ogram 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x68}}, 0x20) [ 632.351165] audit: type=1800 audit(1588501078.107:665): pid=32310 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:17:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x29, 0x2, 0xffffffff) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0xfffffff9, 0x5, 0x9}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r10, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r12, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="567647e88a53eff05e838209f487550be18c2df9c162475867132138a20000000000000036f30e222db071f2a86e39c1635ac2c4336b49c67f991188457b82c92e1599b81c1424ee19c5fcc77405561f6c79217a28999971d49309164891b746ad83b01e0acd743b7793b1acc2664471f53bcd56fdf3a146eea90d7e3d3231e88afe37c4", @ANYRESDEC=r12], 0x88}}, 0x800) [ 632.437435] minix_free_inode: bit 1 already cleared [ 632.527231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32319 comm=syz-executor.2 [ 632.550677] audit: type=1800 audit(1588501078.307:666): pid=32320 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16354 res=0 [ 632.596791] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 632.632994] attempt to access beyond end of device [ 632.633271] FAULT_INJECTION: forcing a failure. [ 632.633271] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 632.641145] loop3: rw=2049, want=6434, limit=52 [ 632.673754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32319 comm=syz-executor.2 [ 632.690971] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 632.701934] CPU: 0 PID: 32304 Comm: syz-executor.0 Not tainted 4.19.120-syzkaller #0 [ 632.709944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.720101] Call Trace: [ 632.723183] dump_stack+0x188/0x20d [ 632.729385] should_fail.cold+0xa/0x1b [ 632.733401] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 632.738642] __alloc_pages_nodemask+0x1c7/0x6a0 [ 632.744037] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 632.749239] alloc_pages_current+0xff/0x200 [ 632.754427] push_pipe+0x3f6/0x780 [ 632.758113] iov_iter_get_pages_alloc+0x5a9/0x1090 [ 632.763079] ? __kernel_text_address+0x9/0x30 [ 632.767610] ? unwind_get_return_address+0x5a/0xa0 [ 632.773322] ? __save_stack_trace+0x8a/0xf0 [ 632.777852] ? iov_iter_revert+0xa30/0xa30 [ 632.782150] ? iov_iter_pipe+0xb4/0x2c0 [ 632.786325] default_file_splice_read+0x19c/0x970 [ 632.791630] ? kasan_kmalloc+0xbf/0xe0 [ 632.795555] ? __kmalloc+0x15b/0x770 [ 632.799463] ? do_splice_direct+0x1a8/0x270 [ 632.804002] ? __x64_sys_sendfile64+0x1cc/0x210 [ 632.808702] ? do_syscall_64+0xf9/0x620 [ 632.812894] ? iter_file_splice_write+0xb30/0xb30 [ 632.817850] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 632.822876] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 632.827959] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 632.832852] ? fsnotify+0x8ba/0xf00 [ 632.836720] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 632.841958] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 632.846671] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 632.851905] ? retint_kernel+0x2d/0x2d [ 632.856151] ? do_splice_to+0x92/0x160 [ 632.860244] ? iter_file_splice_write+0xb30/0xb30 [ 632.865296] do_splice_to+0x10e/0x160 [ 632.869628] splice_direct_to_actor+0x2b9/0x8d0 [ 632.874689] ? generic_pipe_buf_nosteal+0x10/0x10 [ 632.880004] ? do_splice_to+0x160/0x160 [ 632.884281] do_splice_direct+0x1a8/0x270 [ 632.888763] ? splice_direct_to_actor+0x8d0/0x8d0 [ 632.896871] ? security_file_permission+0x84/0x220 [ 632.902108] do_sendfile+0x549/0xc10 [ 632.905954] ? do_compat_pwritev64+0x1b0/0x1b0 [ 632.910780] ? wait_for_completion+0x3c0/0x3c0 [ 632.915639] ? vfs_write+0x15b/0x550 [ 632.919402] __x64_sys_sendfile64+0x1cc/0x210 [ 632.924163] ? __ia32_sys_sendfile+0x220/0x220 [ 632.929081] ? __ia32_sys_clock_settime+0x260/0x260 [ 632.935106] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 632.941464] ? trace_hardirqs_off_caller+0x55/0x210 [ 632.946518] ? do_syscall_64+0x21/0x620 [ 632.950611] do_syscall_64+0xf9/0x620 [ 632.954448] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 632.960639] RIP: 0033:0x45c829 [ 632.963904] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 632.984007] RSP: 002b:00007f2b844b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 632.992639] RAX: ffffffffffffffda RBX: 00000000004fc0c0 RCX: 000000000045c829 [ 633.000974] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 633.008546] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 633.016044] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000007 [ 633.023617] R13: 00000000000008d6 R14: 00000000004cb7a1 R15: 00007f2b844b56d4 10:17:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r1, &(0x7f0000000300)=""/54, 0x36, 0x13, &(0x7f0000000340)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80) 10:17:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r7, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r7, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="b7626d5ec6cb6d7c89dcdc0bcdb77822", 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x88}}, 0x800) 10:17:58 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x6c}}, 0x20) 10:17:58 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) [ 633.137097] minix_free_inode: bit 1 already cleared 10:17:59 executing program 5: r0 = socket$inet(0x2, 0x3, 0x10000b) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={r5, 0x4, 0x30}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={r5}, 0x8) [ 633.259920] audit: type=1800 audit(1588501079.017:667): pid=32344 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16205 res=0 [ 633.299675] MINIX-fs: mounting unchecked file system, running fsck is recommended 10:17:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c000800000034000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x88}}, 0x800) [ 633.345698] attempt to access beyond end of device [ 633.351546] loop3: rw=2049, want=6434, limit=52 [ 633.373869] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 633.444487] attempt to access beyond end of device [ 633.488748] loop3: rw=0, want=6434, limit=52 [ 633.505783] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 633.511730] Buffer I/O error on dev loop3, logical block 3216, async page read 10:17:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r2, r1}}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {r4, 0x8, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x101f7f74}, @in6={0xa, 0x4e23, 0x401, @remote, 0x8}}}, 0x118) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r9, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000600)={0xd4, 0x0, &(0x7f0000000400)=[@request_death={0x400c630e, 0x3}, @increfs_done={0x40106308, 0x1}, @acquire={0x40046305, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/47, 0x2f, 0x0, 0x13}, @flat=@weak_binder={0x77622a85, 0x110b, 0x2}, @fda={0x66646185, 0x2, 0x0, 0x16}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x7, 0x1, 0x3f}, @fd={0x66642a85, 0x0, r8}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, &(0x7f00000003c0)={0x0, 0x20, 0x38}}}, @clear_death, @request_death], 0xea, 0x0, &(0x7f0000000500)="bc655e4be3e4d0192321ec7d142c6fa115e4f9659721ab66f174a2731c407061743e51c15435c9942073ed228eff7f157e6e4ccd86fa209b702a5a05573ff191f8393b2af446683b94972ec9ca82e8ebfec6301825f25d0edd341051700924e7b4753891c7cad1accd4ded8721a74de5f60e0275862ca75e6e4dd27730d186fc6dfad338950092f350b008f85bc694888501c284ccfe79b449f12a476d25c31975514242c65dbd9e3d16938ce9ae3a202097ea5a34ea49f2848b785ddc41f47eb13e96c6d7ddfe50b3d9571d5b1786cbdd02be5d8a2d649ba98eabe1f2ea051dcd0a401f7d7765571c70"}) sendmmsg(r5, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000001c0)=0x7, 0x4) [ 633.531594] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. 10:17:59 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x74}}, 0x20) [ 633.572661] audit: type=1800 audit(1588501079.327:668): pid=32352 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 633.637176] minix_free_inode: bit 1 already cleared [ 633.648069] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 633.659207] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. 10:17:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB="088e", @ANYRES32=r6, @ANYBLOB], 0x88}}, 0x800) [ 633.751767] audit: type=1800 audit(1588501079.507:669): pid=32369 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16246 res=0 [ 633.786165] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 633.809938] attempt to access beyond end of device [ 633.834112] loop3: rw=2049, want=6434, limit=52 [ 633.862467] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 633.881362] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 633.944780] attempt to access beyond end of device [ 633.963824] loop3: rw=0, want=6434, limit=52 [ 633.980163] Buffer I/O error on dev loop3, logical block 3216, async page read 10:17:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, &(0x7f0000000300)=""/54, 0x36, 0x13, &(0x7f0000000340)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80) [ 633.984232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 10:17:59 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x7a}}, 0x20) [ 634.112492] minix_free_inode: bit 1 already cleared 10:18:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000300)={{0x6, 0x2}, {0x80, 0x40}, 0x8, 0x5, 0x7f}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f00000000c0)={@private0}, &(0x7f0000000140)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r9, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000002e80)={'team0\x00', r3}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000040)={@local, @remote, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_delroute={0x38, 0x19, 0x100, 0x70bd2b, 0x25dfdbfb, {0x2, 0x10, 0x30, 0x1, 0x0, 0x3, 0xfe, 0x6, 0x500}, [@RTA_MULTIPATH={0xc, 0x9, {0x3f, 0x83, 0x3, r10}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_DST={0x8, 0x1, @broadcast}]}, 0x38}}, 0x800) [ 634.241932] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 634.263693] attempt to access beyond end of device [ 634.289359] loop3: rw=2049, want=6434, limit=52 [ 634.312736] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 634.339890] attempt to access beyond end of device [ 634.346430] loop3: rw=0, want=6434, limit=52 [ 634.360203] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:00 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xf0}}, 0x20) [ 634.447275] minix_free_inode: bit 1 already cleared 10:18:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="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"], 0x88}}, 0x800) 10:18:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0xffffffe0, 0x4) sendto$inet(r0, 0x0, 0x0, 0x240087bd, &(0x7f0000e68000)={0x2, 0x4e22, @multicast1}, 0x10) [ 634.539943] MINIX-fs: mounting unchecked file system, running fsck is recommended 10:18:00 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0xf80) [ 634.589297] attempt to access beyond end of device [ 634.629545] loop3: rw=2049, want=6434, limit=52 [ 634.661516] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10004}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x88}}, 0x800) [ 634.735553] attempt to access beyond end of device [ 634.757346] loop3: rw=0, want=6434, limit=52 10:18:00 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x300}}, 0x20) [ 634.866945] minix_free_inode: bit 1 already cleared 10:18:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, &(0x7f0000000300)=""/54, 0x36, 0x13, &(0x7f0000000340)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80) 10:18:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$sock(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="7b83b8dd8557becd9bda3027da26a3e9d3d11dfe45da148f7b054b2c36620d470997c07d80efa6fcaa7c80c7af076592c31fe375cf10637daef56e85fd8a7f13fb1897e587d6844269561cbb352e5eb4fc67e2c7bec7163569336f51d3a459a4eda79250902b63f76f152c5db58eeea34e87e779e8638620b8e4a46da87585f700d5bb18f87d663a4472d378014fe1c5b69f7d7a115d178e99f705a84944b661295f6dad4efea9dea2c8e4ace69452a8822e692ca6a87f3611556bf4f0db0d", 0xbf}], 0x1}, 0x45) open_by_handle_at(r0, &(0x7f0000001200)={0x1008, 