, 0x18c0}, 0x1, 0x0, 0x0, 0x24000040}, 0x4008081) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:54:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = semget$private(0x0, 0x7, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x1000]) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x1f, 0x8, 0x7, 0x4, 0x8]) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:54:03 executing program 5: open(&(0x7f00000001c0)='./file0\x00', 0x40c2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) [ 637.237081] minix_free_inode: bit 1 already cleared [ 637.362841] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 637.386781] attempt to access beyond end of device 20:54:03 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x384b326d, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000980)="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", 0x309, 0x34f9}], 0x8000, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x2000, 0x0) readlinkat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/168, 0xa8) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r3 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x473) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) r6 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000006240)=ANY=[], 0x0) io_submit(0x0, 0xa, &(0x7f00000061c0)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0xfff8, 0xffffffffffffffff, &(0x7f0000000740)="0cf4869c1105401bd750f0d0f97febdc8f81a32d29614e053a4fb0b1dbae87acd5a6f67266647a13504430a45271fb699d06f3f08bb91af8208c04c3a92a22557fb81c0c686c878484f263382bc04665059f50f683d3a241818c8de3b5f816a8a611b5cbf1f0300531a0ccd7abe8", 0x6e, 0xffffffffffffb8b8, 0x0, 0x3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000800)="cc01072e48f13f50e3c3ed510723a6269d5cd19a160cbbbbed89830fd24710eafbad07aec8d4d8202dc5bef59b43e2f771bf3f9c85628ba27b48ed066a336d0c376004bc39585560838228bd0da39e8ea9f76100ff1cebc9f3bc54a00874071bc0490acabefe306d4c435abae906d2907617f5d6acad57e95f847239aae307df21d6ff2ca696839d91c1857246ba569ea1a3fdfc16e2ae83537c629378b7ec9803358e", 0xa3, 0xfffffffffffffff7, 0x0, 0x0, r0}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x6, 0xfff, r1, &(0x7f0000003cc0)="5c529f5a806915061c966214bf8396bf594cb47fedee89a845ce745e201878c4df193d1ad27485ef1f59614a854642e919d7a6791c547150e8df852d195a46c3af843559497c646dc4b00624493c6b37efd895897dcee95147d8c264fa069319ac5fd3736ee0cba4a0ad124b219224e48d33e27400b3535308096aa872312597ddaa3b79a7e52d58d614ee4dd8fce45f256c95", 0x93, 0x1, 0x0, 0x1}, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000003d80), 0x0, 0xffff}, &(0x7f0000004ec0)={0x0, 0x0, 0x0, 0x6, 0x800, r0, &(0x7f0000003e00)="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", 0x1000, 0x8, 0x0, 0x2}, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000004f00)="da222fc5a72d8427b5e42560a74eb948ebf660c6aa244e0efa2185bf93bed470beec24f9bc2887ace7a6545c8bc06d098eebe2d2b49f15", 0x37, 0x401}, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x3, 0x169d, r3, &(0x7f0000004f80)="ac7e1931c70b54", 0x7, 0x4, 0x0, 0x2, r4}, &(0x7f0000005080)={0x0, 0x0, 0x0, 0xa, 0x7ff, r0, &(0x7f0000005000)="06c15540d3ea457a26f577dbfa95be7dc61eea60bc769396f9f2e348bef101ba5e5a53dcec5b38c44b2007f51d18653cc6f4c452c43e4177b34241d444067933dae3abc30e7faee79bf4ad", 0x4b, 0x0, 0x0, 0x1, r1}, &(0x7f0000005140)={0x0, 0x0, 0x0, 0x8, 0x20, r6, &(0x7f00000050c0)="c52b03fbeb83d40cdc93a77b692f4e4423b60831977cc47c676ea1cfbb8f59654b85c12f3d41d3e2a51f0532031c4a5b90021aebc4233e1340443645541ca8a9537d087af7f218b73a1c43c7", 0x4c, 0x10000, 0x0, 0x3}, &(0x7f0000006180)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000005180)="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", 0x1000, 0x2, 0x0, 0x2}]) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r7, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r7, r7, &(0x7f0000000480), 0xa198) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@isdn={0x22, 0xdb, 0x1f, 0xb, 0x5}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)="0a918ba47a0ba73ed8b9c6eb561057180d5c93f326f3c396946435becb101efff4f64d", 0x23}, {&(0x7f00000003c0)="3cbd750a4e40567a9a0693fbcbe5b2176efdd6ed88423e4165c56bf04a791f17575d4fc9187df1f840f0277bd0052060df8d27b364e1f08e8888eaa0492b1bc77180f64233a25002065ef6c0ac5f3ba745df14051cd3615b75ddf8ad9f4b6ba87f5e4d1061498693994ca57cd91ede541facba29ea0c285ecf75aa287057533814449b99c2efda196a7ef263e3dde84a044f4a488c", 0x95}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f00000004c0)="3ad67a9ac60fdf40d8cbb3968e6d860cddf9ca5176a2ea2a982dacf729e408ee76278781c2f5d4ab6555cdd26abcce056c78bf435b1bcb8208290f4a6dc1a7a1c8e118737cd4545d054e09ea845d83030a27d35cbebc7d2d901fcd571ad8b500d5e7dc82a446c73b00bfa3330f73dfb1d412c8d39b7ce2d478711de9706be324a4a061e3c88f35e646b1ec3f498abb741229772e206d85b2cfdd30f16cfd088cb6bf", 0xa2}, {&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000000580)="b1b2a30e3f7ce482ad1829c2d9498602a02ed82ea3e818c47b35f68602a26e53999305660aebc6b795e4e9e1656362dbf15f45be578b9d6f690c6d2ef0689ca438287138877bd89eeab4f5dfdbae97814fb32f6d435a6d9b955802defbe28c9d951630b3330d62bd5d5fb9fa750d0c202c287406d8f02927da969b43df951f6dd51f0de9255206e3c8f24ba00641662bf7791be8e22faf96f7f0e9aa27da31b1d9c58b110f1dc8ecf78fc261e93d3f684c968a5653b45412", 0xb8}], 0x7}, 0x40091) [ 637.408921] loop5: rw=2049, want=6434, limit=52 [ 637.438893] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 637.453788] attempt to access beyond end of device [ 637.466248] loop5: rw=0, want=6434, limit=52 [ 637.482101] Buffer I/O error on dev loop5, logical block 3216, async page read [ 637.487757] kauditd_printk_skb: 7 callbacks suppressed [ 637.487771] audit: type=1800 audit(1586897643.718:14675): pid=31082 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16177 res=0 [ 637.524396] attempt to access beyond end of device [ 637.535248] loop5: rw=0, want=6434, limit=52 20:54:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 637.537578] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 637.563956] Buffer I/O error on dev loop5, logical block 3216, async page read 20:54:03 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x3) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r1, r1, &(0x7f0000000480), 0xa198) dup(r0) [ 637.645418] audit: type=1804 audit(1586897643.878:14676): pid=31082 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir104419066/syzkaller.rvUCWh/507/bus" dev="sda1" ino=16164 res=1 20:54:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 637.687172] minix_free_inode: bit 1 already cleared [ 637.793012] audit: type=1800 audit(1586897644.028:14677): pid=31108 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16242 res=0 20:54:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x80000, 0xfffffffd) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r3, &(0x7f0000000080)={0x38, 0x6, 0x10000001, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x68bd, 0xfffffffd}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 637.839741] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 637.889307] attempt to access beyond end of device [ 637.906215] loop5: rw=2049, want=6434, limit=52 [ 637.922858] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 637.935669] attempt to access beyond end of device [ 637.942998] loop5: rw=0, want=6434, limit=52 [ 