0x10000, "7e78e752d2bd608dc168b823c8cbd4302d98478442f94576067b71c1b82055d266c131ca91ba8edc89b4d269ca75d1c0b12f9b29703a616c964c7ab43da09706458de4999b27600c317bc38daf0e6b3c927d99438c41e35eab6a925984230ae41710e2caa565f2cfb6651d3cd70d6616a2c4dcdb7ddcc8ef644ca02bd202c8bcf3c817c7fa8aab559171c182ef7355a0132dca297f48b48e166592461634b53bf33137e97e72180ced6524e8b11196729a366ab96afa988f4f3fbfe46cf9178cab5ad78b9ff24291fd250222c2566828494f198b7e2f2eb3d3b57c959d5fd41818dbe6a2ae622b483ec126b0ae45a947bb73944c586f9c9fdbf9b7d5415c8fcc04a4286258d8b79cabc7f8de7ec3f374c5e89c708e8d2afcea7302e76a8cd0bb5a6a106a6b472ce2c88244a86d08e188810f794bb39b0f07c38c54b799abea5b4a83f991aedf91b597758e9db8db933ad7067dfbf237429ef87cae8ccc9884677c24ff843060d4dba0f238a258b882d7e73dd8add0017b6d9164ac69f9c3cce2995ba262323ca963ca95737a5276ec9c8e11c75da10f1a275add9ef7e5fdba5e37d4ab4a1825455f0b972d414d7bc6785bd7a707f9e1efc7025bea21733024918a311bf18fee3d01e56bfbf413cbae14f48e219553b528acc46d77d5c71bfa55cfdb9fa9b7e1279ec9ff1232238b03239f0055cf053583e32de22fcf25343daa1c778b8dcabfaae011ae72b8252222466c821f3ac070665194b16f412235241cd43295eb6f386bcdc5ce20e87cbd3553eac397b612ea7e3d38337634847b2902254044097c27abc7786f7e487e59d310154978ef1d21a2224507a935fdfc0611b3be584fb852c50306b19f7757a0c9b2ffc3a8417e75d7db5611b4f0c2ad8be99919086a675edd042264cd76dfca847e113584129d94a840b0444ab11aea7c312a73ab6384021b4ba21e6a4d05513a4ddcd117378cfb83f0c99ef1b264585fdd893ea14c6decb1a62c1f98c22ed947c756660d99ce57dea24e8697cef7dc87a2dd0b551c20fe0ab91d85f066481dbc0e839a051ef26b703d045b462866d9c7f755d6e9d4411e41704951cbe1e1bca7d7e08630f587634ff91fd093deb23dafcda0430dbf2d0301647696d432978b5d6d6bedbe141a9eec3f824164bd4851d54e2fd16646183d33bdfe5fe3257a2dc2e476ba8d9d7818c687c02f44bfa50e26d7b53eacd0c8d5bd4de93de528f9f070ccf9502fe7dde34faf7708990a03285c241c102e1489aa589f5e9bb921f8a3360cf81265bb067666a091761b6622ca26ce020ac632f22f4940b53fe1038dad245337a76f9d9ac7a014c851aa36e68ab8b671db56489861d723e30140496ae62f471b61eb724de859430ad9899185fbbce023f9c840d578bba838c100ea44e37916b4a469f72b3a256497bc7cd664037cf4e22fe51d4437cb7cd5319c93a42d5122cefcdee3b631e643cc33723e12064d3109fc78bfe4c56435651bc5a6a96151a35cc2d9607455afc5d2ee6c9c4e91e02d490b9776f6413cb53f957487484c74744e85a06c7b9c2160a02e2e095ab8d7df5c0147585c22f8d83532e869e2c755935ad5786c412f2751ff587e085d1d0c44fe8e3b9e2049b0147e97f115c7387c47e7b3c740ff07e790d3d5d03e9d21a65c4d3d1ce1e3b13edf100fbf9ac0f5db3b187afae45494518e475f74dfff94bfd81290f727f05fcaa6c667c802d7b03cb87a1a1cd4bd6f3c2d3497f202f7f5d0c96023cc53d12bed7ca7d750695b0979cd16a70b66d47eb86bec82721bd4c115a3895f07eef94786c883010982279e5158c5fa667119c728941ac6e301ec030bdb6170494bcf67d7136364f5a11859cda49816954616c267b3bbfce9bd8331042fafb2def95f7f0fcd4bc354b5b90aa064c74e2a89e1667f401185bedb600f43c94b3859e18abd0c6ab16b0f0fc6018fb8668cf7cfbbab1c18a9c9119ba69195f5d76794a56f42939ee8d48a1693bb8b7832bda2563d0c883356e2543a669c86ab184ef9e07e32c5e5f0b7fa4b6b5f061c16dbda94f9aa38fe0e54cf65a9e7cd907ac44bc2ba11e23bcc2d886dcf7060b8294278d40b400e41af5f71cc2b34d458c8a82fa57e150f9ac9eeb8eaa62e02c8dbc5dfd2c938cc7ff3c33e733382d87bd8dddafe951ebe6eaace8600c9f9144c4af8fda2b59a5c4e192d37ef0cdf55c3331b42ffd3f0eb0b965a0f4ee81c4b263c4ce3973429aae1ececf57b9cd43af09d61566bbed16a9f74bce62ea0fc47b8d319a90a3484e3a689c899b9b935fe8293ac6c6ec1ace25472ae196208b23212c6291b0f127100d99e23a92115133398b4de4cdc9420e181336f70bafcf835f1b7b0c809fb1e08668c5570d8a774e8d583c933989779c2c7c8ca6a9d86da10d530b8ba757ca09265141ec05503433f621e5d3337b7f2836e31f7beb12cfe7a2766f2318cf1e263e2944a35e68bdcb45e4765e1981ebc548cd9a0753905a77bbb0c8fe92ead65a6e26f9a2c560c4d8a5006f7a7c3840717dc8eb25dff680ebef0f6d2c22e93e6ad06ce1fad859488d227dd4120ee01804022b6e2300f9f4898cfdd50f0006e0f1e20a2885d0744b8e5ab4a089fb5c221a552b93d55518516a25098a9c72bea773d5722e7d7bbefb6a0d118db07a351ba4d67a7924ac0570a8dc47cfa1e8536e941fd1a56af0566138d93830f75ea77e984643d94c5c17ae3b7cbaf4a24639efbd39c7d1d2cf3eb0027e4a396aa27880aec5429e10a29e348d8b024ae5315ff17bad34c87a6cbadc9a45b0d899a4432880a43d0232e865793fba5ef152ceee3d30a2c3743926443c1f4518ffa98a1cf85804cb61f60c8a11755e61ceabb1ea4a6f0aa6f2ddadbd58c529309066f6761734b96996ae598b51269a02be08ca16dbc0626305e1707e6369f38b542957c4075227933568c7df5f441fb6a55162c2e10c2f08128ae5b4373a161780df66e167daae80e5b7304354681c07129db69ed8ea09815f7b089d45e927a2d73a75c49a9e6e726a8e7a1b40402ebca157ebd3dae096794df8257a0adcdc1e0bff9f27621f4d8582aa49721b13acae067a6a91322cb7050330f6296b4d4552c06b6e335099b4858644bcdf033b9fbfe4da0deac6cb0751cc29ac35fe2ca6c5d901c14c2e26b2c8166e9ae7de0dc6a852899acb53261a9677a44449a8a2bb0833bf1c10ec4543e9ca8fd8f5d78b3ab02570493c0d8ec0ca126f8083c8aecd9b04f835397666eb975d9cb61b6e661834cc47bec08f3d860b55ac0e9dbf57587fe5f184493f02b381def0f4405615e062ae6cf875ea458b7c4693c185aaa5388604bee34e9839d9b90f661b303be2faef1613ba4d4bd601a823bb17f51c09687b818ec5f70056b2f4b73f71998924f884cefa23a43f7afb406d42e7b2a862ce02ceb047f3d7ed0c049c5ef229f387dab12d0c0680194419660b532e950065d84d3801c68cab87484ada685957838046dfef331a15b7261bd2f301f3b839005d1d705f0f299f9d358086783f2ceeda647667c1653fd04df8682316b50c20b736079fb1210963a969f3d2d3cbf275256dbfba89e90bde260d25cc89be990845d5742ac7f8c9dac2c15eeab50db50153b10870365826a523abb401ba4792b5a426e0de609ad741337a983e3e1177cd79a649d2b4dfb189e1d637bb0545206f9b3ed01c3889e0ddff00ed62432de2faf916f731c6993dbd92d0cc86bd2373f565139b461c99c172054f98568d46791ba61c26845b95a1c772b9c8d637add4f37ca04cbe26ce3b06570e30b9351236f6b8296364318338fff6e52e8f8213295419af5b8083fd6e5ac7c50f2d3ba682fd1c7ceaeaee90af76a51897c5d3059f30ab232e0a5507b4a415a876617d1d43f867bd0e755c32da0a36068388abe239f9caf87075f6e8c74f1dc37b127c98c01fdd654c720a4253362aae7d34d8fd273fca783e1b28cd399582ab937a8968b1d497f5ba4e28b2bf84e2149d8886fafbe1b8198a1a4172765d67ebc2129ca225907c4c897a693bfe0d6bc9f23c8287ba2a7881d9f8fec5cbf6ddcba0b793fb1cbbaa5b54505564877f9ec9135ce2d6e681c8841bff66f01fa4992a3e594cd881da1d99dfd2f4dd290f08009544551b05c07425f2180894d4b47af498b9da77f3fae3df5eb9a69cb87091c354d47acabcec3f4e2e1247801b62c9aff494aab24f0c5ef8b57f4ad139346c6ff8ca3530b28c65980e79b0e5a0f629a9cfc7377c8ec4292ff2283e09373faf6605b9493fb5b6b66a8bbebd400ab7163aa2d27ac5e5c1c47c157c7c87021b6883dede31019935f81aad4e4886fdea7e6588e58e2070a7869a5771353e745fb165ae957e3191c231a576195d42525cba729b05b7a3e9d6463e714b7f7152c455d01ed8c798d2ecd673ec3a9b72af97776f9cc5f874fcef98383c63e1fa93f203f3982a762cf362811e762c491f4f4a30eda3d85aa7e84a42d0f452479da533404d2be890df8e3600fe68406ddc2e5c89903ed355dcd88f66be08a6f7ba1eb69ab2bfadfefae79f29b3fb9733976aa7717f3597f26dc5b5f3267ff4bb753dae439636b1b81eb7a42ffa3ec2190c434e7404b67600be5c68989c1c5a1f52ad13bff27ff7651c600b6475ee18e6691f9e3de01f4adb80367dd029cebd31e64001ac34ca24e59429ff61100ca969dae1c9d077a11a74c40eb5a2e3059bdee80da2f3163b6beb2d511bdab4a4bc78e9e28a0837c71bb2b239f97f301ac24c375c88634dfb46e7f19da4cec6a4783446b06087c0e29b6197b8a04212e5e67cfea8ca35f49475c32fa4b757c64365212b90269d977e119328019b584b6caedf08a4315ece763ad356999053ccfb35d4cdeb0d2f026fc89ab67ffa828a78d17c6be98a167bdcb15b0007510140b6f77cc3b0fc823b6a43991bb681ea7e1440fbbb07096094cc287ee8ff9e3a0f15e6e4cb19d6c871ef838a49f8d53e0fdd339f321b4b4f19491b81167ec08e9aa414fee407281858ac4a7f690753eac32f84b59ed9a16192c49a15986c65cc0e3c063d5d5919b190c964e724a088f8269f477aa31f4e39c931e64b2740744db15cb6718fee374cc2dd72d879e18a4bccdcd2b5b02991f01de1104b7868f063faeed80256fe62b30610661cddc35220e43310ff365228f456af23acfacda0caef513e7d7ae9273fceda229633c73b51bf377893958b519c3c3cec5324ea3330ce54b9f121656ea3f9c42deebd3cefded5186ab7279230ed3ddb27616da3467e7eb504441bf350f9b341d53657ef9f894db498f210b5b4e01a65d0709c7e4790609a6d504af537e7146d26d05723326f3e616d748a0e6a23f46a8063088ff9c3a6404b1fbd8e94eb8dfc9ee85995e58e9741abcf1d9a91dac7f6ab4556f82117d65a631c20465b20a72ab6f7db4e5f8c3bf2e78b7afb9caff8428173aed8c07336e8a853cde19342f04f4294979fd9105a0b7c092ea3ae29bcba429f487555f029e5c34bd55e57720f58cc9081e6391a22b820ce52589aa77d3b05fa36dd24722d8dacfbd1002290956123e7bbb07093c08b30168b1dec3d6b2ac54ff75fa1eff66ba062862f83895347ef9e8d2e69635b9090f14db9c8ac9f30bc2f8c61fba6735d4cb177981a01dfd94ccf1a0de55964553202fcd629558e2904f4db1f4755dca2d5c49247435c5e3bf9087227c6830d0f7966047c54065d4f308d69f786ff5a74363b6f972d6c83bcf546d30302843c77cca6f947a500b84f57aeffaa9736359"}, 0x10000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x88}}, 0x800) [ 635.029773] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 635.070588] attempt to access beyond end of device [ 635.088580] loop3: rw=2049, want=6434, limit=52 [ 635.112931] attempt to access beyond end of device [ 635.136385] loop3: rw=0, want=6434, limit=52 10:18:00 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x500}}, 0x20) 10:18:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, &(0x7f00000000c0)=0x8) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x88}}, 0x800) [ 635.257887] minix_free_inode: bit 1 already cleared [ 635.380566] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 635.413363] attempt to access beyond end of device [ 635.447217] loop3: rw=2049, want=6434, limit=52 10:18:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x2, 0x8000000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}}, 0x800) [ 635.495577] attempt to access beyond end of device [ 635.516795] loop3: rw=0, want=6434, limit=52 [ 635.534535] kauditd_printk_skb: 8 callbacks suppressed [ 635.534546] audit: type=1800 audit(1588501081.287:678): pid=32455 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:01 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x600}}, 0x20) 10:18:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @bt={0xc489, 0x1, 0x4, 0x678, 0x800, 0x100000001, 0x0, 0x2}}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x12004}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x800) [ 635.671800] minix_free_inode: bit 1 already cleared [ 635.772646] audit: type=1800 audit(1588501081.527:679): pid=32465 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16250 res=0 [ 635.796495] MINIX-fs: mounting unchecked file system, running fsck is recommended 10:18:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, &(0x7f0000000300)=""/54, 0x36, 0x13, &(0x7f0000000340)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80) [ 635.824356] attempt to access beyond end of device [ 635.868177] loop3: rw=2049, want=6434, limit=52 [ 635.901798] attempt to access beyond end of device 10:18:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000040)=0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK_NETNSID={0x8}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x38}}, 0x800) [ 635.925747] loop3: rw=0, want=6434, limit=52 [ 635.945540] audit: type=1800 audit(1588501081.697:680): pid=32474 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 636.027103] minix_free_inode: bit 1 already cleared 10:18:02 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7fff1200) 10:18:02 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x700}}, 0x20) 10:18:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @remote}, &(0x7f00000000c0)=0xc) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000140)=r4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x88}}, 0x800) [ 636.342843] audit: type=1800 audit(1588501082.097:681): pid=32491 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16753 res=0 [ 636.382677] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 636.412196] attempt to access beyond end of device [ 636.441714] loop3: rw=2049, want=6434, limit=52 [ 636.507124] attempt to access beyond end of device [ 636.512742] loop3: rw=0, want=6434, limit=52 [ 636.526893] audit: type=1800 audit(1588501082.287:682): pid=32498 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:02 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xc00}}, 0x20) 10:18:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r6, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB="89602988", @ANYRES32=r6, @ANYBLOB="4d486c7938307de66bff5c29d8014c59d74d8c4035588f13f0d23d3b79a3c16fb55a4d22eedd01d94ba34c9c123bccd9b5534749993344935d83ddaf74bdc47d47d8bbe02473e43682cd11ec612905477a165dcf2ba7d53b52ac52ab6ba1fcee948a1376b496be577bfd833a9d6a1ab90fedc65ec41a5d8e1b76"], 0x88}}, 0x800) [ 636.607531] minix_free_inode: bit 1 already cleared [ 636.680422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=32504 comm=syz-executor.2 10:18:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/54, 0x36, 0x13, &(0x7f0000000340)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80) [ 636.719145] audit: type=1800 audit(1588501082.477:683): pid=32506 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16217 res=0 [ 636.745259] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 636.769867] attempt to access beyond end of device [ 636.778656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=32504 comm=syz-executor.2 [ 636.799236] loop3: rw=2049, want=6434, limit=52 [ 636.820975] attempt to access beyond end of device 10:18:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="8eaeb245023c6a45b83cbee8eb127b435ae4f3651e01312a282d5be25377fac9802a60ad6456f38a4ca4049afd45fbefce903569be5a74d6fd944ddce352dd468358c0b95ad36ad2d03ffd960d1634f1606ff5b0bae321c75987a90461ad"], 