637.948740] Buffer I/O error on dev loop5, logical block 3216, async page read [ 637.963959] attempt to access beyond end of device [ 637.970885] loop5: rw=0, want=6434, limit=52 [ 637.977652] Buffer I/O error on dev loop5, logical block 3216, async page read [ 638.047216] minix_free_inode: bit 1 already cleared [ 638.446974] minix_free_inode: bit 1 already cleared 20:54:05 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:54:05 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000000)=[{&(0x7f00000004c0)="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", 0x1000, 0x4}, {&(0x7f00000001c0)="dde5e0723842c041b6cea26de922df0b6b11ebc6b114ebeea4424f93ddf6f83ea6de796b67c55932017dda3d326a99adf770b2a17b1489d521c4ce8489b83954395882ed31c730dd74b62517d3591b0010d9f1fd8dd38125cbcd9bcd435109da4e53baef75c3ba27ec3a5e42c483274db2e9dcde5ddc3e5a", 0x78, 0x9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0x1000000000a198) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc190}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x11a, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]}) 20:54:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={@ipv4, 0x0, r4}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x114, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x270a}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x9, 0xf9, 0x1, 0x9}, {0x7b, 0x6, 0x6, 0x9}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x50c}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf8}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x1, 0x5858) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:54:05 executing program 4: open(&(0x7f00000001c0)='./file0\x00', 0x40c2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:54:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)) r1 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) r2 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x473) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x8000000000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x140d, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 20:54:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 639.273618] audit: type=1800 audit(1586897645.508:14678): pid=31162 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16449 res=0 [ 639.298476] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. [ 639.314606] ip6t_REJECT: ECHOREPLY is not supported. [ 639.315583] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 639.328147] ip6t_REJECT: ECHOREPLY is not supported. [ 639.361900] audit: type=1800 audit(1586897645.508:14679): pid=31166 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16529 res=0 20:54:05 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x5) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) linkat(r2, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) [ 639.555752] attempt to access beyond end of device [ 639.560914] loop4: rw=2049, want=6434, limit=52 [ 639.579200] Buffer I/O error on dev loop4, logical block 3216, lost async page write [ 639.616084] audit: type=1804 audit(1586897645.788:14680): pid=31186 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/451/bus" dev="sda1" ino=16530 res=1 [ 639.642168] attempt to access beyond end of device [ 639.661664] loop4: rw=0, want=6434, limit=52 20:54:05 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) [ 639.697163] Buffer I/O error on dev loop4, logical block 3216, async page read [ 639.700874] audit: type=1804 audit(1586897645.908:14681): pid=31199 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir689926280/syzkaller.BgL1Ld/465/bus" dev="sda1" ino=16532 res=1 [ 639.746870] minix_free_inode: bit 1 already cleared [ 639.769534] audit: type=1804 audit(1586897646.008:14682): pid=31199 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir689926280/syzkaller.BgL1Ld/465/bus" dev="sda1" ino=16532 res=1 20:54:06 executing program 2: gettid() r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) r1 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0xfd2, 0x7, 0x4, 0x0, 0x7, {0x77359400}, {0x2, 0x1, 0x27, 0x0, 0x1, 0x9a, "a706cd13"}, 0x2e2f, 0x1, @offset=0x7, 0x9, 0x0, r1}) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000200)) flistxattr(r2, &(0x7f0000000140)=""/80, 0x50) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x1, 0x0, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008) r4 = getpgid(r3) tkill(r4, 0x36) 20:54:06 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x384b326d, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000980)="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", 0x309, 0x34f9}], 0x8000, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x2000, 0x0) readlinkat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/168, 0xa8) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r3 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x473) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) r6 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000006240)=ANY=[], 0x0) io_submit(0x0, 0xa, &(0x7f00000061c0)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0xfff8, 0xffffffffffffffff, &(0x7f0000000740)="0cf4869c1105401bd750f0d0f97febdc8f81a32d29614e053a4fb0b1dbae87acd5a6f67266647a13504430a45271fb699d06f3f08bb91af8208c04c3a92a22557fb81c0c686c878484f263382bc04665059f50f683d3a241818c8de3b5f816a8a611b5cbf1f0300531a0ccd7abe8", 0x6e, 0xffffffffffffb8b8, 0x0, 0x3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000800)="cc01072e48f13f50e3c3ed510723a6269d5cd19a160cbbbbed89830fd24710eafbad07aec8d4d8202dc5bef59b43e2f771bf3f9c85628ba27b48ed066a336d0c376004bc39585560838228bd0da39e8ea9f76100ff1cebc9f3bc54a00874071bc0490acabefe306d4c435abae906d2907617f5d6acad57e95f847239aae307df21d6ff2ca696839d91c1857246ba569ea1a3fdfc16e2ae83537c629378b7ec9803358e", 0xa3, 0xfffffffffffffff7, 0x0, 0x0, r0}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x6, 0xfff, r1, &(0x7f0000003cc0)="5c529f5a806915061c966214bf8396bf594cb47fedee89a845ce745e201878c4df193d1ad27485ef1f59614a854642e919d7a6791c547150e8df852d195a46c3af843559497c646dc4b00624493c6b37efd895897dcee95147d8c264fa069319ac5fd3736ee0cba4a0ad124b219224e48d33e27400b3535308096aa872312597ddaa3b79a7e52d58d614ee4dd8fce45f256c95", 0x93, 0x1, 0x0, 0x1}, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000003d80), 0x0, 0xffff}, &(0x7f0000004ec0)={0x0, 0x0, 0x0, 0x6, 0x800, r0, &(0x7f0000003e00)="2733e4c467303b1823619602efcdb583562e2d32b55ebe1c383a6f583bfa46042ede1250df93584c2166f4407bfabf1d90b1f8156778620920dc2d0882afaf9d24a562395d3bd7907e4a9b90d4d62d17626da7ec3e2dc1deb8faaa72d47b8f810a13a5ff050079395f3b3d862cba1f0b53aa8ddab838279774da6e65db56b43fc5f93ab9af97ebb9ba058bf5950ebc2efc36742c1aacc99462f1eac4cd6c4af22bfe2b03cb1172249049681c03c20883a6fc66b3c3a6d6f287fc59ec17b4cbd3ca1359e7ec786d6733f9832af2f5e839e4c77374da7086b10d90340652a71d3506a1b734e4a2ed7b071ddca8d0170399258fd7d9b2fe406d18933eedeac414070f3288527c8acc90940c324c3906492b490562f3ea7bc5a547ae37d8265f6e2b6561e2617f243085b2e33a862351d4ac5f011f15febaa98f00e007d8d8757c30e0520cb385555237740be95ad2ff5da5b88547f1ec12c2ccfc9dd1234e973cff7abae1efac0acacb17962d160ebdb3e210e6fc4459b7bc2e7363e9bada62351b22c9ef40a8b8234e92c1bc38be9dc219b59459f5041bf8ffb5fb1ea30f610d4629fe56d5f9c2c43c8a656be602120a6e19fabf40f3937c23aebc434b6fcad83286237dfe530d8168c83287611054d97d062222dc8c5cea5c27ee2ae1a9adbd31defae7063752d13f9ef1ad65fbee6b24e0dec2e45e2a0c98d4cfc4ff92024de9d00964159ae557b2486632662fed221f06128a5974f9fb38d1615336972ab03639879e2fe6400a85ba411e587d44715466428a26e7aa08aa48bb04b8fd04aa579d9f64b0025682112637550a63cb123152aa280a76ef3c0047900eac2ecf4084d89c4aae21282ae52d93a0c1f0041a932ea7ec974e6b26030587ee681054c2e1c02236dbd7b103de9568a365b49a80c5cd1ade57b90bc2432ac0ca3ee76d3ae6be18cdb631dcab764a508bf3793c796fb3d1eb9402baa17c3735d8406291941582bef9c4406ccddc5feb436f058fd52cdc14fe35367ba5f642379763b7c5939f7740dbd2747716a462b2e4c0f065dcba67532601b201e6343089b57ad146e196230be28ef6d04e9de13cecc8c29a86f4e537bc27bc70d7dfaea1534a1bfbc0ed3260fa76d2e1602f32548c452b806495fdadfc79a06cf21816ef4771009a7a78f61d766fc8d5260fc82564d4cf009ecfe6747817af42c39ba4652540cf77d22163dafca5944380d00d7add47b278fb89893a8f3529e7cd7294656bc7205f3080f510096bbc7ef0d8e63f0d12bae40121e3e0373595814004be9d417cda31ca6017d9ce64ac0b42364f141a9c3e4513f36c0609bac8f3a8a8141b74da8ab63cf32995c1979fcc85b813644be7fd1574a5fb7e02527cfd9b403f49a51dd23aabf8f6cb55a6ee59c938b7ff6f560079de4833d036dfed6c77cc9f8055f321fdab06b8bd2820c3763d719a9c6fb78ddcb4fa90e24cd52273f4fd5a25885c929bcd0c18633510343dd9a0123603649ef578c60f553d86d3bd3d871d5c3635f3e8b1428fe4b434cb72ab9009c35443606bbf5a56b802d49ad56efadf8d24f7d71dea6fd94a8a12fd07f50b02d7cc542df296d934ed34719e907c513260b1747263ae3411286a7575346d88b3b3bde80b92b396c27f36f116c4293994eaf70b17643c9fc047903a8b1892673c14a8a447ed631c0a40e44554e90b8ac75dc1486c7ec9ec90b6b42be3f3d9d63bb4dc64dea5496a9a162c0f03c5d08a4001cd5b3cc0f635c73259da047fdc30a9e3ae5ab852007812d5220eb2b19df4f8813e57c43b609d60018767bc98e3c11d2b74cf309a6d5fd8a3522bda65f375a672dcd14922f136b989a78c42ef4f53e99e948deb68c8a92016986c8bd9331cd7a999ba2a3295ef07eb27b1fdea61a03a021c269bd0a21995b6e56635b2a7dc1abe3e258a4101e2653947f9a5e9735037cb55e7915d11d0a796714683d4e6a4ad5521e84feedfc93a2e640752ffbfaea6bea6dcf5d6f8abe20ea10be2684c8377fb24bd83860aa9b439efffc63cd4f25ef8bfc70cb5332213385e407d4eb337cc6155771c1a0fc6f707e57888d4ba1804a4a574c16808532720ebde12b0656d3ba77bfdc40e253e7ba481e88ef39eb6c94e1387403de1da15ff67ee5c45849bceea5f898c82b31852e13acf19f4e7ec09121e7c9cd82fcda36abc505b6441f7dd9105fe856c8e96f4993bf1f8601e06d9f15adae7bdc7edb5bcdc238add308f9c8ebb67c89760be7475bd87c65512ea1b47009a34087ac9c03ecb141d75b6012090f53e2447d65bd6bed6a9dd732341798a76cb013f3c92c5b10e6a6c99e6cd75bf27e8825e692a33dda6a6835c75f8dab0bac0ddc8b5ef1e77b438c59086dd0bdcf49ac5a719889096426d7e8ef95647cc3f852942e06162b60e89d53536b37f83ef96e4f6250d6d9e4b5b47725ab50f98b58269b3f343b42c7884090426ec79b51918d76f9d197b9296611380391821f990878f77a5e8beb29598adb72d32a1c1592aec7cdca121a639f306efacc0b0768fa677ef9fbe5836268eb8247eae4aca5b8bfa66c4bf8458959f43353b7dacbaf6e4a3cfd629ac21a93eb7c8eb5e08a74d969bdef28f200e97e1a3660ed9734be974b9c90f739397836f38644a0a6c599ec4d695a5dbcb48a587ad0137d32c956025d991a6afff29eab10fd1e8c9b4565bbfedf376f51c6d3e5159bcedcf6b0a4d13514a088a40cc4a3280b6784ca2746be4f273b7bcda4628b2222630c1df28038f6a68c0af3e76fd771f256a131485f2c9c62b25469aaab0b47348856e7ed46a81f3f6c7cca3dee4cf302e16080b31800570497c2d721834cb83c8b3ccab1f920eeed01b7f281c9d78ca6003b11446b7130d9a215922adb15cd481aa8c2b608866e0209ff0da80e6b642ba26792105edabc086b697c53eafae63733d8353f03e1df303baebdf6f36a850a9a3762427b7baf3c90d52cd2e0a3732557fb5ac1c2f8dd37cb8078f88fdf3262701dcc3d3d576f66ce16254cd679d632051531d8bd53b9c05624946879801ebeef814653293e69268289b483a1ae3112dd8c2ba0e31427db5e12bb2f991c92e8a4c8a5e277116aab1097c00fd54108892a19494a30ea0ec6d3c78faa55a4627d9285151d56727d641c4966d141fdaea4266e39d8b50f40902bdebf8a9141c4e5916fa2ea6bdede05d20faa94a85682ba627f1b8c5f15ecd26389ba52650f95c0aa6bea89fb958b60759ac166a891b06c3b64a7d53cbe056eefb8410303787910b35290f1bf76c5c062d0c8e26dc2e299d6f3611d788575eb4ca6ac43ec2b8b3895fb7386c08168d901d357d75d14a288ac1c470b5af473298b1cc0463c7b7ee6088217606471b0aaf1edaadc97b04e2d2e8b252527a4c66962b3a997b5c20c2e2cf9b1e7916d0a261c4e6a1dc27dc36276ba4cf5b1637b56991d5bcf179d2abfd8be06908a4cc206f44013949da342f3d63bfd6489b2bdfba259c14846c8c75d29d0eed3267e435924907c0a02c08475ead55e6b2fb40b97df0c3bf58c62fabd30c1b3af94a3ee77ff8da5837fa6ed83b2981047bb90e38e8e860c6f37d051ea4f2c96624a9e4d185e212e1cdd973208dcc86e6ab2e24c076b6972213e1a94071d6cbd06f1d910b7c34962ec0e5aacf1779b4fe7a9ceb6223d2d1eb72f50c5c3fa57b6792dcf9a1dbe23c83f80a468166550ad6ca7bf6e6a81045521bed9baa2c3bd60a27c9bde153f1d37ab6c09b3999ecb481ff6c283ba99ff85a947fbebe094b0ab740fe3ad31c2df078482abf93ff65228b5d960ad35c4da356d8857885d99d90cc87160900c3bb5f04c728ab282bb238fd98967848d977d38a373d005c31192792abbe9298c01c7a6a7c21d0adc626bb99c36e04e998db8f8f59a218f63f7312877a988da8e21838fdda3bd85c8495c72a6b3bc7f3c9aaaad3e90029f825c688a9769264c04165e95e1a040598c038866c74c496510efdddb83c14004d48df1e5b4ed30565840d24ac42edcceca755735620642694c9672d3f43dc3304e512a85abc677d49831e7c1b70da21b283315e4059f1aa1fda768763d4f266512825feaa902231fe3f5426afdc37f45f6177b929d5071fabdcd80104b23d52a66fc2fbcf796bc92e69b62e1f36c3a95b2e3f5de140985def9e86f12f3b01dd48f3b69d8e9373249af091cb192822ad02479d0e457cce48a2b28fbfc2cb7f170bb04c293f45b3a02866b3259c063b1fd345e36c7a0cf82428c3fbb5f5c69ce3b27c614434b0941065ae7e7d6bb636d83f62e4436e9eb24df63ab7d52a76ace7d5e765fecfcf375c3737cae4f3ad1e30665be49cd044a1711ee5de7a6ecba779d735ce26b9d459fa289a15bd7ee4445b5ffa9dc5d0578e8d825648cc7c7271999ff8c38f6da15e4ba58ca3bf643ab1b56f2e67172314caa06632e3e5709976f9c5a54d9782e93ec32f02ed58553c4712f31dae0caad8b4e3a7b5d7773991857865352c47294667139be07307c2e95c0d692023c1766c64ceed013aa1a114431fe900a9a7f0be393a38d2da0aea398183449dfe8d680a8a5acdab35e3e607c4ccda3d1da8350f39b09c94860a768266b8b1f865ce28ac6def4ac85f0db91cc4fa291f4f9bad7847cb4155b474fe20852fe3189eeda1cbba676db352d555f02fbbb2ddf2b0ca84a8b311b199bc9d5322d4128820629765477f35ae0b551c31ae7b62808277478fd739323b5f48f68f9b5540fdf168ea28d94392042aa51720fc3b9bd30c254068e4376f9b8e45a7b74acd1d34c0edfaa8695115503677a96464a9db35b6108db6788ae2cb1b4200759e0fbafe2cba0c477f8fd12cdfa594693d945bd33b0a5a7dde1a68b4d984b9275d7220bba982688d6dfbdc030db34a9f1d61f27bc87d7ddde9ad510b7d56127c35f6a31a5ee901e2685914af5a3ededca0d2ab699ca81d8b3b889921d1e5c01dfb232e51f7477d3d2ee58d74968bbcb3d50d2774f3344794759b5801f67e447cc51f28687d30dc46d53769c747e3affffdce229ab52d8115f05558ff7e6bfe779e310350eb382c99cd4a65a1715c871c6b2e855eb160a74a066fe5e9d3a85b575082c046edfc843fb3fffc2df1550f92734ed1a24225187e393ff21182955c4df83c9d80177bc3f2b5db712771b9bc539e20b5833390bc3105a089e0352a25c794cb04bfd186552e27966fc046890da8ef75458825e68f6641a82ae7ea5e89d9c59d8ff9990b61e90a6070b08156f62ac1fc6be34a1624c6d9138780c272edfb558c8f5a92ec92487e4fdf35f1eeef8976fb9cf1b1e1d33fa5975b0107b07b26ee94ef59754680d26ee33d71980b76459561595a99208ee550cac6007b587519c03e2e4b3569a0ac63639d93a39792879cae1fd2106def15800e0a44d2311d3182426c20281e380b6fbd008ee36472c244796f21f82147664969deecabe8deeed41c26ea2dda0c153a513745f68dc51f527aa10fe19b75cc0bf555b0a1ef7595c25766708fe4f1d2e6a6f244e6d7868b09ab199030e2006ba6c78d0be30e0ddf28b1a8d6e5caf503b13b4f9535525bd343f74b873719152c6859d1cf093c19a8fd2f7336f00f0e69aad3ad548c017e861561719c1ed97346207afcfff6280d41f7df312bd045bf8d18ee63bef76cd652a530c1466a20a20ad2601bfb77f1638d9830fac8acbe2853cf76c43ba69c19b9bb4a672b63cfc35fecd79817f55232d3b7b51c02dd01adfbe02dcdd4b3c6f7927ab3baf7c9b3478a5ab56e1be9b6", 