0x88}}, 0x800) 10:18:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/54, 0x36, 0x13, &(0x7f0000000340)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80) [ 636.841647] loop3: rw=0, want=6434, limit=52 [ 636.858836] audit: type=1800 audit(1588501082.617:684): pid=32514 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:02 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x1f00}}, 0x20) [ 636.947596] minix_free_inode: bit 1 already cleared 10:18:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/54, 0x36, 0x13, &(0x7f0000000340)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80) 10:18:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$packet(0x11, 0x2, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x88}}, 0x800) [ 637.097552] audit: type=1800 audit(1588501082.857:685): pid=32527 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16205 res=0 10:18:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000300)=""/54, 0x36, 0x13, &(0x7f0000000340)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80) [ 637.144511] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 637.174037] attempt to access beyond end of device [ 637.192107] loop3: rw=2049, want=6434, limit=52 [ 637.242051] attempt to access beyond end of device [ 637.256660] loop3: rw=0, want=6434, limit=52 [ 637.269839] buffer_io_error: 12 callbacks suppressed [ 637.269851] Buffer I/O error on dev loop3, logical block 3216, async page read [ 637.332902] audit: type=1800 audit(1588501083.087:686): pid=32536 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 637.477326] minix_free_inode: bit 1 already cleared 10:18:04 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff002) 10:18:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000300)=""/54, 0x36, 0x13, &(0x7f0000000340)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80) 10:18:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="e183ecc949701b0bf774c76621150a63cb5c3cec606b3b840aff9c3e158074cd94dfb9c930285a"], 0x88}}, 0x800) 10:18:04 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000}}, 0x20) [ 639.015926] audit: type=1800 audit(1588501084.767:687): pid=32551 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16801 res=0 [ 639.029238] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 639.060077] attempt to access beyond end of device [ 639.079691] loop3: rw=2049, want=6434, limit=52 [ 639.097538] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000300)=""/54, 0x36, 0x13, &(0x7f0000000340)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80) [ 639.140427] attempt to access beyond end of device [ 639.145665] loop3: rw=0, want=6434, limit=52 [ 639.152127] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000040)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x9, 0x2, &(0x7f00000001c0)="fe54cd8642aa3d0dd231a648f6f19088a6150e987855c176bf4740ba4c2c0b3dff1ca0181389034378a587ee081304aa847b79bf9deedc8bd3267632b51d285bc717a845496675762598bb42077985c091961188b7712bfc021ffcbc2e6d85e66ca86f90cfb5624accb1e8dc999d791a242a6cfbb79ae776704b238dadf15e8648f23676d29c132bece8a137abaa94fa77fb681de19997d384266799b7aa1e2e5a795cedebae55322221063c4272f5de1e444498ec38f87aca8f86e1964a326e", 0xc0, 0x3, 0x7f, 0x10001, 0x3f, 0x0, &(0x7f00000003c0)="f631d7845d0036a5db3ebcedafb6dae6e48835af1f9fc701850da11f2145aac206aff471765df8687af83f6dce6e62ce2cb90deccbc86f4af11ca89aab645a402049339f5929cb2aa30d8aa55e14733cd106db6b130a38da3c20dbb5052f99a5a33f781560ab43922f22e5d24e9b8385477e2eddbee1a8bdae9314c147"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x88}}, 0x800) 10:18:04 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x3f00}}, 0x20) 10:18:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x13, &(0x7f0000000340)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80) [ 639.247153] minix_free_inode: bit 1 already cleared 10:18:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_IFALIAS={0x14, 0x14, 'bond0\x00'}]}, 0x94}}, 0x800) [ 639.393763] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 639.422036] attempt to access beyond end of device [ 639.446668] loop3: rw=2049, want=6434, limit=52 [ 639.451391] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 639.493716] attempt to access beyond end of device [ 639.526623] loop3: rw=0, want=6434, limit=52 [ 639.531082] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:05 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x4800}}, 0x20) 10:18:05 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0xf7, 0xbe, 0x2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x81}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x5c}}, 0x800) write$binfmt_elf32(r7, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x1a, 0x39, 0x1f, 0xffffffff, 0x0, 0x3e, 0xac, 0x72, 0x38, 0xa7, 0x9, 0x5, 0x20, 0x2, 0xff83, 0x7, 0x1f}, [{0x1, 0x9, 0x9, 0x9, 0x9, 0xfff, 0x440, 0xfff}], "7a564b5b3c093a3610213a5809f2fba492a925fb52fab70c26ed70d1e7789e5f54f2039e1937de5dbb920a252110e6e47bed7ed98d4b87c066ba25fa07f2438f4a5147d1d48a7d8b5f5d8522f61cdde43f241ffcb691151f7114c27154eea9", [[], [], [], [], [], [], [], [], []]}, 0x9b7) [ 639.628093] minix_free_inode: bit 1 already cleared [ 639.841107] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 639.871830] attempt to access beyond end of device [ 639.880931] loop3: rw=2049, want=6434, limit=52 [ 639.911741] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xc8, r6, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fffffff}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) r7 = socket$nl_route(0x10, 0x3, 0x0) listxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=""/239, 0xef) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x88}}, 0x800) [ 639.961052] attempt to access beyond end of device [ 639.966132] loop3: rw=0, want=6434, limit=52 [ 639.985711] Buffer I/O error on dev loop3, logical block 3216, async page read [ 640.087166] minix_free_inode: bit 1 already cleared 10:18:06 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff003) 10:18:06 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x4c00}}, 0x20) 10:18:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, &(0x7f0000000340)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80) 10:18:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88000000100100040024de053a3b79fe00"/27, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x88}}, 0x800) 10:18:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008100) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f00ff01000000000000e700000000000001"], 0x5c}}, 0x0) [ 641.095074] kauditd_printk_skb: 5 callbacks suppressed [ 641.095085] audit: type=1800 audit(1588501086.847:693): pid=32614 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17025 res=0 [ 641.127674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pig=32616 comm=syz-executor.2 [ 641.143241] MINIX-fs: mounting unchecked file system, running fsck is recommended 10:18:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 641.186192] attempt to access beyond end of device [ 641.195674] loop3: rw=2049, want=6434, limit=52 [ 641.210209] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 641.230758] attempt to access beyond end of device [ 641.236072] loop3: rw=0, want=6434, limit=52 10:18:07 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x6000}}, 0x20) [ 641.260457] Buffer I/O error on dev loop3, logical block 3216, async page read [ 641.262083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pig=32616 comm=syz-executor.2 [ 641.282622] audit: type=1800 audit(1588501087.037:694): pid=32618 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 641.347405] minix_free_inode: bit 1 already cleared 10:18:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x141000, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'batadv_slave_1\x00', {0x9}, 0x8}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @private=0xa010101}}]}, 0x5c}}, 0x0) 10:18:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0xffefffffff7f0900, 0x0, 0xa00000006000000) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000040)={0x2, 0x0, [{0x80000001, 0xd42, 0x1, 0x4}, {0x80000008, 0x2, 0x400, 0x2}]}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012820c0001006d06000000616e00480002801bff010009000000340005800a0004000180c200000200000a000400aaaaaaaaea3aa9a74e20bd923f1404f1aabb00000a000400aaaaaaaaaaaa00000a00ecffa9aaf6409dc4c31a880b01ce53aaaaaa2000000600020001000000080005009b7e9667cd1d1fcd325e92597ca8d7a18e0bc5c018e1eb740dd2ea11e53147280ee250551cd0c422c76eda33d13bafe683135b9a", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x88}}, 0x800) [ 641.489148] audit: type=1800 audit(1588501087.247:695): pid=32631 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16269 res=0 [ 641.547119] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 641.591080] attempt to access beyond end of device [ 641.618660] loop3: rw=2049, want=6434, limit=52 [ 641.652486] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 641.670725] attempt to access beyond end of device 10:18:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(0xffffffffffffffff, r0, 0x80000) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000000)={{0x4, 0x7}, 0x4b}, 0x10) [ 641.720545] loop3: rw=0, want=6434, limit=52 [ 641.735369] audit: type=1800 audit(1588501087.487:696): pid=32643 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:07 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x6800}}, 0x20) [ 641.846300] minix_free_inode: bit 1 already cleared 10:18:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 641.901700] audit: type=1800 audit(1588501087.657:697): pid=32658 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16271 res=0 [ 641.945795] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 641.972204] attempt to access beyond end of device [ 641.998718] loop3: rw=2049, want=6434, limit=52 [ 642.010521] attempt to access beyond end of device [ 642.016170] loop3: rw=0, want=6434, limit=52 [ 642.022614] audit: type=1800 audit(1588501087.787:698): pid=32665 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 642.127633] minix_free_inode: bit 1 already cleared 10:18:08 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff004) 10:18:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f00ff010000000000000000000000000001"], 0x5c}}, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000000440)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x1, @private1, 0x4, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x47}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="2166b1e41f2d92f93f3c622dc32df1c589ecf6324f76bc6f7c20509f0be168ed82c54d0888a1577a37dd93a42d3aaa2c59ba7bcb486a9ef59492537453"}, {&(0x7f0000000500)="ae9a4b00b2fa2fac9e81de5019bbca992f5879c61ec5b722531bb94194b8917d0d00e9bf3dee555a1bc59cc8e3ae0d7b1bd5eab097facf1b37e6e5d11d5698e7e1adaf4b2202e12a05c05eaa17880095eb8f877a0dc6cbaaae93f45d138d37952c3a03f4a74ce02dadc0a798ee3c63b6c5a0de76a43eb421aa6cdc7915b6ffc2bb02aa8981314d238b201b9123ba700ba987b7"}, {&(0x7f0000000340)="1dca8590b2b6758b61bd4bc48079c492ced00e17baf7f1d0ea0736fad1bcedc16134b64ec116791fa54da753dd79c6ebc5792f452e586d06fbe3bda10a8e2a89c83657e33e724a948a035a8a40c81e2913cf661fdf3030924704c70c553a1574ea37597c5140cbe37e3dca30a92c935f77964d75f77e83e6ad1cc3"}, {&(0x7f0000001200)="559cfb3959990ba28e65cf58a3bda3bdf9d9585e9064db5657f74dd014088847df86fa705d486630c16f781b6e83557a1ca04274ef3acf082e62abffb6b859569edee72604359e1c5084604c2ba7fd723af3a0821f098df074d297ad4abfdf3d29efa27dfdfa32c9a43040f783de2520fd7571c644e686b4b8d2992119c541fd109e8045fb070fab6ce5d0cca339affedab637c1e17bf74218d108dfe6ff71b2e715688e715292c3ac8b4aa03f0e859acc8ec1b82c84b50aaf9b4fdf57b7c375c76c1931645ac8bd94ca29825ff40d7da86bf1dd9dc42858b5cd828e742fbe40d4bac570640173cc8ce4463dc9a37bcbb29dc9f5ed1ff860f6ab77af58f36b3b480cfd15a08d4e268c9e23cf8275b642cde7963b76bbc7cfcf802b594499f0f334b548d57fe003e638bfe4cf96621010e93701324df0ed936a6c9cd1d6ea4f9de4bb96d60742af22f034f65a9902b90b51cd8b86a7e286b7d71a1e90a4a56e1b38f115f49ed94b22a9054fa4ae337f1d2b7e4abd439ac31577b2ac5bcd6e8fbd1acd90a8ac2ab8a30a51ba7bcec91163fff2c986065ab227346c7abc5b2ab3bcc5a561e655d5d90ad05067341aeaf419ffc842154f18ea81ff10420f411e842ad980af6b2508fdcbc1ae5e0ae2014144a71490a45280ebeb7805d6d20a17ddfbf8c535776d4f7a9de4168acd53f4a883d3a28ad3881ef9649d77ec7c389b60698c14d17f44af36717f9cf81f02356c32270e852c5acee5bb2c8782e1718d03e0cb951eee1eb52e11635a8486e384610e1c4785aff45f11347980c3abdcec9d2685d36e5aae9e31b876e8a966027f16e2fd5c51e34cfec132089e50b92bbca20ea84c07e41fb384151da773c14d486367f59050a6597930a319f6d664ac