0x1000, 0x8, 0x0, 0x2}, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000004f00)="da222fc5a72d8427b5e42560a74eb948ebf660c6aa244e0efa2185bf93bed470beec24f9bc2887ace7a6545c8bc06d098eebe2d2b49f15", 0x37, 0x401}, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x3, 0x169d, r3, &(0x7f0000004f80)="ac7e1931c70b54", 0x7, 0x4, 0x0, 0x2, r4}, &(0x7f0000005080)={0x0, 0x0, 0x0, 0xa, 0x7ff, r0, &(0x7f0000005000)="06c15540d3ea457a26f577dbfa95be7dc61eea60bc769396f9f2e348bef101ba5e5a53dcec5b38c44b2007f51d18653cc6f4c452c43e4177b34241d444067933dae3abc30e7faee79bf4ad", 0x4b, 0x0, 0x0, 0x1, r1}, &(0x7f0000005140)={0x0, 0x0, 0x0, 0x8, 0x20, r6, &(0x7f00000050c0)="c52b03fbeb83d40cdc93a77b692f4e4423b60831977cc47c676ea1cfbb8f59654b85c12f3d41d3e2a51f0532031c4a5b90021aebc4233e1340443645541ca8a9537d087af7f218b73a1c43c7", 0x4c, 0x10000, 0x0, 0x3}, &(0x7f0000006180)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000005180)="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", 0x1000, 0x2, 0x0, 0x2}]) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r7, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r7, r7, &(0x7f0000000480), 0xa198) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@isdn={0x22, 0xdb, 0x1f, 0xb, 0x5}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)="0a918ba47a0ba73ed8b9c6eb561057180d5c93f326f3c396946435becb101efff4f64d", 0x23}, {&(0x7f00000003c0)="3cbd750a4e40567a9a0693fbcbe5b2176efdd6ed88423e4165c56bf04a791f17575d4fc9187df1f840f0277bd0052060df8d27b364e1f08e8888eaa0492b1bc77180f64233a25002065ef6c0ac5f3ba745df14051cd3615b75ddf8ad9f4b6ba87f5e4d1061498693994ca57cd91ede541facba29ea0c285ecf75aa287057533814449b99c2efda196a7ef263e3dde84a044f4a488c", 0x95}, {&(0x7f0000000cc0)="792ce1c4d5de89edd2200d7d32494901231799cdf4c913d0075dfdfc493523bed612d1589fe84422a512f2a98bd0cfcd90c2a5dc11d2cae531171775aede3aea26f970830668e47f78d21ec0b7c3abda08fcfdaa693342be05a833b497ee9cadfab8819779bf9787d6f1f2ba33d661b9ac2b4a1d7f51e64c8244be8ca96e3a150d194baf3dd5af28f9000ac25390c1ca18f48ff932164161fb8e53480a21e5d5156818b77ac76f8ceabf0f208fca920788d39e9ac021d5e2b58b53ca9569e1caacc16e319fb8031991971087991d5119b18912fc2cb10b251bf54f9dd7bc8a0914650536632f956b54800b69037ac6d150c86439145ed96dc843a8c01e4c2f653e90b4ab4126f0d5a5fedaa788eb1f79bc837ed1b39e71e5fa52672b381218c71ba1489f691752d101e82842281ff731978c4a10857fa912061a791cd91e336b895ea54eed0ece6dda79f73f271d139468e9e72005b937b1599affe91a856310776ed372d714203dedd13a269cd02c679a4e9e06061b808f24de75c36a4abb789c3e1bb6bad17960a12cef04b1fbb2530145663a0687a3511eb69ec1dda8c2d2ed23851a9ead21e99fd347193461323ced22c5acaba0ba32227f2445de5adbb0067dcaeb6795b712a02b96a20bece37bd140bd3a1652d07217678499cad85eb7de1d795d754cc963836bbe671ac8b5caf93ce1d53c849074f97c33704bf3084f593b68ae642f264beebe86dc636f4f36c33550600b7dce35b5b904f77bea469456b4301d1d1e46f1434762c875bfa6b114c11e22bd486c717ebc11124e507dc7a742b4bb67d8b7bd56a2b43b0cb4379ee97bc1882cd559d2bd24c1831bdee18dc14aaebcff8ea60ad26618323263878728103cc83beae5279aeace845cc08f03796ca73eee4b3d26a1168701933a174b3a421b2c8984b6ab78b9a29ee3ece5d84c72c96ca2eb061b243d7655858882cacfeacdef4de16b2791d388df07d00e2cf56fba3e6c432891231439571b401387dc519b493c4ee239575fb73f104602f1941cf0fb0fc67ac972212ad8298ba277ab6d16ac73b7aec4f1d6b3c989ff9dcb3212f35c9cab107b34089cc33adefa9022f7d529d03a12dbd642891b454439fcf83166f0190e9660cdc6419d14cc03f71d68b05dce284461e692e43985ffc8ba1719f8815153b3c1f28925148d1422ce8f0b7bc91a40467f01fe63d2883b19752e9e2703af1cabfed197cc496e3a589e103f1b615a7073a15c399250444b2ba22970b0a6e08ebce70fc22cf6a354f1278fc47c2cbd975d44401b32611fc6a6a1aae090093b57f290256ff9c9bcf6804ec23492ce25d99c60b6232691dbe999fa39a25da4036d1e58f8cbf925af3437a97a9375c159ecd24c6f99d7a4a2d7b8b0c6f707551bb6ae83664664693ac3990437fb56f682b318987f10e30780ec5e909a3188b45995a04e9839efe72abb3c8beef8bf9ffd57dd32fa594e7a1d158e010eece33dbf874db3076ce4950828c00a3cb66c7d42e980aec851600b767383e11496c526aa978cc8cca4fafe013bcac2f6f9ef3406e1c7ad3d25f9710895647b09f8b9e0f8408c353e87dac641d872dcaa7eff32807d5261b8d58e4733b5ceae52415c3880a062b7e8be02080feafc3f6447936dee4cff3aa321d57a47211b9869447fe4057455b4e6f5573e155764901d6b69bcdf942aafb5e6f214a89d83429871f0925dcce46fc6ce5558f56270c10b766b998fe995b843c75056e63f37b11521d1640c97137462f79a6bdeb922f3f2e22490dad162273d08e447551f9be6760067f8e189ce3cd5f666689003b62d7a6820d696c4bc31212018f7b839e832fba9362be225e8014733b16abb319d6b52a936208ba1c1a412beabf5db0a1a55262db17c43bcb3f3cff2298a9719ea2f4f2b4339dd585c7e9e806e84fe9f06fdd5ea558bdf165cfcb6dae8344f03268673df22891b0b1c6277c8a3200b7bd46a0e116f184117de1f28f973a21337adeb17029e2b61c402484acdf78807d8a414595cc9e4c0a20ef1c3c836628f69efaba4e50d9a244cf456b34ac7e07a2ecc932e456e18d98a93fc468130614f003c9481b3d24b03d16d40a9591e9aa320059932bb1c4b274bd0a47b6fbef3aad766c776924e8ffc6adb54909558ba31845acdd483eb60e8cc62879636d2a03ed66d5e1a09cf8dd27ee98460fc87415229fdefd0d70d2443b41db5fd1b46c82bf0e263c5706a9018b571579a1fd7534173e263625afe51d63a2527ea7628e6b8750e51507d24342f5b553303b2faa976f5a98561d8e09ccf7ea6f4b78e6898403b2bf5f5948952e3bd49575604550649dd043473571ce11069be23cf5c5dac49cb8511217a8eb202c2c5a6718805ea169719c282dd2849c2ed8dcfed44ccf9c3d19a9b0d4890cfc6884f4c17bd3a3ef8f3e5f8a45dc606dbb18133de8e1009b8ed0b77112d78ef962bec4bd1d5c864161daf8ed5deeb53ec658856feab612e84a05f69e1c5280b98278573c650ea0514c570d00bf6765403511ec249e7d46d11961478383d40caf4127b176e894b7a3ec21806cf0b9b2c59b6eeb052b6557ca4c3ea08663b719c0dd86d607c4d712c0763a1f78497d577272b29d44e358ab60c6467d54587ead8233961622fcebe7d05545b8551b87606befd982b29691b8aad2c2224ed81ae76618cafc815d08520d1286d269e2bbf6b77cbbe908b076e1038e64857ddaa77a882d20dd0e27b5139b76321ac3ed2f7d26fb5b594999a129c0300c669edc61706a11f6b2b4f5bc9cb98cacf708563d470e62385062600f189411f7a59d7c6e7e211f714f9fb82ae1c848c581a888146b906744a14454578dc9cc309c69174094c18eeaed223f634690729b5b8c6aaa9e9ada618493cfdb37a6f037114b519909ba0f8a8d20c10c74f9cde2943bda7551955870ec2999eea9a7b7a5699b9a2569ffdc6f6970a7150f89da95d1dc3828798e7dd7de8d03a411c046e2a188ad326d1e1027fb969a6efbc3a67313b5831e7d3a485c0f898016ffc5373b2768e20454984a782f827b1ab6db4aa1cf2fcfba6f22b7e41ade35b98b110b38b339708bcd821e92359b0635aaf831a4aabb1dcfc4ee3a7f9f8470a6109aec5b5712a6207262ec5e8b94693448991ac862841cd63e684481323bab7f40907c3bfc4050fb5b72d2f7adb0a7b073b674653eeb0f4a7f84bcf1ae355582ef8e80a9d79951734497ccb1bbb9c4a2f8e74b5858ca4babdcc3aa5be9b17f0eff83ba2c5c301567a7071fdf33006763bab6e55fc15727c1f6b4c222b86601d1a803ca8553b703596eb4441d2e098620301b72b082b78a4f54204861cf5436ca0d599fc133ee2ec8e1fbf6c514439ba4055e2743e360e00272a2200c5c9a13d1401534fdf697899fcdce6209d2e81e47cadbe6c7981812a4d9e007258d4af7c2e4f309fb3832e6d97b4cb99debefb5588a015b2ab10cb6c7fe3034bbd728e3a196713ebef90339cb41f87440a28c70587675e0a4b0629a068c524c7f01223611ef1b6b4d073a9ef44c472341029f340d8c53175e95ef0c57b2d83ecc005e2798b3f21b09e3199289d2aca58a0fc5fa791e55b09b7db4b8ce9a3ff315fb456afe6338e3a1e7352bbc05eeba5d10df7e0bb87c20a124a26d5c76093f6041930f8ff7dcae9aed3db5a5e3063601b27090e399e0c94c3debdb7ef9d608f551826103f9fc5c1f1999f81f10d31b25940eb77d5a7fe4fb5dae98cd53cc6d8b68d41ec35af595389f44f9f9bc722cbd2d1da698cb1df7d929d11ceb35163f4e337cd6c7ef82714063324d7c94b65f60a6346ff75cbf98ebc7706b5057f924882aff83d718c0f3fca35e3f13d61e6830526197ef654ce442748c11b7059a5473ca32a3602dbdb1080d9276fe9ed6ca6bf18c3cecfd39cd3a7cc6f50e17043b4e2f4858cf2e879bca88067ac9d9c16a74670683c280f5a6b5c500d957780d2c450e706c1b140ab107ae13e52b31868e8eba6489b3878df14625f41b5a145a6ffc98bc5ebe9c24a82ce175adb8df5900dd20e94383367c41ed75fc88352a9007e44707f370721a9aa0e58f5f1016b687b4bf262559eb3554b4e96545d4d2bb2ef4e7130da6f114ac312b73063fc473ab908bc037d98a3045569fc716e0ae7e94e5132eef4e9c95935b803d2a8baf79336d57b99d16d362330407ed8191aced281ec4dcfe7d50fc80dcc9f6394d5c5ece38dbb6a399353014d75d9360b1c6061ab4ca6642e7f49a3aeae9fe2bef7567a4376be87a6e4c04755920104750de95fc57b6f95f21e00724f56d53a0605ac092172dd4a0d2d079b25cc74ece68fa0e7d319d4ab82a43cfa4afc8fecc2b4fec5dcec17ed8e280f4af617a482a618d7df59fa0e08668cef2cb0880c4f867a1479b728bdcb9db11b3834e1bedcd50811e15113b4871f785517634f708865ad1d02a07aa317111d622a608659e5df95009cc82fa1a148892dee73bea15114bc38d183fd4652ec62321b5c0e398cf8c4903e3ed239b503fb628cb3294456cf9e6e4705755b412793f65e1c1376bac1451a87e84efb8cd87133f714cae0ffc9264b802bc2d7c5a48fd45e7ee7b62b39d09b9da270cea89fe9eca78b42c478d1d33f2b347c260ff1df5ec6354cc06e95105b4a5e7a432a059e0cd54d88b6d8cec072e06a28c26e0bbd188e2fc65c8b3f8597f58bd16b1abc9a3c47665bb0662a487624ecfa3352a1d672802193bdab5c1c5946017f174eef69041fcad03f136c93847e9f71beddd73929c2d37df75d30f6bdc85babad4abd862bd8e1b4486a79711fb828c27cf1b02ed2c173b35d06ffe57fe153878164c952c873a542c4ac98f8fee8886e783cdac0684151d3ff57f35963379a0ec2323bafacb5ea7468151aed559e104d6771e86bbf816413f1c8a9799eec8b76f59348493ca06c750968bc2cae96d2dbb1512a8cc67e46ab1e3d4df5d93acf9cf3b235b6d9987135181928800b54a65f744c4042ed421087b33383b9bd8e7d666b1af9ba38937f381f68288da39220da1414983bc13c16cb60cff29c92f4cdb7f7a9431a86255bce2af06005717a82473ba4ad109c8abc3f91bc828aa92170935e61d1ea79212fc1757ba2b3979cbcc006bd32b0b159b2cbd4b42156f34af90e07b0fcd8ac7818a8b7fe62ddffdf3b39f6bb77c52151a455a12ffa1a59f2d2fd6dfe95ec291dbd03a020bafeab5cce6b75108dd89cbf8b4ac46bc570d758e39677dec9c9ec19ca5e2285d108d31a6057da60e457e7e196a8513e1e2bcfa6b1c4d586e93d8223d0d59b5775c77c3f672f8e07b0ab739d26c65ae9febcc976c6737cf9da577a3a3ce7fc33f985c65c3816eedf1468d136a6aac210deb8be4927df147847a3cfa16c55de83d1f100c203d8a892adef1855a7f6f3e0ae43148ce11c66ed85cb33d607f6cb2af63d1dbeb6a57d9c381779040d11fa63c1fba314eb51f0da8d9ab727cc81b7638fc1b5dd9e97a3504030b1af6def300a8cfefef51700ea0c5c3e86fee168a4a27493365e72bb7d126e1466dc3f7434f784fad28bb0a653b256b40c88ad55bbcb77703e46ec05500ed5086d4bb17aaefd3c1444acdbe5b9647992f7678fca5d30ff4aee77caa2744e18f28cc097c2bb537c8fd02ec60ea198e7102fc895de13cbaf3de3f7682eb685b5bcfef6d62edb9a3df5a8cfc7e8945759791f19dfeb73f3e1fca551e53eb057ba4399cb0d3c3ef08d5cbd606bfa482a8fc11dbbab0fbfdcfd3357cf968e51fce4072434b45d1d", 0x1000}, {&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f00000004c0)="3ad67a9ac60fdf40d8cbb3968e6d860cddf9ca5176a2ea2a982dacf729e408ee76278781c2f5d4ab6555cdd26abcce056c78bf435b1bcb8208290f4a6dc1a7a1c8e118737cd4545d054e09ea845d83030a27d35cbebc7d2d901fcd571ad8b500d5e7dc82a446c73b00bfa3330f73dfb1d412c8d39b7ce2d478711de9706be324a4a061e3c88f35e646b1ec3f498abb741229772e206d85b2cfdd30f16cfd088cb6bf", 0xa2}, {&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000000580)="b1b2a30e3f7ce482ad1829c2d9498602a02ed82ea3e818c47b35f68602a26e53999305660aebc6b795e4e9e1656362dbf15f45be578b9d6f690c6d2ef0689ca438287138877bd89eeab4f5dfdbae97814fb32f6d435a6d9b955802defbe28c9d951630b3330d62bd5d5fb9fa750d0c202c287406d8f02927da969b43df951f6dd51f0de9255206e3c8f24ba00641662bf7791be8e22faf96f7f0e9aa27da31b1d9c58b110f1dc8ecf78fc261e93d3f684c968a5653b45412", 0xb8}], 0x7}, 0x40091) 20:54:06 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) lookup_dcookie(0x101, &(0x7f0000000140)=""/148, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 639.981163] ip6t_REJECT: ECHOREPLY is not supported. [ 639.994343] audit: type=1804 audit(1586897646.228:14683): pid=31221 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir970422014/syzkaller.8DO5Te/594/bus" dev="sda1" ino=16465 res=1 20:54:06 executing program 2: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) tkill(0x0, 0x17) [ 640.046412] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 640.088139] audit: type=1800 audit(1586897646.268:14684): pid=31223 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16451 res=0 20:54:06 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x80) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0xffffffffffffff39, 0x0, 0x1}, 0x10) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) sendto$netrom(r2, &(0x7f00000001c0)="5acaf0b60ca2918eef59d766d1b8e5c5d86350779174bc60557e1052a746e7f42612f85f57640ae7f0c479afe4e6da43f6e56f0b0b7d081a8a85d8db66d428cddf084846d7d37a1c9c24a0f6cfc133da4939b31d7c32", 0x56, 0x10, &(0x7f0000000240)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x10) sendfile(r1, r1, &(0x7f0000000480), 0xa198) socket$inet_udplite(0x2, 0x2, 0x88) 20:54:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 640.205490] ip6t_REJECT: ECHOREPLY is not supported. [ 640.288792] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 640.525697] attempt to access beyond end of device 20:54:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x2, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x1, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 640.549018] loop5: rw=2049, want=6434, limit=52 20:54:06 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x254881, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000200000000000000000700000004000180"], 0x3}, 0x1, 0x0, 0x0, 0x8808}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x28000}, 0x20008881) [ 640.572789] Buffer I/O error on dev loop5, logical block 3216, lost async page write 20:54:06 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) mount(&(0x7f00000001c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='f2fs\x00', 0x1a004, &(0x7f0000000280)='minix\x00') sendfile(0xffffffffffffffff, r0, &(0x7f00000002c0)=0x6542, 0x1) sendfile(r0, r0, &(0x7f0000000480), 0xa198) [ 640.746733] minix_free_inode: bit 1 already cleared 20:54:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000340)={0x2, 0x9, 0x4, 0xc5, 0x6, 0x20, 0x7}, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = getpid() sched_setattr(r4, &(0x7f0000000140)={0x38, 0x2, 0x1000005a, 0x40, 0x6, 0x80000000, 0xffff, 0x8, 0x7fff, 0x3}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x8, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8041) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 640.919467] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 640.950179] attempt to access beyond end of device 20:54:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000180)='ip6_vti0\x00') write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 640.964756] loop5: rw=2049, want=6434, limit=52 20:54:07 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000000)=[{&(0x7f00000004c0)="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", 0x1000, 0x4}, {&(0x7f00000001c0)="dde5e0723842c041b6cea26de922df0b6b11ebc6b114ebeea4424f93ddf6f83ea6de796b67c55932017dda3d326a99adf770b2a17b1489d521c4ce8489b83954395882ed31c730dd74b62517d3591b0010d9f1fd8dd38125cbcd9bcd435109da4e53baef75c3ba27ec3a5e42c483274db2e9dcde5ddc3e5a", 0x78, 0x9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0x1000000000a198) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc190}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x11a, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]}) [ 641.014818] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 641.035927] attempt to access beyond end of device [ 641.042437] minix_free_inode: bit 1 already cleared [ 641.056044] loop5: rw=0, want=6434, limit=52 [ 641.073209] Buffer I/O error on dev loop5, logical block 3216, async page read 20:54:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:54:07 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x70, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r5, 0x1f, 0x1ff, 0x3094, 0xecfd, 0xfffffffd}, &(0x7f0000000040)=0x14) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) [ 641.151919] attempt to access beyond end of device [ 641.199510] loop5: rw=0, want=6434, limit=52 [ 641.226669] ip6t_REJECT: ECHOREPLY is not supported. [ 641.233048] attempt to access beyond end of device [ 641.238598] loop5: rw=0, want=6434, limit=52 [ 641.264394] Buffer I/O error on dev loop5, logical block 3216, async page read [ 641.294243] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. 