367b5ea326eea806aaca8585efcd1ade22e8ab5d5d4180e37c32e606b6517133271faf42e718cdbca47602ab94b8a663589dedaf652881f0e3c64ddd67fdb1f4fa271e08a145401081e28fb23f08c6ee673e819f4a46f351abbdb69d5ad078d023fe51e3275a8bac612c57d148d1790cb915b8b2308717f36592926fecf671cdc5a78f983b31fc251ae2a5f0e7172c8bbe352cf74dccfd04f9b9e50dcf7c4fd6c5ab339f4040ea86238c7a86550ae2d67e0aab4bbd72bbb2460de4dee5e9f9b5a2c536c9e2b8e9b1682c9e19c0bd8d4f58b750c34ec85b7aa6ff2863ee98015a6ebb5eeffa71f1709a244ed12c6ed22ee2fe6ff53e887ea0e78254964800b75b3e3b971c3e66cf875d5f6962fdc66dc7bd466495a5583b98f33e35f121c1a4042ec0cd67f33348c3939e231bfc11ea73ec33707dcd6dc0af425b4d1dca245d4bd174d5dfc55ac65b3b056f532d0cabe57317529c535e89dad39759415e9bd5347d24594e30f3f31e094fc70758d69f41e186fe44acae60e55f8860c34b042ca4bf75da5d1416ddedcc7063e3d621115bc2dea657db518115109be2b533f7584a0fe80eaca6b9f20602c47a946bda5e50170952482fe5926a720f047f5c2814f9b37a02718134e00b2ce4f1fb69b33cee5d2699d854b64108abccc915053cf629afc1446494ce0d0ab0187fc55c0d9a37c6a0e26c7527ccc0565551d5530edf5f32c2ca05142ca733cff9e5ae1acee33cbd4c58dfa1ed5a2e9891d8e926a9a25964e3cc3804ff07dacaacb41e9b88c3231a10bd29b9d7804785c6a7c26bb63da716fbdcbd85b28d74345879f5908c72a5ae386966306cb33f8cdf1e652992b9e160d2bb798bfb6533a5581c490f787af81d2981b690b0d76f50f0557e58c909c76091c9e65d796a045b6234f57cf2688542ad2540869606c0b3194dcae088160b83e0e7479d1c6103f79f4e22bdf9e6c089918759f39a0b9dc3b862d564e3aa814f69ec7aa2bb92f497c9e04d50d635ce0f6b2c32f89827469ebf54def1db810195edbfd40a50db5beb50bdb02d32c8b45edcb9923191d206c496254e41abe460e3fa3f23ac5faeef4cd0dba6e036e45d69dd0e8778cfdfed40b3d8cb9714848602f3163a978b9fc25a36ab99a7b4f8fb11b5a71a016079aed9f310a3b69de231df7900b79bab481a6bd397d4303ee51fa685f11a45035374f688eec1f548e8b0e14655a8ccfff3109ff6411b2b97597628c56860d2c7945871da4a3d0ab37da8b8ea9175ead9736a0e730b528f433df6fbd10e97541d29ad60a97fff1ad93d39f9188deb9a4cf242c5226c7bd78c6d8923d67d3aa626f7359a50e1acbd932d63e4e2e0b74de6b815ec8bc0baab04248c084dad992903a1f17df78d2c517c7bf443e9c94148d586f3b701a22aff033643e03b459a268b65ecf7cd06f0a8867cd89c6d88604b2398d4cb3e2a90289ffbfb6935426f093fca20fe514f38cff42f98d76c4f90bb59db0bd232ae417ed402e2ac9bcc6af0d8944a8f244bb1d69ddda8bd56193be80e6b2ac659b86cb151d4a9d2c1e675df676b9e70bca8ebe20f9e17e1708b0547ec37226ddc370990d985a5fd3925f795272e8ba278df68c5cef0be5af4fd6c60d9a15e0426f9e5c5ced798b976144a4d6a21f830b6357708cdeb53f2d78e9349e1915d05d99e108b8d7fec72637ebd574e8c7f21e388960d906ece5cdf4f08350b5a9d8eb69af025378b4a8d6699716824560905420a1984b5cb851dd2330b129308fd53b2ed0a1eba02bda2692a4fd84e96390c05cc83b3150eb924c883e3b7878e5c8c45efc4ea8e46066923c77cfb57c15b8d2d138f74d3214a6556b0e52a9c3361eadf9e9f0f04c23e03049e4829e2a079cb2610a01dffd697cf6b70d7bbcc347f9b4dd479e39e513c8476e84bcdbb142fc0eba7fa1795b1b7a311e593d58d57b86f4c638821c76d08f5f0f804d526da78d545a7cf1d145f87991373bc8235ea89c14d11871cbdc90274010ffecdda877b5215c9af83a800b611b92eaff595858cccc78a66b6edec91d9e3f2d4979d5688e6f39b9459733d6033c80b4bbd4b5f2c7562ffb42e66079693c43f21cfc963cb78d8f4a4a3a2df44351fdc834bdc8e647c11949a5dc2acc6562c6987293b4168a6d3b107e45cf4fbd52f55c59cca905b5c7980a30f209f3290a102290aafbd29ad6df2ad5817f22ae84adb1563b36caee74ee8bf9399602a9813efd9e8cc8db159780bf01c8af90628cd46e61eafd5577b6d5110a35343b6d31506966320b82c4da13e7dff6076eeaa0cd7346e6590e06deb7cd09912901bede681efd29fad560abf84337d515f45744480b35db032adaa848726a31ff60c22667e6395177f79ad0dfee724fa6586588e3df80d38044ed40a817a015751d277f82e0d176134f54974b36d755404ce0265e839c0cebfc4651dfd2b6ede193b9958bfa173ebd601a454cac4821e25618b9131a0fb712868f171beba737a3b98bb496929ee6cd5bf1ab2899c6748159e9de4c0b369bb98464245e43c956349665e54ecad132949b13ee4108d347deefc11dfaa3834644c4be0475d17e4e462809182bc4439b9bc71f0f1676c745e1e7efdcc1e026cf0c9e16347822aaa1e479b70521d1e35b4e8e25d47f10426b20d677f56f8be1ef27d44713d66280b4566df127289d28b30c11d0d817af0a4bb5df6719dccab8b06019735a95f943840906349138caa96fd2afdd4bb24a4257ab7c677933d392fc9971ac78286e1857636e9fd40d90ab32268c5397c04980fb20ff5e45d8b039a6e1aa342acfdd534e35dfabffa69be609b46950a0dec1a40ce65b24f0d1441d65d74984fb6dce7824c2099639b8fff7a82ec7a7eba21416274304d51e9f95fbe73f9a187a5183f8a53d9ef818fb95750c0437e3addda3dafd2c47c2f69a0a9f87255bf143d983ef43b1482c151017902982fc423d4ec01b9c429989f6d050720c81d3983858bc42f202474aa6654473dae5970b5144f66879e1a1dcbc518bae9c60f455cddeb0025c5e49d08817f036ddb1b2ab264eabf40fd704f2aed87ec86f7dea86bf5400e8904e6f6096176b57719b75b0f41997b1e3147b83090f9aa596c55a56b25cbc7f869308bdc7e2aa05ae8f5e4bc05ff8641fc64e0f6d47548704302d5b0b64d9eaba0cdfcdb654d5ea347c42462c6e07b269428d23e40adc66e9248f1199233903a37da8818cd70aa5855d722a64d9d00e1e7d37927a0939d377fd0c185ff352299b346a84580f610c1f26942153a128e948e21db546ac979260f84a99c3709481bc80e5ed4ee0b1395ce74fa13df021b5d1a9ca013f3f1fceb2a012036e28f5f7cf45de4e20896f474f58738ec0c22f20d45bfc2596a19bd02d6f59bb59950e4cad0057872b8722be333784d296c6b1f7e14c2f57db2bab467b926fb72107bcfa3a37d01d1e632c1a54269cf99d362b56ca882e3c22764e3a641fb1aa2926c449a66cdb70b4eaf2f5e424fb2ed5c2af27a06d0b0e1d53c4892d72c6722232d0acba8dc76537fa6007832600f572ba6f15a09963f9aa811d864a5dffacdc15b18bbb6f772e5cbea44c4998f1cad3e37590af2fe521c5507a073ef6f9ea42d2f237718d1d0ba00ab46bfa0440a3d8a9844d4a8a82b06d184917fdb95abef130f4771f288e1d6be2829156da58fb689524916817b5d6be930e1710a67c3b0efc784687db3ff3ba2f26c7ed8a57fdb5723f1d3ad42afcddb6854676d960edd044cac46e734405212c26a7e46552f7990d600b78f4d34e212626b9e39f28d8bc2ab605a939683467e2cbc4c967e4ad05e113594cc3b1c6fd7ed528ac37ced54259891d6911d2d4a166fa291ffb1b02ef1f9f3e3b584997d230899f66e87ab90d85d50b85ea4d93161d8a924ae01dfcb0ce26e083cf70664da6c2cf857dacc05983930f541ffa0a1115d89f21b00ef3c673d7949036f2802df7644b01a3ffa4278062fc23b7ddad046f6618869d42ca3a4b3711fdcf8c7a52f491b8ac176f5c08b2943e5a2a58490532f28d94400f872d08f35db99c4c721848597bc5e5fbf21ea198c81f00a932bdc948936482c0d114ef0a86b3bf7dba0ce3f2aeb4f992b7e1079bda51a56872fc4eb2947d1b0ac49f093e13a68c389ab1b8ce97902f0f26782d8f2c9c5ed2222ed26f7391334066c8dde087af733a976387a18e74eb7b42d5fbe8e2af1b11d2505cb624712fb68fa7717a5d69553769864d47279869b67497fd5c3c4e82ef651f04feccc6ebbb118fcf7db647a53218ceb163f634baa74ef47dc8511863ec9ec969c126f6226749f684da6d87825c1c805f403caed36a381a8abd8e017ba7a76b10ed58600cd2c576d6a803693eb5faf0c8f8938b5d1f64fd1af7f19fb534c474c30c14debd1cd21677c844c7ce1402da22c93cdb83eceb9cde84aecd30ba9930bc84a304c7b0cfd5844247e7f4326e9337d0779a6e6d13a417268c03d0cb1dc4b15ffca305ad7b616554e664d455d58b4566a04dc7ca0c0583804d3c3499947d345a2571f92a77bb9cbee744523590b53cf9702a1d7e4f6331146862ef76e4c69a4f9f08ccd930c5051923c6ca07ff88d5a33d0de21d96d46235d8d0bd6a6895ace52b9ceb614f720808c53111d1009b45bee25bffb4774c35c526ffafd9a9fb9a863d6e2967ad2017c70524ca2ada0dae926d5ec4f7b9937fa2437f6a56fd837a786037b9d65947a9c8f8d64b0389e7e4a04430eab5d05b4bd22deda6c1dc088b6b4373a949d03313fb7bb1102b727b479291928b7d7665a9872c54c1c82518b2b1fafcea87b36f747324e5bfb0e88094f79646f46be850488075ffc5a136ce09506714dd38a75eeb29244b904b1e02566"}, {&(0x7f0000000100)="261a62df5a3bf00bd2d6b187dc2faf05d5ef704f8e149e978b6a1dcd6b0200b6deb39294454cdf7ed84f369fdc06e02eaee833e7dc7d817d0a973d8b9390498a"}], 0x0, &(0x7f0000002200)=[{0x0, 0x1f, 0x9, "81c116444855a9c11d96cf134a52413340fe2fab950159c668d552cbd749a2a374d21ad18fb18d97c3da918fa6610369c8b36b3c3139d15449f2b1ddd1b98b6d3dd4adaa200d9fe3e6e46a3e6077bb5b0228ee6a1773ffc0c359fc90229d32fcf809d6c71affe2ae84e4e0b7513ef9daef4ec3c6e98b3f9d573fb30071eaea0ee488458ff60ce6712a24e2cf274908d671bf96ded6"}, {0x0, 0x113, 0xb643, "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"}, {0x0, 0x11, 0x3f, "e912639a07681c91d6afa10851e048549bdc29dd90502c01773a00dc426874a21a5129f3d4559c8ba4fdca7790690a86048be8d5e2b8c828c45f7c0b953a47e095de18c0263611a317ba19a3805075d7dc37"}, {0x0, 0x103, 0xfff, "c44ebd35c58017c9a1d360c8fec05370929a5215a292ad7807aac009ba51469ce3d01daf9e0568c4d1df6fd4a8dce4c172a478641ace0fd74e7b71085c4cd4cbc4292222d05f06d2c6460caea38d9ac474c2b874d4ba7211f30dddeb550db0e24aaa1aaf49d3a5d5cb946219deea9dd61b87528d98a1c110a0b68340eb2a935937121507b20e07a95ae60669236d2a25aee76c0b91c3d4ce2e93c650d93255913071e320e918e7fd69635a220e21a5e8ea9de20cb096960071f359f0af83"}, {0x0, 0xff, 0x400, "c760c5407a99a828a38c3c1401b8dde21a9a0ab1e9ba8dec562bd5f0ab53785f079bd8aea7326537655479631b30560c0de5765ce7a2ac9a45a8c52d5c0c3d1ff2fd7cddac3040a4b165ed98cc174380ef0ab0ec94e22ceb34ccfd4cd3cbeeecc15c58361422a8ba89e27bc1aa2a478587c5816eddceeb17f4151fa7fcf6b9a006cfc900ae422fbefe9766c35052576096c72d24afe58876c6b395e3a44f67fbc778533d5eecb9ad69a13ebf6ee469985c104fb7295a72021fa393d8b2b0ed17c9455c6a4b376d6336e119b59169ff678513787d18ecb5c4f6d6e822f5cb66d1932a409ee53098956875927ee44bb3ee3feaf97d68d96fa0ece1294b6332b2222cf6ed45e0395a25791689fcca3249d6da6436a1fbb028e200dcf3cd6fe8d50dafac0cb4fcef5f4d5db3b7d032204382fb297ffd3e48854f4ac8ef81cb37c22dbcaeeec73d30f747776e85567d890db559f2dabe4621d35bf5db58c1ed68a2e77dba8241559e6830761ca2df049cf3b34c3d67ed705b033e98a1a2a2f7bbce5e3fa06801bf52a5c74f896bdfe70b010291526eb2be7390edf4c4177d8df226b72994888094417fda8c6946435cabf9270581ca99d941bdd75c08a7a6833fc4d86c04ed34789bfeea673972a3b0002c5f20269130361061908506411f8757b00b1629a113428cae6e39cb915b33e8d944bde937f18030dab245b2483753afe016071ed496538460c22e8583ea5b03e835621821819e184b702c2c2491a52418503ffed160c6aa9894ee92a0c79b9e7b9b5e89de61462c61426e46cb9fcd9c839da50a4b25e628e6675bfa5e85813c2b1b1e6b32a69c0159033392913cd51c79d5151f325457ee4976e732ef5a7acb4bbc82886b6bfbe38abf5c4b0d4e337cfcfb4e24ec0e20d69369931204bed24ec8db44b6fd50a46bedea6f15b6c8eb252bf4ff0d2f1be2fe174252e15ce394d07215c2da811d63c12cb4a789b6190e4a98bb835db7debc82fb46b9d8c952d1cbc54b9dee73ca0263b3f2ff87e16f9969a0332eea263f7265ce5f27ecca9172dfb847d3434d50f9cb027521cfae35aa9be3a0bc102796de39dd44548471b61cbc483c2757d5fef0c6878065c15e359b491ab27abe826db80c7c825146e1b5fba48c9e64b87ce94c7c6f8f6bd7b4959302700fc59f27c491dec2c9b800c4b0eb808ac3889e87b4fe55c9d3498546c2b7335f57120bb113dff727d219bd8e5b6e1ff254394bc02e047fd14953daff5f424fd8fa698e3d675b5b31e872141b3f6f76fff724ce212a56a526dd318293d0f6947b848a337d3a809bb36558f56c3451f9da84e7d9cb753cb55a0c1daba34a4c37b8f0cf441bd7bbccf2a2d04968bbb602fde4f9ea4a283ac0c194e85b7ac00da02a04eb06ef321da82b037c6b66c97a9b6c32869d9ce4b20353c2243f6958849897e1dc5bc4e29279a58edf68120ae1a4c2e82287aa01d79c11394cfc2af5f6e095b540148b4d99efb0efbad8650e36c8a83bd80beeb97d199d02899366690dacafa2c706ccbe76fbeaa85afd32e87d6c462df9fd90a7f56c91087c00381860cb9791e15d35da385f17f758cc6fa2c5a068c170338c4f2c2b6753ff3e4e3480876f32530bab86d99d14c0dbf3a29afdbeeb378448f08394bc9d9f2e3eb4e9dbf214a40170f307533c0c82d89007150d21af99f0bdd91a3cd99fe7f8ea324250cbcfefa41a2e2364852c413f0d061d1598f33a783ab017ba468b4feedd989c38b2fd4c08e5f96affce2954a7ed1a4d0fd67b6ebae856939e0b939a18323352eea5906b40b6b87ee3c945a5a48022fe29f6ad59bc5d7828a3be2d4d179582215479604646da666783d3e3ca12154efcc0bb2b33a3b3df8eb14ce2b0769b47ff78d7fcd725ff4a611f4b79c4ee5425d849c5f382e61557c58a78700b770833dd83610d033d20936fe1d2b1e58cedb754d5a907bee8b65b26a0c0df7db9b6020aebe052e280f3a0455ca8adb99ae1f44ad80c25d4eacff5f803492c80979088369c6dceb0d6ab0d8261568656a0f3ef9f6965b69c438824f25d1d0f55071f52bf486c79c1a5a1d0b91263acb8a48745a1614220083b644833a336cf7f1c3e6c486dee925cc9b6a10b72eb2ffd630a1c071337aa221b2a0f4f0f25ac5bd73bbd10e18a5a05a13823d62f5170ec908466854cc82a77450c2cf4333ed6635148cb6e35e2e77c9dd83434f49661fd9780503824525e59319002a1274568cb258cd65c9ceac0173993e6fd37dd4f5e1cdd65c19ae40a8274c1e4fd64720e9d0358aca970e0a7cfdeabf7e93e2f074f738a121482454a2f8ae8216b0bf20cfde1b7e3ad356a5f48d37404f41551af99551ec539d2941b2bee6fac1d5ff9aa364c004b01f688afeddab78e6bf4edf1867eca7806a2e39ac7ae675202eff35e0356d80b4f6a01f797fa78635c517514682276c1185fb12ee9f532f1fde47ab7abf7f3bbc528d1757314e7eb22d0b8f6ab72bfd96a07582516a5ba3936c8108a5d3c17f3f7fa27dcac920e32638c1ca784ecde50ca3291244bc37b535fb0ce3868d6c2c6b7501bb8ce92732f907a5f8015715766e006291d60b64defef7b80e54fda2f1d88eb229f673e2afb016f51990fb840dae63218597b008f278508ca776891502f53672b504a382c3fc8c6aa18b31e2656d6a01d39642c57d39ba76b7d1fe5f6ab678ee28c9109f14fa53feebc1e1330b3a369619e03fcb203b641f70225359c1d3e10ce6c402b39d0cb69d8be988a72d894c7e90b9602317c18e464f9698fb1a8fb67b0e6d8e741d634d4a0d9ebf00e2de0f972bfe04e559e041d31f3ce1f2581adf8b294aedc96774ea59233518deb3d93d24ea55f4209e0ee6bfd388e3bfaf576d7d609fbc2b23d9b8c4f662b512bb65d5db0c41f35b60190809c72aea43f9e9936ab53c9ed933465c35c87ddef1c6328f97124f333dba7d3c749de9c53dea0d3ce9986e616585962daaa7d495af73630c09544ba924e7a0b271bac714a7550bb708c1efbb3236656d679b608edf8d67c1c91a29657642172069d0e69fbe9958cb8879ad73c618cc8310869149f352ecfbaec3bbd210c9277eaa7b9e2abea8c508e2978d797e2b03a9391561e039a5eb8221a51e1010f36353e7876c2f0371b48746fb9e942f91abb48ebb46cf