20:54:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) r4 = socket$inet6(0xa, 0x3, 0x80) sendmsg$AUDIT_USER_TTY(r1, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)={0xac, 0x464, 0x300, 0x70bd2b, 0x25dfdbfd, "eff87395c297370c593f81b59a9f9a53d4867560cca9cdc33573ec1e76084c2fb1a9a6a32f957da7e0dda832d7fceb4608e0e356001a9528ae4f78949f9da49c58ee6039612b8baad7cd9ea65e0f665a3b3c233e7677ff5a1e0d3b1ce39066efd76641fe6c865d6e91489b6626ac8a623364c8c534c99f55916165eb6696e3c13c38c25ab0a0736b826d440aa5f4f55fde157dad72f3805f03bbe7ec", ["", "", ""]}, 0xac}, 0x1, 0x0, 0x0, 0x4000881}, 0x4080) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000005000000004000000c003000000000000d0000000f8010000d0000000f8010000f0020000f0020000f0020000f0020000f0020000040000000000000000000000ff010000000000000000000000000001000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000626f6e645f5378474adaf795d03bec736c6176655f300000000073797a6b616c6c6572310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45ada40cf4e9a9a5ba0dd781a40e0d43540000000000000000000000000000000000000000003e20000500000000000000fe800000000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000002516b400000000000000000000000000000064756d6d79300000000000000000000076657468305f746f5f626f6e6400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100000100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000000000000000000000000000000000000028006970763668656164657200000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c3000000000000000000069705f767469300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f800000000000000000000000000000000000000000000000000280069636d7036000000000000000000000000000000000000000000000000000018830000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800"/1065], 0x473) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x5, 0x3ff}, &(0x7f0000000180)=0xc) write$6lowpan_enable(r2, &(0x7f00000000c0)='0', 0x1) [ 641.536754] minix_free_inode: bit 1 already cleared 20:54:07 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x151042, 0x1c1) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) sendmsg$rds(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/162, 0xa2}, {&(0x7f0000000280)=""/33, 0x21}], 0x2, 0x0, 0x0, 0x240c8891}, 0x200008c0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) mount$fuseblk(&(0x7f0000000340)='/dev/loop0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuseblk\x00', 0x4000, &(0x7f00000019c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x1}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'minix\x00'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_type={'subj_type', 0x3d, 'minix\x00'}}, {@subj_type={'subj_type'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@pcr={'pcr', 0x3d, 0x23}}, {@uid_lt={'uid<', r7}}, {@seclabel='seclabel'}]}}) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r1, r1, &(0x7f0000000480), 0xa198) [ 641.734141] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 641.862535] attempt to access beyond end of device [ 641.871988] loop5: rw=2049, want=6434, limit=52 [ 641.878719] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 641.892704] attempt to access beyond end of device [ 641.905339] loop5: rw=0, want=6434, limit=52 20:54:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') ptrace(0x8, r0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 641.918697] Buffer I/O error on dev loop5, logical block 3216, async page read 20:54:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)) r1 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0xc) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:54:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:54:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000180)='ip6_vti0\x00') write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 642.217502] ip6t_REJECT: ECHOREPLY is not supported. 20:54:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x70, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r4, 0x82}, 0x8) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x120003, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 642.547391] minix_free_inode: bit 1 already cleared 20:54:09 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) setresgid(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) getgroups(0x8, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, r1, 0xee00, 0xee01]) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r8, 0x0) setgroups(0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, r2, r4, r6, r8]) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x8001}, {&(0x7f0000000640)="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", 0x309, 0x34f8}], 0x1040, 0x0) r9 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r9, r9, &(0x7f0000000480), 0xa198) 20:54:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={@ipv4, 0x0, r4}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x114, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x270a}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x9, 0xf9, 0x1, 0x9}, {0x7b, 0x6, 0x6, 0x9}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x50c}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf8}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x1, 0x5858) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 642.891825] kauditd_printk_skb: 10 callbacks suppressed [ 642.891832] audit: type=1800 audit(1586897649.129:14695): pid=31444 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16170 res=0 20:54:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:54:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000780)="c3ccd1c1324a7b66c24536af9999b3b7646f443a95bcc2c9ce90836b2149d98d8ff535c7", 0x24}, {&(0x7f0000000700)="440004a5d3f9a387080d61fe4ab6523b6d3850c8c80e085a02cb9314f52b8dc65a779691fb0c874289484f8786dcf5fba84c0fb8a77da3d52adae945076d3d95db3c482b3de040d7de123a88a158f11a590e561cd66c61a7555d2e482ef82e6117de7424b4af40d4dfb19512814b6481666a4e03424e1fd2de", 0x79}], 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/1064], 0x473) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={@ipv4, 0x0, r7}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@empty, @mcast1, @private2={0xfc, 0x2, [], 0x1}, 0x3, 0x6, 0x8001, 0x500, 0xfffffffffffffff8, 0x80000, r7}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 642.979966] print_req_error: I/O error, dev loop5, sector 0 [ 643.013395] ip6t_REJECT: ECHOREPLY is not supported. 20:54:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0xff00, 0x0, 0x1, 0x8}, {0x7, 0x5, 0x9, 0x7f}, {0xf3e4, 0x5, 0xf1, 0xddb}, {0x6, 0x2e, 0x40, 0x200}, {0x800, 0x3, 0x4, 0x7}]}, 0x10) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x10000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:54:10 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) syz_mount_image$reiserfs(&(0x7f00000001c0)='reiserfs\x00', &(0x7f0000000200)='./file0\x00', 0x80000000, 0x5, &(0x7f0000000400)=[{&(0x7f0000000240)="6b4f7eab2010412276b5f3ca6544e11c3a9447e81459ebfccd8a1f1351e16b4ae8764ac4d6bf8172b52731fd3cfecee81af03330bc6dd37ef1036476dfdcf9228c4064542f249eb32a18ac0403ed690258f479ebcfbf9837eda5536e8234592c4a36ffbab2c5e4f38bc1d8320c1bdf430a7d8c7f3db883de949fbe14743bb2864fd61e096f7e151299990cf3ffc365810953800a7f562c9f93", 0x99, 0x1ff}, {&(0x7f0000000300)="c3488dbf6b3c46dbe319fff6c2474614ebae82ca03689b2a54ba7ae107d42014d4df71d5a215044ca18321798d2a961b4843e2c3c906b87a4204d149d9521b4236ae7c4955ce9b7095ce77375c1f80a68a891ec915fa4be186023716e3193bae405cbf4782a9a6489050a5d6ffd11f556b", 0x71}, {&(0x7f0000000380)="d0524aba32c4965d95d2b31ab95488dc5f944e178dcca3611a41", 0x1a}, {&(0x7f00000004c0)="3618fee504e11d975e235faa0d3046965a54b15c23fe5e313abc5d9e9baf09d286812952c5b4f68e424a7b4deff8205a4032b66402c951fa490534b5bfc281a02eb6b4b7dee74d4046ce8c1f393d0e723489defb36bcdfef187f5e78f3505150edc54d47178ec050e4464001e326fc762a315f2a6b91e854326c4f800991fd4554810dbec0bf53efd7d296020b9146e5a16d0aba1d6e28dfe1adaf0bf87f6d800b93145e35770dea58dfaf28f398a8d7a5c65f9bcc3e8888f64a95861da68fde09acfbc43d440727171c284b91852888b600e81fdc64bb78c4d9e8", 0xdb, 0x5}, {&(0x7f00000003c0)="206cd23803f5e2794dec607a0e373b2dfd62", 0x12, 0x7ff}], 0x868004, &(0x7f0000000980)={[{@noacl='noacl'}, {@acl='acl'}], [{@subj_user={'subj_user', 0x3d, 'minix\x00'}}, {@dont_measure='dont_measure'}, {@obj_role={'obj_role', 0x3d, 'minix\x00'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x33, 0x35, 0x62, 0x39, 0x37, 0x61, 0x62], 0x2d, [0x30, 0x63, 0x30], 0x2d, [0x34, 0x66, 0x39, 0x34], 0x2d, [0x31, 0x30, 0x35, 0x31], 0x2d, [0x61, 0x39, 0x38, 0x56, 0x37, 0x36, 0x63, 0x64]}}}, {@subj_role={'subj_role', 0x3d, 'minix\x00'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:54:10 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x2043c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:54:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:54:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) fcntl$setown(r0, 0x8, r1) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) inotify_init() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10001, 0x3, 0x1df, 0x0, 0x8000, 0x0, 0x200}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) 20:54:10 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x20001, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1883"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x70, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000140)={r6, @in={{0x2, 0x4e21, @broadcast}}, 0x7, 0x1, 0x8, 0x3, 0x5}, &(0x7f0000000200)=0x98) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000)='NLBL_CIPSOv4\x00') futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) [ 644.192398] audit: type=1800 audit(1586897650.429:14696): pid=31500 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16673 res=0 [ 644.197827] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 644.246686] attempt to access beyond end of device [ 644.253403] ip6t_REJECT: ECHOREPLY is not supported. [ 644.267877] loop5: rw=2049, want=6434, limit=52 [ 644.287070] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 644.330333] Buffer I/O error on dev loop5, logical block 3216, lost async page write [ 644.330617] ip6t_REJECT: ECHOREPLY is not supported. [ 644.343475] minix_free_inode: bit 1 already cleared [ 644.355073] attempt to access beyond end of device [ 644.474976] loop5: rw=0, want=6434, limit=52 [ 644.479717] Buffer I/O error on dev loop5, logical block 3216, async page read [ 644.502197] print_req_error: I/O error, dev loop4, sector 0 [ 644.513790] ip6t_REJECT: ECHOREPLY is not supported. [ 644.538899] ip6t_REJECT: ECHOREPLY is not supported. 20:54:10 executing program 2: r0 = gettid() r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={@ipv4, 0x0, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000000)={@ipv4, 0x0, r9}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x400, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x55, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240088c4}, 0x20008010) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:54:10 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) syz_mount_image$reiserfs(&(0x7f00000001c0)='reiserfs\x00', &(0x7f0000000200)='./file0\x00', 0x80000000, 0x5, &(0x7f0000000400)=[{&(0x7f0000000240)="6b4f7eab2010412276b5f3ca6544e11c3a9447e81459ebfccd8a1f1351e16b4ae8764ac4d6bf8172b52731fd3cfecee81af03330bc6dd37ef1036476dfdcf9228c4064542f249eb32a18ac0403ed690258f479ebcfbf9837eda5536e8234592c4a36ffbab2c5e4f38bc1d8320c1bdf430a7d8c7f3db883de949fbe14743bb2864fd61e096f7e151299990cf3ffc365810953800a7f562c9f93", 0x99, 0x1ff}, {&(0x7f0000000300)="c3488dbf6b3c46dbe319fff6c2474614ebae82ca03689b2a54ba7ae107d42014d4df71d5a215044ca18321798d2a961b4843e2c3c906b87a4204d149d9521b4236ae7c4955ce9b7095ce77375c1f80a68a891ec915fa4be186023716e3193bae405cbf4782a9a6489050a5d6ffd11f556b", 0x71}, {&(0x7f0000000380)="d0524aba32c4965d95d2b31ab95488dc5f944e178dcca3611a41", 0x1a}, {&(0x7f00000004c0)="3618fee504e11d975e235faa0d3046965a54b15c23fe5e313abc5d9e9baf09d286812952c5b4f68e424a7b4deff8205a4032b66402c951fa490534b5bfc281a02eb6b4b7dee74d4046ce8c1f393d0e723489defb36bcdfef187f5e78f3505150edc54d47178ec050e4464001e326fc762a315f2a6b91e854326c4f800991fd4554810dbec0bf53efd7d296020b9146e5a16d0aba1d6e28dfe1adaf0bf87f6d800b93145e35770dea58dfaf28f398a8d7a5c65f9bcc3e8888f64a95861da68fde09acfbc43d440727171c284b91852888b600e81fdc64bb78c4d9e8", 0xdb, 0x5}, {&(0x7f00000003c0)="206cd23803f5e2794dec607a0e373b2dfd62", 0x12, 0x7ff}], 0x868004, &(0x7f0000000980)={[{@noacl='noacl'}, {@acl='acl'}], [{@subj_user={'subj_user', 0x3d, 'minix\x00'}}, {@dont_measure='dont_measure'}, {@obj_role={'obj_role', 0x3d, 'minix\x00'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x33, 0x35, 0x62, 0x39, 0x37, 0x61, 0x62], 0x2d, [0x30, 0x63, 0x30], 0x2d, [0x34, 0x66, 0x39, 0x34], 0x2d, [0x31, 0x30, 0x35, 0x31], 0x2d, [0x61, 0x39, 0x38, 0x56, 0x37, 0x36, 0x63, 0x64]}}}, {@subj_role={'subj_role', 0x3d, 'minix\x00'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 20:54:10 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x280c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x40042, 0xd3) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0xfffffffffffffffe}, 0x10) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000020000010000000000d400000000000000040000000000000006000000000000001200000000000000"]) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYPTR], @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYRESOCT=r3, @ANYPTR64=&(0x7f0000000340)=ANY=[], @ANYRESHEX, @ANYRES64, @ANYRESHEX=r0, @ANYRESDEC]], &(0x7f0000a8a000)=0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x70, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x7, @private0, 