3a1c62a41b2df70c009ade127e09ebaa2d4bb624b59ba9354534ab456cccb48ede45e544113dd821d89b4d74850c88051d8ec341b813b8017d074d4db5d84b659b3019859719db76315b42c8eeb52bd035d7a215e5448be9798135306950494256557fe4b649548fcdf9119df7b087ed1aae28cf96ee438db1efd778bbdf4515b2d48a72cf4b02ba14f8e21726508b9604dee30589c41d7c9c4b20627cea0994f9b3f824d95d8e176078316250fe18dcab4af2797d460340a86f59bd286b27fc061ca9bb5d5e751252b50074817584443bcbe19f159547ae81d0d02c984b6722285d0be69e8a47867be67b8040bfae86f32eec6e37365890e41d8fddf562c95e9470ebb66add3e5411695c227c50a9a629f09550dcd43e96210afecd0e3ffb2eb567724c3e95cb646580a8cac58f201e50b226f23ae5408bcee541db007e853f2296db41d26183db293e85938d4c7136801ae69483f4a85f9394988cd67d643cb303e74941e349614369d3184f96424b9a7124fb0df1371de742d36ab13cc95690e3eb4da9fce2741bb0d6975c34c304b51a31f7e35f072dddeea1b71d89059e417ab4be11dbc768dca5532a3997d44d8ee34762ea05ec575ab6c4673acedd1a92ddca998bcc8930fb159bce4b123065e603599353bbcfdaa7e8d2bb1c660b23b7aed7eae3613e6c86228351d76f501e77341414b87e3589cce153e31bb13e7e045af0b58860abcee2fb4de9aedbf277f7ed3c74301850f47cddec6ca90d9aad0916ec342498b65f5f488999389c6aa9d77a6064e3cc1f399f6929e1d0277f59c44c34589748f5518f223929626cad98b0d72e123d6105a37cc4e3044ed41bbb42f2cef1b28b00b8fa71b70696c227917869389cd4eb189ea5eeaf3fd5042510918fb54628e6230fb924b768674931e6e56425a361620e5f7b68fe9c6f97aa5e34de9fc911ced5388920a7907c39594b65f390aa029db540fa11d5bc8a82ea3a92fec7fdbc3e85aa406c44cc17b2bbe7c8bb9d6187cf4a3b20d29e57ad9027f33a608618de6665d4c38a00091ba80c0ff2aaa451bf00ddcab7a694f03be0f459c27f68ed623685a5f1fe53a4e1349de9b906c47e0b8bb1443e4ca86654c6d7f89491a899d2a52aa3a98d426dd22d41c678eaa601c96c3738203f6511e4afbe9306e350feef2b429b200ae97a917eae6288a0aa7b9effe9d97f0ef03e9c2bcb32199c9d98ff7bc5170cc8e75f64f87a45abd8439bd5f11121b3e93eb54681e0dcf8fab57732a05f8e1f4ea964bf051275c2c871f02b6961e1e4fb0fb7d6fc78548db0a60804e53d279e010c8be8d0ce3a692b6313cdba2e78dd21bd8e1de0661c5f5d4cd28d4bff08aadd2a2542ccce74abc7e9c5fee35c7ced23d6f5f8e1194cdbb409476e6a3365fbf769ea9c6094ed0d6c686977d59443b375411d8221365d8ab768b62d7679aa700ad0ce98102e733d09e252e35e9dd05cc6658e73be5f20b78390403a84bcbc59da0af378952cbdfbfe24fc45927fc28c8c386ed3ed41097540d5996307c8cd5ab3814c7134be35d71af8097d24b50f7c73fe053bdffcb2cd895622ec3abedcd4bcf8af0a8ea3b31f4600cda1406041e4f935906cffa5736c980c68348c50707a4d827751b13bc847695f993351e9fee73930899c3e6ed6c20711194920caf1142e2472247495393bbbc2e3791a98b9fc71154b50049c012d282d159ece6318ea842844403571de7587ea11cda5daa4f75a0d0f2967dd5004610e12ac21e305a1a48c3e3f3ac7feb101576aa96cc9bedeea83c97246bed9bbad358a284d0e1d646b05bd56eb6cac411b516b53e2b773cc45c76b51724ac16205079e817908ee4ca1827d313fa627ec54e5181f74cfdd8ef821a893a088672e7216f352bb77435c9c855406dfed43a429a294aa30d28073ffa3cd2d659e70b53ff86a4ff2caa70dd028df39c9c9b5c981f751be9d7efd198d135d65e2774854c7dfe372dbe419cf376717bdaec61e6e0299d5d47bb470afdf6f6717104432aba8684ec485ed0a09d0b3d2084a90f7877c72b009330a3a00145cc09defb6aed5d944c26f4e219572d3d07a43da4a37e970c3f316bff026f219497ed631127ad93aff2cb21d33e9f390cecc143beda0187651398c1e13d800b15c633ab78f55bf67096c5fe68457bfdb667caa307127f51eb1034446c5db3f11f913adccf7bbf98dedeea742eb6240f66b1a281ff6e6895bdb0671ede5f60213978b6e5a7c71dbf5ac438242eacbd4f8d2be19388d95d396db8ec8e70f3ac89dba17754d2d77fb0cefc00b13eb428b54ce3bdd5be8db7a9792ebb8ddd3277d635eac9d98fa713959d221e66b59d8c724809be29290633689b42575f2ae70a607963af50eb83b6f33abfcdd9d391f24312bd0abc5461b5d93b1d5638985698df7d5efa1f50d6e70edaf5eeab80fdee6f8b3674f41a2d5f4e6a6f602cf80168eb8744d69e95db6cff5d8f87f67206a7474809b2001f969d428d4327eac0c1b23242a6afa7302bfa7398faa5a571f2806352380d7cff0cb01724a8276e89080d8c526c6713641ae4012345fc1b75fa06f676639591f9b7d43e3afab9471f7d"}, {0x0, 0x101, 0x10000, "72864f3979a9e41d6b636493d73335045b05c01c9a668c254f4c8024933191103dbd7046395de5b0102d1f97e835c6833b2c287a78852b01fbe181d4ad082262454b1bc1fc90fe09fdc43b0e6d61e71e1a6b648d8c0e8cd144c6b09cee54d7d16d0ed45fb1d2b5bad0ae2425c5501d8463da02dbd1ed7fe49463a35fb5b55fdf1c83e309339a6d71fb96baac6e0684f5dfc69a5295c0a461949b689f79dd4ca19d1e6e95f4df5c021fc3007bbc959cbad7433e7d049d3dba7ab644495023c77a8b86ba605ebd6f622a59b7a9a2c29f988dd54911f3c52f5c1609e6ec6a45634a9c0a88e0364b94f6"}, {0x0, 0x108, 0x2, "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"}, {0x0, 0x10a, 0x1, "e723e20f81c84b2303c52d64a43f64e63d56e9d8c758f0dd4d38f1f9dd6148cc32f4cd1e1532b41b46443396c77c94c8f108d7aef0f16a8bcc58c86cbd34"}, {0x0, 0x10d, 0x8, "a32119afbc84b186977d1e6ac2ccf917e80e1269387eeddaf90663e0532b0fcf5e2325c75373175338638c03cc81250365b288693f8abae5f1333e676c4a82cf243bddcf3d845a2e3a6dd99d16884a5f1c08b0bb1ecc1f3b279e642b90296688bbb2eade7283fb8699ac302a2a430ec022f13651af0e293b5a90f0dfe68db2d427b74bab2813b9772f0c078c7bb8459786a61e41fbefab1a2fceaf836b5da1952d10edad4e17013c289ea53b719754df6169f826e08f3fb8d0af23867551e3e62a00d028bfae2e95baa3"}]}}], 0x3a3, 0x0) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10:18:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5ce9f649431c000000", @ANYRES16=r3, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f00"/86], 0x5c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e0048000280f300010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa20b670cacde19bb000000600020001", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x88}}, 0x800) 10:18:08 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x6c00}}, 0x20) [ 642.282000] audit: type=1800 audit(1588501088.037:699): pid=32676 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17138 res=0 [ 642.313527] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 642.339383] attempt to access beyond end of device [ 642.344357] loop3: rw=2049, want=6434, limit=52 [ 642.359050] buffer_io_error: 3 callbacks suppressed [ 642.359063] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:08 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x1, 0x18000) ioctl$RTC_WIE_ON(r0, 0x700f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = timerfd_create(0x3, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000040)={0x0, 0x3a, "feb0bfbca713832b6a2de3014f70de587fd59f45c40ad485e8348021f0f0fd7ed39fa2b294df1c586f13c2ac55ffcf45703f7f0356c008e119e5"}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) [ 642.397124] attempt to access beyond end of device [ 642.410273] loop3: rw=0, want=6434, limit=52 [ 642.415168] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 642.424153] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:08 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x7400}}, 0x20) [ 642.445515] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 642.455793] audit: type=1800 audit(1588501088.217:700): pid=32684 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000000)=0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) [ 642.525692] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 642.555100] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 642.565754] minix_free_inode: bit 1 already cleared 10:18:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x200, 0x70bd29, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0xff, 0x4, 0xfe, 0x8, 0x3500}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000044) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x88}}, 0x800) 10:18:08 executing program 1 (fault-call:4 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 642.783283] audit: type=1800 audit(1588501088.537:701): pid=32698 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17234 res=0 [ 642.834438] MINIX-fs: mounting unchecked file system, running fsck is recommended 10:18:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000400)={r4, 0x1, 0x6, @broadcast}, 0x10) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={r6, 0x1, 0x6, @remote}, 0x10) r7 = getuid() mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,mmap', @ANYRESDEC=r7, @ANYBLOB]) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in=@private=0xa010101, 0x4e20, 0x1000, 0x4e21, 0x7fff, 0x2, 0xa0, 0x80, 0x3a, r6, r7}, {0x0, 0x9, 0x5, 0x7, 0x8, 0x5, 0x100000000000000, 0x971}, {0x7f, 0xfffffffffffffffa, 0x4, 0xd5}, 0xf2d1, 0x6e6bb1, 0x1, 0x1, 0x2, 0x2}, {{@in=@multicast1, 0x4d6, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x2, 0x2, 0x3, 0xb26, 0x0, 0xc234}}, 0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000280)="b86861e2d46ceefcc347a6f4eaa78eae0455ef422da16c1524c4689e4faade27d60c91b0fbca42731257bd6063e0e3d03e6122b997f7f04e4b61fd340bf8c09ac1dc8397fd8de1971d6981ea8a581d17d8f62e6712a8e9b238f34806d8a9fb2919d61a8321e888fef2a2e836f01faa904c739732f414f82c8a8f7f55e0caa1490c3eea84bd7bae14959b7cd3f71cf17a13d7afdcf38d78a8edc5ade40356ca1b2173c44eb909344afef89d7366b26dd9367b6e37c82f4c36ee4b", 0xba) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x90300, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bridge\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044055}, 0x4040000) 10:18:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r5, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000040)={0x3a, @multicast1, 0x4e23, 0x4, 'sh\x00', 0x8, 0x4, 0x6d}, 0x2c) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x88}}, 0x800) [ 642.878202] attempt to access beyond end of device [ 642.884434] loop3: rw=2049, want=6434, limit=52 [ 642.910726] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 642.963661] attempt to access beyond end of device [ 642.969231] loop3: rw=0, want=6434, limit=52 [ 642.989858] Buffer I/O error on dev loop3, logical block 3216, async page read [ 643.001850] device lo entered promiscuous mode [ 643.019883] audit: type=1800 audit(1588501088.777:702): pid=32703 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:08 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x7a00}}, 0x20) [ 643.067016] device lo left promiscuous mode [ 643.117568] minix_free_inode: bit 1 already cleared [ 643.132733] device lo entered promiscuous mode [ 643.177045] device lo left promiscuous mode [ 643.297243] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 643.315547] attempt to access beyond end of device [ 643.336802] loop3: rw=2049, want=6434, limit=52 [ 643.356365] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 643.377174] attempt to access beyond end of device [ 643.395108] loop3: rw=0, want=6434, limit=52 [ 643.410383] Buffer I/O error on dev loop3, logical block 3216, async page read [ 643.517231] minix_free_inode: bit 1 already cleared [ 643.665527] FAULT_INJECTION: forcing a failure. [ 643.665527] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 643.678168] CPU: 0 PID: 32710 Comm: syz-executor.1 Not tainted 4.19.120-syzkaller #0 [ 643.686060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.695424] Call Trace: [ 643.698036] dump_stack+0x188/0x20d [ 643.701677] should_fail.cold+0xa/0x1b [ 643.705579] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 643.710693] ? mark_held_locks+0xf0/0xf0 [ 643.714764] __alloc_pages_nodemask+0x1c7/0x6a0 [ 643.719462] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 643.724617] ? __unlock_page_memcg+0x4f/0x100 [ 643.729129] ? lock_downgrade+0x740/0x740 [ 643.733316] alloc_pages_current+0xff/0x200 [ 643.737656] __get_free_pages+0x8/0x40 [ 643.741561] __tlb_remove_page_size+0x2c6/0x4b0 [ 643.746250] unmap_page_range+0xe47/0x1de0 [ 643.750527] ? vm_normal_page_pmd+0x2d0/0x2d0 [ 643.755036] ? get_signal+0x3ec/0x1f90 [ 643.758932] ? do_syscall_64+0x538/0x620 [ 643.763024] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 643.768427] ? uprobe_munmap+0x2d/0x2a0 [ 643.772420] unmap_single_vma+0x196/0x300 [ 643.776776] unmap_vmas+0xa9/0x180 [ 643.780416] exit_mmap+0x2b2/0x510 [ 643.783972] ? __ia32_sys_munmap+0x80/0x80 [ 643.788311] ? trace_hardirqs_off+0x50/0x200 [ 643.792750] ? __khugepaged_exit+0x2c3/0x3d0 [ 643.797174] ? rcu_read_lock_sched_held+0x10a/0x130 [ 643.802205] ? kmem_cache_free+0x218/0x260 [ 643.806466] ? __khugepaged_exit+0x2e4/0x3d0 [ 643.810895] mmput+0x14e/0x4a0 [ 643.814223] do_exit+0xac8/0x2f30 [ 643.817689] ? task_work_run+0x112/0x1b0 [ 643.821756] ? mm_update_next_owner+0x650/0x650 [ 643.826432] ? get_signal+0x383/0x1f90 [ 643.830336] ? lock_downgrade+0x740/0x740 [ 643.834504] do_group_exit+0x125/0x350 [ 643.838405] get_signal+0x3ec/0x1f90 [ 643.842143] do_signal+0x8f/0x1710 [ 643.845692] ? __ia32_sys_send+0x100/0x100 [ 643.850110] ? lock_downgrade+0x740/0x740 [ 643.854269] ? setup_sigcontext+0x820/0x820 [ 643.858609] ? check_preemption_disabled+0x41/0x280 [ 643.863633] ? wait_for_completion+0x3c0/0x3c0 [ 643.868229] ? vfs_write+0x15b/0x550 [ 643.871956] ? fput+0x2b/0x190 [ 643.875264] ? ksys_write+0x1c8/0x2a0 [ 643.879599] ? exit_to_usermode_loop+0x36/0x2b0 [ 643.885406] exit_to_usermode_loop+0x22b/0x2b0 [ 643.890447] do_syscall_64+0x538/0x620 [ 643.894346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 643.899541] RIP: 0033:0x45c829 [ 643.902738] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 643.921654] RSP: 002b:00007fb0994d8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 643.929547] RAX: fffffffffffffe00 RBX: 00000000004fae80 RCX: 000000000045c829 [ 643.938048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 643.945332] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 643.952612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 643.960436] R13: 000000000000088d R14: 00000000004cb400 R15: 00007fb0994d96d4 10:18:10 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff005) 10:18:10 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="0002200089881852cde1dc8d0f0dee97b58b1a4ceaebfbaa945474f2ba87e4f88dca28f5bf06f8ac77aa5d13d9ce9394197232c5546faf8a26cc6af9aece22fb5af8295dfcccfef1c3f6f4aa694f9a3d9c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={r3, 0xfffffffc, 0x10}, 0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={r3, 0x16, "99a9034e39cc6aa580924bcdcd398be4b8cb9330b338"}, &(0x7f00000000c0)=0x1e) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r4, 0x6e, 0xfff, 0x1000, 0x9, 0x3}, &(0x7f00000001c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv6_deladdr={0xc8, 0x15, 0x200, 0x70bd28, 0x25dfdbfc, {0xa, 0x1f, 0x0, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0xb78a, 0x8, 0xff, 0x8}}, @IFA_FLAGS={0x8, 0x8, 0x608}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x100, 0x8, 0x7}}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_FLAGS={0x8, 0x8, 0x410}, @IFA_CACHEINFO={0x14, 0x6, {0x40, 0x0, 0x20, 0xffff4c80}}, @IFA_CACHEINFO={0x14, 0x6, {0x67, 0x3, 0x13c9, 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x0, 0x7f, 0x7}}, @IFA_CACHEINFO={0x14, 0x6, {0x3e0e4da1, 0x3, 0x4, 0x4}}, @IFA_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, [], 0x4}}]}, 0xc8}}, 0x800) 10:18:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c040000491e01f49ad050ffd3afd89997ef6f067fb08630619631df66724f5f1562ec90a81031fc20", @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a000000000008000c000400000014001f00ff010000000000000000000000000001"], 0x5c}}, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r4, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) ioctl$IMGETVERSION(r4, 0x80044942, &(0x7f0000000080)) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000000)=0x200, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'macvlan1\x00'}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x84008}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r9, 0x180, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x1c}}, 0x24004040) 10:18:10 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xf0ff}}, 0x20) 10:18:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 644.641698] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 644.660955] attempt to access beyond end of device [ 644.672940] loop3: rw=2049, want=6434, limit=52 [ 644.684900] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000040), 0x4) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="880000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x88}}, 0x800) 10:18:10 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xff0f}}, 0x20) [ 644.712889] attempt to access beyond end of device [ 644.723785] loop3: rw=0, want=6434, limit=52 [ 644.731452] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RWSTAT(r3, &(0x7f0000000000)={0x7, 0x7f, 0x1}, 0x7) [ 644.813827] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 644.827093] minix_free_inode: bit 1 already cleared [ 644.905812] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r4, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) getsockopt$inet6_dccp_buf(r4, 0x21, 0xf, &(0x7f00000001c0)=""/157, &(0x7f0000000040)=0x9d) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x88}}, 0x800) 10:18:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) [ 645.035302] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 645.064285] attempt to access beyond end of device [ 645.075276] loop3: rw=2049, want=6434, limit=52 [ 645.103813] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 645.126544] attempt to access beyond end of device 10:18:10 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x40, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, 0x0}}], 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x10) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000200)={r5}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r5, 0xfffffffa}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={r6, 0x200, 0x9, 0x0, 0x1, 0x5}, 0x14) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') [ 645.150449] loop3: rw=0, want=6434, limit=52 [ 645.167293] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:11 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xfff0}}, 0x20) [ 645.278400] minix_free_inode: bit 1 already cleared [ 645.402342] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 645.452619] attempt to access beyond end of device [ 645.469630] loop3: rw=2049, want=6434, limit=52 [ 645.495971] attempt to access beyond end of device [ 645.521824] loop3: rw=0, want=6434, limit=52 [ 645.800384] minix_free_inode: bit 1 already cleared 10:18:11 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff006) 10:18:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r3 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000400)={r4, 0x1, 0x6, @broadcast}, 0x10) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={r6, 0x1, 0x6, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f00000001c0)={0x2c, 0xb, r7, 0x2c}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000300)="70d894ad7272fc4043448f51d202cb55315c9e11905024b2ff3fd851226cfeb9163200c109cfaf8df2c25d72985054e8fb577584e4b22d0af809609b379d7065d5c503b2941752da6ffbc0b5f2494e9323098461a3cd3b75bcb643c654b25c60db9fa6fe7d1a600282a6cee365322e6f1cf89f26fa17ed3f3339687636219b6585095f58b5743040ce87a41949232bb1889be37e362d7ebfdaf698f22332127f8dad4170bdad50fe06a0032764d60764b31875cb5d123329fc9b7ecb0e4228c7059384722356b757c8", 0xc9}, {&(0x7f0000000200)="21dee51a304c5dc0172903d6c7291a5be4fbea1e", 0x14}, {&(0x7f0000001580)="0d30868700663128728d78029ce08122406199ce90aa1b294e076307afc915dbce56f2d84c5f6abb1ca091bab3af8b752a63f13d4d7155410677dd5b9a1698b3ad4d8755d613743571a7dcc3563e122f5d94885b576188d5e2b8014b816b0e69d095c165b8ee997c486002ba8d35b68633dbde27d4a16207ff5d69a5d891ff13808c35bd6d7b1e0e875d1f43f15714337b6e57942481342c1b8299c459b17914731bfcf7f6095739709623dcef948697d1100e0939ef9d6e951703c23be904e8e9371dacdcc12ba2c2d149ea231f20981bd4c6b2cb437e3678a8baf0e1e30d2e96911776", 0xe4}, {&(0x7f0000001680)="159df1bf715c27679c444cfec2abe60315fdbce5d3180a21d580c18da923681392eaf8da2bca94b646defbd4ca9c8c1e28228b843e333f865cbb0fe910d34b48abd29b73c5f9bfcd07ae54e51b26de14593ff8df2f69ea2a87925e031e038b88691123de33f993ff3e649ab5cb6c88fd9c5a5cb1761e0aa69b77e0a51bd4d5259009d5bca50dcc0d67ab4bc61b9a82e9d516cd56cc2b65ca", 0x98}, {&(0x7f0000001740)="d81f6b1931b3da0229bfd7343011a3d1b0e7bcac536f31f45cd9592357d53d4a1ee587e7dea7c56bd681c0b126fef9264807f0006af2700e0788b2b598382be863e97834b05260df6596e5446e658bb67293689304f1f6752da9c6c2c51e163635c8347211619babd72a0dda833428ad7e56a933c60e4cbf8d24f76587bf51b87d3f90338b1d5f20e8975cb3eea00cad3f4d841a0106b61d0a59b978d526048c4bd3d03c8f46", 0xa6}], 0x6, 0x0, 0x0, 0x200048e0}, 0x20000041) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x18, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$vsock_dgram(0x28, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001840)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES16, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYRES32=r7, @ANYRES32, @ANYRESHEX=r4], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 10:18:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f00ff010000000000000000000000000001"], 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r3, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000100)=0x81) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40011) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x44002, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 10:18:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x7ffffffff000, 0x0, 0x0, 0x0) 10:18:11 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xffff}}, 0x20) [ 646.062106] device lo entered promiscuous mode [ 646.083427] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 646.113783] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 646.161209] attempt to access beyond end of device 10:18:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000040)) [ 646.186982] device lo left promiscuous mode [ 646.201664] loop3: rw=2049, want=6434, limit=52 [ 646.259113] attempt to access beyond end of device [ 646.276886] device lo entered promiscuous mode [ 646.285104] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 646.292107] loop3: rw=0, want=6434, limit=52 10:18:12 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 646.321576] kauditd_printk_skb: 9 callbacks suppressed [ 646.321587] audit: type=1800 audit(1588501092.077:712): pid=348 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 646.351607] device lo left promiscuous mode 10:18:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="17090000000000001900010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f00ff0123000000000000000000000000019aa38f45"], 0x5c}}, 0x0) [ 646.417206] minix_free_inode: bit 1 already cleared 10:18:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x38b}, 0x0, 0xffffffffffffffff, r1, 0x0) msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) getrandom(&(0x7f0000000300)=""/255, 0xff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @dev={[], 0xc}}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x88}}, 0x800) 10:18:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r1}) connect$l2tp(r3, &(0x7f0000000180)={0x2, 0x0, @loopback, 0x3}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08a832000a000000000006933ab058fafeb7e66e2d680002000100000014001f00ff0100"/97], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:unconfined_execmem_exec_t:s0\x00', 0x2f, 0x0) [ 646.551241] audit: type=1800 audit(1588501092.307:713): pid=360 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16296 res=0 [ 646.598203] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 646.668506] attempt to access beyond end of device [ 646.675208] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 646.684264] loop3: rw=2049, want=6434, limit=52 [ 646.706484] attempt to access beyond end of device [ 646.716018] loop3: rw=0, want=6434, limit=52 [ 646.725179] audit: type=1400 audit(1588501092.487:714): avc: denied { relabelto } for pid=366 comm="syz-executor.4" name="NETLINK" dev="sockfs" ino=120533 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unconfined_execmem_exec_t:s0 tclass=netlink_generic_socket permissive=1 10:18:12 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x2}}, 0x20) [ 646.772545] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 646.788557] audit: type=1800 audit(1588501092.487:715): pid=363 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r4, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000040)=0x3, 0x4) socket(0x1, 0x803, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r6, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r6, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xffffffffffffffef) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES64=r0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r9, @ANYRES64=0x0, @ANYRES32=r9, @ANYBLOB="adbeb63af9b37f966b18985d23bb97e88eb38efb92f6a49f37dc52ffd69196452f8c35c8d5af9a25f8983d19d309653e5de344cb4035cbdbf1bbcd00ae482c193c5b2b36d751e3e3270d731446b6d85b56fba0b59a15188c1ca9d3023cb3422515dd2b872761cc51bda6530afb5acdafcc9a0a20"], 0x88}}, 0x800) [ 646.846979] minix_free_inode: bit 1 already cleared [ 646.940698] audit: type=1800 audit(1588501092.697:716): pid=382 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16303 res=0 [ 647.003596] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 647.049404] attempt to access beyond end of device [ 647.056884] loop3: rw=2049, want=6434, limit=52 [ 647.085714] attempt to access beyond end of device [ 647.090996] loop3: rw=0, want=6434, limit=52 [ 647.095964] audit: type=1800 audit(1588501092.857:717): pid=383 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 647.207115] minix_free_inode: bit 1 already cleared 10:18:13 