0x3}}, 0x3ff, 0x401, 0x7, 0x5, 0x8000}, &(0x7f00000002c0)=0x98) sendfile(r1, r1, &(0x7f0000000480), 0xa198) [ 644.656944] minix_free_inode: bit 1 already cleared 20:54:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x8000, &(0x7f0000000440)=ANY=[@ANYBLOB="6664bd", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',max_read=0xfffffffeffffffff,blksize=0x0000000000000a00,default_permissions,allow_other,default_permissions,default_permissions,fowner<', @ANYRESDEC=r7, @ANYBLOB="2c6f626a5f726f6c653d002c736d61636b6673666c6f6f723d7d7b2c646f6e745f61707072616973652c61756469742c6f626a5f757365723d002c6f626a5f747970653d73656c696e7578637075736574766d6e65743128a23a657468302c00"]) [ 644.695731] audit: type=1800 audit(1586897650.929:14697): pid=31554 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16718 res=0 20:54:11 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) [ 644.744352] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 644.801220] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 644.831317] attempt to access beyond end of device [ 644.838653] audit: type=1804 audit(1586897651.079:14698): pid=31561 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir561216653/syzkaller.YAEKBf/457/bus" dev="sda1" ino=16690 res=1 [ 644.853502] loop4: rw=2049, want=6434, limit=52 [ 644.909306] BUG: unable to handle kernel NULL pointer dereference at (null) [ 644.917435] IP: get_block+0x6a7/0x10f0 [ 644.921322] PGD 9fd18067 P4D 9fd18067 PUD 8f66c067 PMD 0 [ 644.924080] buffer_io_error: 1 callbacks suppressed [ 644.924087] Buffer I/O error on dev loop4, logical block 3216, lost async page write [ 644.926867] Oops: 0002 [#1] PREEMPT SMP KASAN [ 644.926873] Modules linked in: [ 644.926884] CPU: 1 PID: 31561 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 644.926889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 644.926893] task: ffff88809f388480 task.stack: ffff88804b8e8000 [ 644.926905] RIP: 0010:get_block+0x6a7/0x10f0 [ 644.926909] RSP: 0018:ffff88804b8ef348 EFLAGS: 00010246 [ 644.942826] attempt to access beyond end of device [ 644.944764] RAX: 0000000000000007 RBX: ffff88804b8ef450 RCX: 1ffffffff10279bc [ 644.944770] RDX: 0000000000000000 RSI: ffffffff87d842e0 RDI: ffff88809f3884a4 [ 644.944775] RBP: ffff88804b8ef4c8 R08: 0000000000000001 R09: 0000000000000002 20:54:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000780)="c3ccd1c1324a7b66c24536af9999b3b7646f443a95bcc2c9ce90836b2149d98d8ff535c7", 0x24}, {&(0x7f0000000700)="440004a5d3f9a387080d61fe4ab6523b6d3850c8c80e085a02cb9314f52b8dc65a779691fb0c874289484f8786dcf5fba84c0fb8a77da3d52adae945076d3d95db3c482b3de040d7de123a88a158f11a590e561cd66c61a7555d2e482ef82e6117de7424b4af40d4dfb19512814b6481666a4e03424e1fd2de", 0x79}], 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/1064], 0x473) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={@ipv4, 0x0, r7}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@empty, @mcast1, @private2={0xfc, 0x2, [], 0x1}, 0x3, 0x6, 0x8001, 0x500, 0xfffffffffffffff8, 0x80000, r7}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) [ 644.944780] R10: ffff88809f388d50 R11: ffff88809f388480 R12: ffff88804b8ef414 [ 644.944785] R13: ffff8880402bb538 R14: dffffc0000000000 R15: 0000000000000000 [ 644.944792] FS: 00007f2a8e925700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 644.944796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 644.944800] CR2: 0000000000000000 CR3: 000000008afab000 CR4: 00000000001406e0 [ 644.944809] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 644.944813] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 644.944816] Call Trace: [ 644.944832] ? __lock_acquire+0x5f7/0x4620 [ 644.944848] ? block_to_path.isra.0+0x2d0/0x2d0 [ 644.948235] loop4: rw=0, want=6434, limit=52 [ 644.955905] ? trace_hardirqs_on+0x10/0x10 [ 644.955916] ? lock_downgrade+0x6e0/0x6e0 [ 644.955924] ? save_trace+0x290/0x290 [ 644.955932] ? __lock_acquire+0x5f7/0x4620 [ 644.955945] minix_get_block+0xd6/0x100 [ 644.955969] __block_write_begin_int+0x337/0x1030 [ 644.955977] ? minix_rename+0x760/0x760 [ 644.955987] ? __breadahead+0xd0/0xd0 [ 644.956001] ? wait_for_stable_page+0xe3/0x270 [ 644.973409] Buffer I/O error on dev loop4, logical block 3216, async page read [ 644.975809] ? minix_rename+0x760/0x760 [ 644.975818] block_write_begin+0x58/0x260 [ 644.975829] minix_write_begin+0x35/0xc0 [ 644.975839] generic_perform_write+0x1c9/0x420 [ 644.975849] ? page_endio+0x540/0x540 [ 644.975867] ? current_time+0xb0/0xb0 [ 644.975877] ? lock_acquire+0x170/0x3f0 [ 644.975887] __generic_file_write_iter+0x227/0x590 [ 644.975897] generic_file_write_iter+0x2fa/0x650 [ 644.975905] __vfs_write+0x44e/0x630 [ 644.975913] ? find_get_entry+0x244/0x690 [ 644.975919] ? kernel_read+0x110/0x110 [ 644.975935] __kernel_write+0xf5/0x330 [ 644.975945] write_pipe_buf+0x143/0x1b0 [ 644.975952] ? do_splice_direct+0x210/0x210 [ 644.975963] ? splice_from_pipe_next.part.0+0x1e4/0x290 [ 645.188028] ? page_cache_pipe_buf_confirm+0x18e/0x260 [ 645.193288] __splice_from_pipe+0x332/0x740 [ 645.197832] ? do_splice_direct+0x210/0x210 [ 645.202132] ? do_splice_direct+0x210/0x210 [ 645.206435] splice_from_pipe+0xc6/0x120 [ 645.210477] ? splice_shrink_spd+0xb0/0xb0 [ 645.214694] default_file_splice_write+0x37/0x80 [ 645.219439] ? generic_splice_sendpage+0x40/0x40 [ 645.224175] direct_splice_actor+0x115/0x160 [ 645.228567] splice_direct_to_actor+0x27e/0x730 [ 645.233340] ? generic_pipe_buf_nosteal+0x10/0x10 [ 645.238184] ? do_splice_to+0x150/0x150 [ 645.242141] ? rw_verify_area+0xe1/0x2a0 [ 645.246186] do_splice_direct+0x164/0x210 [ 645.250413] ? splice_direct_to_actor+0x730/0x730 [ 645.255242] ? rcu_read_lock_sched_held+0x10a/0x130 [ 645.260250] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 645.265010] do_sendfile+0x469/0xaf0 [ 645.268715] ? do_compat_pwritev64+0x140/0x140 [ 645.273281] SyS_sendfile64+0x9b/0x110 [ 645.277158] ? SyS_sendfile+0x130/0x130 [ 645.281135] ? do_syscall_64+0x4c/0x640 [ 645.285100] ? SyS_sendfile+0x130/0x130 [ 645.289063] do_syscall_64+0x1d5/0x640 [ 645.292939] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 645.298114] RIP: 0033:0x45c889 [ 645.301299] RSP: 002b:00007f2a8e924c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 645.308990] RAX: ffffffffffffffda RBX: 00007f2a8e9256d4 RCX: 000000000045c889 [ 645.316319] RDX: 0000000020000480 RSI: 0000000000000004 RDI: 0000000000000004 [ 645.323571] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 645.330952] R10: 000000000000a198 R11: 0000000000000246 R12: 00000000ffffffff [ 645.338206] R13: 00000000000008d6 R14: 00000000004cb7ee R15: 000000000076bf0c [ 645.345462] Code: ca 08 00 00 49 8b bf 28 01 00 00 b9 08 00 00 00 e8 af 04 c6 ff 31 d2 be 6c 01 00 00 48 c7 c7 60 f1 b9 86 49 89 c7 e8 a9 42 6d ff 41 0f ba 2f 02 0f 83 1f fe ff ff e8 e8 2d 89 ff 4c 89 ff e8 [ 645.364556] RIP: get_block+0x6a7/0x10f0 RSP: ffff88804b8ef348 [ 645.370431] CR2: 0000000000000000 [ 645.379473] ---[ end trace fe4c00bb58dec7a4 ]--- [ 645.384269] Kernel panic - not syncing: Fatal exception [ 645.391046] Kernel Offset: disabled [ 645.394667] Rebooting in 86400 seconds..