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff007) 10:18:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x100010, r1, 0x482a5000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="43113ac00800000045", @ANYRES16=r3, @ANYBLOB="170900000000000000000100000005000700000078e4080009000000000014002000fe80000000008000e8ec211db566a1fdf1000a0000000000060002000100000014001f00ff010000000000000000000000000001"], 0x5c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r4) io_setup(0x13, &(0x7f0000000240)=0x0) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0, 0x7ffffffff000}]) io_pgetevents(r5, 0x23, 0x0, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f00000000c0)={&(0x7f0000000080)={[0x100000001]}, 0x8}) rseq(&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x4, 0x200, 0x10001, 0x3f}, 0x4}, 0x20, 0x0, 0x0) 10:18:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0xf0ffffff7f0000, 0x0, 0x0, 0x0) 10:18:13 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x3}}, 0x20) 10:18:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000002e924ea1800c0001006d616376fbf90000480002800800010008000000340005800a0004000180c200000200000a000400aaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x88}}, 0x800) [ 647.744443] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 647.759648] audit: type=1800 audit(1588501093.517:718): pid=405 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16319 res=0 [ 647.794025] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 647.820072] attempt to access beyond end of device [ 647.830568] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 647.857062] loop3: rw=2049, want=6434, limit=52 10:18:13 executing program 4: prctl$PR_GET_TIMERSLACK(0x1e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) 10:18:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$6lowpan_control(r5, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x88}}, 0x800) [ 647.885441] buffer_io_error: 8 callbacks suppressed [ 647.885456] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 647.946085] attempt to access beyond end of device [ 647.965691] loop3: rw=0, want=6434, limit=52 [ 647.977626] Buffer I/O error on dev loop3, logical block 3216, async page read [ 648.000477] audit: type=1800 audit(1588501093.757:719): pid=413 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:13 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x4}}, 0x20) 10:18:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000000280)={0xffffbf00, [0x6, 0x9, 0x8], [{0x0, 0x4, 0x0, 0x0, 0x1}, {0x2, 0x7f, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x1, 0x0, 0x1}, {0xa07, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x7fffffff, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x1000, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x3f, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1, 0x0, 0x1}], 0x40}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x7}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40480c4}, 0x4814) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c004f46cf863852a74be3c9ead5ea4e8c99e05f642be0e10000", @ANYRES16=r3, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060d4be1ab2e0fba149ad91c0002000100000014001f00ff010000000000000000000000000001"], 0x5c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$RNDADDENTROPY(r7, 0x40085203, &(0x7f0000000480)={0x8ff, 0xf5, "7abe2201377f78126ed806beaec606d6a4410d9caeb79d85476d90cfa89eca99cb8472ed717615ed92628d055918855315d3b1a20f224f2ee9ca2c9ec127f4a2eee016f7bc81e2aaba6cde4f91c5ab96309a3d00f89c4542107a63396fab6d927e6b071a0922f79fc5e08f3a48facdcc5d61b2397ac002ede2185e014b4536362f372df1416479947e53ae1396d8de57e3a7a588934fdcfecbbc5aff4d563574e5d02e210a2a40095107ba98c696d2353b2726c08667e8f44799f0b615971512642ba03f00e33a5cca1bde886929d22e13250f8bcc8f4bcadb3a7d99f4d7d2f44b3dc7fc1b957913ef79f2cd53cded3017bd51e3fe"}) [ 648.112628] minix_free_inode: bit 1 already cleared 10:18:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000400)={r8, 0x1, 0x6, @broadcast}, 0x10) r9 = socket(0x100000000011, 0x2, 0x0) bind(r9, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000000)={r10, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_delroute={0x34, 0x19, 0x200, 0x70bd25, 0x25dfdbfe, {0xa, 0x14, 0x80, 0x1, 0xfe, 0x4, 0x0, 0x2, 0x1100}, [@RTA_OIF={0x8, 0x4, r10}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_IIF={0x8, 0x3, r6}]}, 0x34}}, 0x800) [ 648.250077] audit: type=1800 audit(1588501094.007:720): pid=428 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16320 res=0 10:18:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) [ 648.291547] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 648.319178] attempt to access beyond end of device [ 648.324643] loop3: rw=2049, want=6434, limit=52 [ 648.329125] device lo entered promiscuous mode [ 648.353519] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 648.393066] device lo left promiscuous mode [ 648.398457] attempt to access beyond end of device [ 648.407262] loop3: rw=0, want=6434, limit=52 [ 648.438761] Buffer I/O error on dev loop3, logical block 3216, async page read [ 648.468628] audit: type=1800 audit(1588501094.227:721): pid=431 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:14 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) [ 648.515520] device lo entered promiscuous mode [ 648.817191] device lo left promiscuous mode [ 648.817227] minix_free_inode: bit 1 already cleared [ 648.958015] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 648.973758] attempt to access beyond end of device [ 648.991856] loop3: rw=2049, want=6434, limit=52 [ 649.011783] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 649.066855] attempt to access beyond end of device [ 649.071947] loop3: rw=0, want=6434, limit=52 [ 649.076372] Buffer I/O error on dev loop3, logical block 3216, async page read [ 649.187610] minix_free_inode: bit 1 already cleared 10:18:15 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff008) 10:18:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709000000000000000001000000edff060071a7a0d3e0efb8943ddb9d00684600000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f00"/100], 0x5c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) r6 = accept4(r0, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, &(0x7f0000000080)=0x80, 0x0) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r7, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000600)=""/233, 0xe9, 0x40002001, 0x0, 0x0) sendmmsg(r7, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r7, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x805) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, [], 0x1}, 0xb0}, {0xa, 0x400, 0xff, @private0={0xfc, 0x0, [], 0x1}, 0x6}, 0x7ff, [0x9, 0x5b5, 0x0, 0x3, 0x8, 0x7fffffff, 0x40, 0x4]}, 0x5c) 10:18:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) 10:18:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x88}}, 0x800) 10:18:15 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x6}}, 0x20) [ 649.404060] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 649.472841] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 649.483315] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 649.505505] attempt to access beyond end of device [ 649.524283] loop3: rw=2049, want=6434, limit=52 [ 649.541538] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 649.592808] attempt to access beyond end of device 10:18:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900000000000000000100000005009aeb070000000000080009000000000014002000fe8000000000003ca2ffe787c272d3bb08000a0000000000060002000100000014001f00ff01000000000000000000000100"], 0x5c}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x208202, 0x0) 10:18:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0xc000, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x3fb, 0x100, 0x70bd26, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x88}}, 0x800) [ 649.620554] loop3: rw=0, want=6434, limit=52 [ 649.636665] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:15 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x7}}, 0x20) [ 649.705897] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 649.748208] minix_free_inode: bit 1 already cleared [ 649.752697] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 10:18:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@isdn={0x22, 0x7, 0x2, 0x5, 0x2}, 0x80, 0x0}}], 0x2, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='bridge_slave_0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1749aa2acb2898eae2000100000005000700000000000800090000000000281e1039fe800000000002000000000016b000bb08000a0000005a994d4a490000060002000100000014001f00ff0100000000000000000000000000011dc95b74f6638609d5a5162708faec6e1caf44e7e8f3725ddf9ff151e54a62fbd436ca5ce4d77823c7bfadf9813720aed4b914458af8eae73f5d0e31fe67ca8ec5c17d55ac4ae2259a3f3d00"/178], 0x5c}}, 0x0) 10:18:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:user_cron_spool_t:s0\x00', 0x27, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x1407, 0x100, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000003c0)={0xffffffff, 0x50323234, 0x40, 0x1, 0x1, @discrete={0xfffffc01, 0x80}}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) setsockopt(r6, 0xfffffffa, 0x0, &(0x7f00000001c0)="f5a1cbec0cbbb9b9dc1fb6ccfbae6eb33c2fe2a9059bdf6eee08a7151cf6a75f11bc1ef7850e901e20e2f0d3c09a3eb82e4f046081dcdc1343a2050512ee24b35fe6f08a6f94e3f86ad194e6aad21a7c574a2111865361cf7aa31ec56ca637d335dd00e0e679ad0e6aa194d76ae238a923ee13ed60d23e11dd53a8466901eda154ae591cfd73d88bbd50ad4687c51ebf9cd219df77a60a4489d962310ac23dea1c2def915a71bb475f1dda41b96b", 0xae) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x88}}, 0x800) [ 649.922991] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 649.959858] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 649.986834] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 649.986991] attempt to access beyond end of device [ 650.031665] loop3: rw=2049, want=6434, limit=52 [ 650.043357] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, r1, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x24}}, 0x0) [ 650.088382] attempt to access beyond end of device [ 650.101382] loop3: rw=0, want=6434, limit=52 10:18:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x801}, 0x0) [ 650.129982] Buffer I/O error on dev loop3, logical block 3216, async page read [ 650.233809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=511 comm=syz-executor.2 [ 650.246747] minix_free_inode: bit 1 already cleared [ 650.306290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=517 comm=syz-executor.2 10:18:17 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff009) 10:18:17 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x10}}, 0x20) 10:18:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0xf0ffffff7f0000, 0x0, 0x0) 10:18:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000000)=""/6, &(0x7f0000000040)=0x6) 10:18:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x88}}, 0x800) [ 652.109706] kauditd_printk_skb: 6 callbacks suppressed [ 652.109718] audit: type=1800 audit(1588501097.867:728): pid=528 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17569 res=0 [ 652.162321] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 652.202929] attempt to access beyond end of device [ 652.208294] loop3: rw=2049, want=6434, limit=52 [ 652.237549] attempt to access beyond end of device [ 652.249209] loop3: rw=0, want=6434, limit=52 10:18:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000000)={0xe4, 0x4, 0x81}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) 10:18:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8000, 0x50f800) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000003c0)={{0x1, 0x6, 0x0, 0x1, 'syz0\x00', 0x5}, 0x0, [0x3968, 0x7, 0x7252, 0x2, 0xf5c, 0x5fca, 0x4, 0x80000000, 0xfff, 0x1, 0x79f95c37, 0x6f79, 0x9, 0x2, 0x5, 0x3, 0x4461, 0x2, 0x3c, 0x9, 0x7, 0x9, 0x7, 0x80000000, 0x400, 0x80, 0x8, 0x10001, 0x2, 0x3, 0x20, 0x8, 0x1, 0x3, 0x2, 0x100, 0x0, 0x7, 0x5, 0x4, 0x81, 0x6, 0xe7c, 0x9, 0x0, 0x1, 0x2, 0x7f, 0x48c3, 0xffff, 0x3, 0x8, 0x29e6, 0x100, 0x10000, 0x8, 0xb72c, 0x3f, 0x40, 0xe78, 0x7, 0x4, 0x0, 0x0, 0x9, 0x7, 0x5, 0xffff, 0x8000, 0x5, 0x10000, 0x2, 0x6, 0x40, 0x101, 0x7, 0x800, 0x0, 0x80000001, 0x5, 0x1, 0x3, 0x0, 0x100000001, 0x4, 0x5, 0x1, 0x9, 0x18d, 0xffffffffffffffff, 0x401, 0xffffffffffffff7f, 0x7f, 0x0, 0x3ff, 0x2, 0x7ff, 0x797a, 0x800, 0x401, 0x6, 0x3f, 0x3, 0x1, 0x5, 0x0, 0x4, 0x100, 0x874d, 0x9, 0x8, 0x8, 0x1, 0x0, 0x50, 0x7, 0x7, 0x1f, 0x0, 0x0, 0x300000000000, 0x5, 0x10001, 0x8001, 0x80, 0x9, 0x7, 0x6]}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x88}}, 0x800) [ 652.277741] audit: type=1800 audit(1588501098.037:729): pid=531 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:18 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x48}}, 0x20) 10:18:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x301001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="41000600000000002c0012800c0001006d6163766c616e001c00028008000100080000000800030000000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB="08000a0091df30162355e80b27b68c1c448c5248a3695e9f74019846cf441d0c06e4052a0449deed63fb737f5f0a4081094df77260e3468bd89740568548fab33db11ba229b5fdaf5ba22692233ed036283ca4363d6cd9546366da9abc809ee89471d39afd65bfb52ad401815348edeef2e11b7aeb100282f7148483f4ee7cd17b50c57e03955ab0352e2886067cdc11ce8b228846f92eae68b2c189ab4575ac3a7a228eca760724448acaa125b14409", @ANYRES32=r6, @ANYBLOB], 0x5c}}, 0x800) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x0, 0x3, 0x5}}, 0x14) [ 652.402431] minix_free_inode: bit 1 already cleared 10:18:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000cef801151a9f5de9b6aa1c65f9b74da6813292657623c255278ca105d082e8b3a0a8fca28e8eec332682ad09a131b62b3631e76b429d3c4d22a3db246f04d0e9f51e1ecfab54ec5b30440a53f734bf97e79ce77a3ba29ff29eb53353b50b6b4008d8239803f5d2f9ff257c90ffffa8b4c66f8c962f51983d81f35474c42c6f46035db8d600"/152, @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f00ff010000000000000000000000000001"], 0x5c}}, 0x0) 10:18:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000400)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000000)={r7, 0x1, 0x6, @remote}, 0x10) sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000000000)="acb2644e8213c709111caf3f3ee2e44bd753894b06997c01e4ab39d764252e5793e92efb76347eaa2dd8f7e50bc1203727f4fc0ff35e1237e4abb25da0f9a7211b002824bb2a16498ef87453735ff69aeaf0408c5668608ca78eaed3301501c8015767f2d0dd3ef443813953de6636d2dce41d00c9b42d889cad82ff967ac98929a7bac9409e8df142e942139060d0dd1f373380fd198c18b3581d90ecd65a61f9455391a9db50d424c005b771965c39fe94b6e8d6e582d91cdca5028698c2547b16bdace3b570d8179680f09a8490c563eb4832987605bd90a2a80179cb9ef19d90a0b09a2807ac9f649108", 0xec}, {&(0x7f0000002200)="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", 0x1000}, {&(0x7f0000000100)="ae", 0x1}, {&(0x7f0000000180)}, {&(0x7f0000000280)="7889a59de36b52515d81ae5e090e25ab84cd83b022ef3fa2fd3d332226cecff669524cd944eba9cb6b2dd7283ff469c33493296c94e26093178229e4df2b9c891440b145b041b4b73298864cc4e1c9a6739773e1f8e59781c352079303f1d577", 0x60}, {&(0x7f0000000300)="3682825833b030401bdacf04e5d437fbb3883faa8038b6d6c9bfa22b8d2b12ee33b598e191d18cdaa6c5510f37403e86d9918ff52dcf3751d216896af4e920aec146e6c6d5b5fc675055acee716f2fa9002a46ac570de0062301b52e9c43728c5cb3767e183623a4f817b90d3a857e7233c1f9bf1d28edca8b35aa394a9f862a05bbd45c97c2bc197b94d8e10f85a47577728bfe1c44215e15ca03cfe3f9b7ed7beab2d75e2d6112c25d4089e4e1786ad85b5bddaaa4b57f04a59a52b6f0b96269213550cbff1fa9ea1c4e595227351c91d8bd4edce88c8b36a437a6b43c160d145249175bf9663eee", 0xe9}, {&(0x7f0000000400)="8a38653bafa9ca8878a1316d2ec727e46da69030f01ad1fa619d896eccea13dba43f59957e44f892414f4fe16557980bec956dcb5e02fd4c8e6c780538418de15a486ed5d0071284f13ed8cfb6cd39cea89d034174948917d483f2ba8f33cebbc6541cf418c41c16c8b72c9c051f93bd227fe13b7a73b446d357fd167337e09c6dda9ff95bf722c81d351905a3abb62667b5ba777b43995810053e2319a3e1cfc56cef0fbc79c2ee0f2f44306c3aafab5699d830eff1ca13174435793e9731dd6e4325e9a54918e60ba09399397760db72f54ce81f2d0e7a3d9ac94d7fc8b2f2d6011401fd4643e46357ff3be052f0c5b6", 0xf1}, {&(0x7f0000000500)="3a410209612b3be5bb684cc9294c8ebccea31e64180957bb3f2e75196914dd031f1bfc1be6f94f90763decd2683b2a4053e05974f89fd0ab949aba0a44f68b33da6aedc3fd6f27772059c15c407fbed9", 0x50}, {&(0x7f0000000580)="906410965ce463dd17f59afab48611bccab789c424949897df424010e4395a2b0bdb268b85be8109452dec3e52769b1c50c7f9f74876d42478915a7b95c3ba1d357e892dc6d515636ec87fc8d2aff4d9b39aa910bfcaf5bbed66a63c94090b39c62847", 0x63}], 0xa, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x17, 0xcf, [@loopback, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, @multicast2, @multicast2]}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x8, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}]}, @timestamp={0x44, 0x8, 0x5c, 0x0, 0x6, [0x7fffffff]}, @lsrr={0x83, 0x1f, 0x1d, [@empty, @multicast1, @broadcast, @local, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x17, [@empty, @remote]}]}}}], 0xd0}, 0x20000001) [ 652.554564] audit: type=1800 audit(1588501098.307:730): pid=555 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17473 res=0 [ 652.631555] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 652.654645] attempt to access beyond end of device [ 652.671300] loop3: rw=2049, want=6434, limit=52 10:18:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x800, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000003c0)={"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"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') socket$inet6_dccp(0xa, 0x6, 0x0) getsockname$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r5], 0x5c}}, 0x0) bind(r5, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x0, 0x1, 0x1, 0x1}}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x88}}, 0x800) [ 652.707711] attempt to access beyond end of device [ 652.712736] loop3: rw=0, want=6434, limit=52 [ 652.740113] device lo entered promiscuous mode [ 652.745002] audit: type=1800 audit(1588501098.497:731): pid=558 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 652.806035] device lo left promiscuous mode [ 652.868081] minix_free_inode: bit 1 already cleared [ 652.895884] device lo entered promiscuous mode [ 652.910324] device lo left promiscuous mode 10:18:19 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff00a) 10:18:19 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x4c}}, 0x20) 10:18:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = fcntl$dupfd(r1, 0x406, r0) ioctl$PPPIOCSMRRU(r7, 0x4004743b, &(0x7f0000000040)=0x6) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x88}}, 0x800) 10:18:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000) 10:18:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd0, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x40890) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x204000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'macvlan1\x00'}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x630, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4008000) [ 653.384090] audit: type=1800 audit(1588501099.137:732): pid=586 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17649 res=0 [ 653.445836] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 653.480495] attempt to access beyond end of device [ 653.485630] loop3: rw=2049, want=6434, limit=52 [ 653.504341] buffer_io_error: 4 callbacks suppressed [ 653.504354] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:19 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000400)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x2}}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1709000000020000000001000000050007000000000008000900000000001400200008000a0000000000060002000100000014001f0000000000ef3ab3940000000000000000"], 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x68, r0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000380)={0x5, 0x1, @stop_pts=0x8}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000000c0)=0x7) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x70002, 0x0) ioctl$KDDELIO(r7, 0x4b35, 0x4) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000426e43175573f0c4ec9000000f34a629688000000140008006e7230000000000000000000000000002cfd23033176097374ae42acf9f351715dd997cd97875e8b33edbb4c7edfe4f33b982f33f43a68b14ab1090621d8f3e2fd1b7189cb58a4c95e3c12b34780f6a0d56d20295a16ed9b624ffaebb5c3d3c539e2de903d51de2c9207496f528b450316a978eb21e18b46aa0b365c552832dc66d19f17b031b275cc9b2ffbd40335df91d2c168270c47fa9e65ac66a85e49a19a8e3a59b1095b97b799056aa284344f93667afe6cd18c5060f93ce231b300"/229], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x24001) 10:18:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RFLUSH(r4, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000000001040004153f0000bb92b47b7009796ec950785ddabc32c7920046b857f3c807d3b0c9a536b236b163d01d401d1e52d2ff0f3ea2fff7532ec9251d02ba0c3f9f068792c3debc5bc01d9e0b5583bd3391dc10d220c519593cd677eabd8d4f11e8cca0e555b0147e988c384b924de820354789f2a699c8d62ca685f3b31aefd6fbb4b0e798e55382cd8dd385d6f7fa1ed9a33f14a259ab89efa36cb9d96066e328da67540a11a297c4efec8a5b5e7b9e99eba7a2af6c8f5478cdd5254f1bcea85af00a4bb6b9dcd257397614", @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x88}}, 0x800) [ 653.554692] attempt to access beyond end of device [ 653.562518] loop3: rw=0, want=6434, limit=52 [ 653.573871] Buffer I/O error on dev loop3, logical block 3216, async page read [ 653.620019] audit: type=1800 audit(1588501099.377:733): pid=591 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 653.630853] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 10:18:19 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x60}}, 0x20) [ 653.700016] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 10:18:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x40000, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r3, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, {0xa, 0x4e22, 0x8, @private1, 0x40}, 0x1, [0x5, 0x80, 0xffffffe0, 0x8, 0x7f, 0x7fffffff, 0xffffffdf, 0xc1]}, 0x5c) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r6, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r6, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) [ 653.743413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=603 comm=syz-executor.2 [ 653.757864] minix_free_inode: bit 1 already cleared [ 653.812969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=603 comm=syz-executor.2 10:18:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x88}}, 0x800) [ 653.891903] audit: type=1800 audit(1588501099.647:734): pid=610 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17649 res=0 [ 653.943797] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 653.991978] attempt to access beyond end of device [ 653.997498] loop3: rw=2049, want=6434, limit=52 [ 653.997518] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 653.998777] attempt to access beyond end of device [ 654.021215] loop3: rw=0, want=6434, limit=52 10:18:19 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x68}}, 0x20) [ 654.036968] Buffer I/O error on dev loop3, logical block 3216, async page read [ 654.049091] audit: type=1800 audit(1588501099.807:735): pid=612 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x62}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x15}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7a30}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000040) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x3, 0x70, 0x2, 0x5, 0x7f, 0x4, 0x0, 0x2, 0x15108, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xbab, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x30723c94, 0xffffffff, 0x0, 0x3, 0x2, 0x5}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe80000000000000000000000022610e73000a0000000000060002000100000014001f00ff0100000000000000000000000000018920562cedf3457b63bbb660a45a2b95eb"], 0x5c}}, 0x0) [ 654.107567] minix_free_inode: bit 1 already cleared [ 654.203208] audit: type=1800 audit(1588501099.957:736): pid=631 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16327 res=0 [ 654.223934] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 654.252462] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 654.267486] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 654.293945] attempt to access beyond end of device [ 654.307055] loop3: rw=2049, want=6434, limit=52 [ 654.311783] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 654.377136] attempt to access beyond end of device [ 654.394305] loop3: rw=0, want=6434, limit=52 [ 654.403544] Buffer I/O error on dev loop3, logical block 3216, async page read [ 654.426224] audit: type=1800 audit(1588501100.177:737): pid=638 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 654.527155] minix_free_inode: bit 1 already cleared 10:18:21 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff00b) 10:18:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabbaa2000000600b2adb77e5b64e50200010000000800050053a3dd3cb179fa1ba03f7bf01cc68374539f1e78b830e239b15ebb54f07181bf791e475906e1e15d0803fb57e13b5ff6fd8852524bd6cbdd3c4960135112722894f4fb0ce786690bc67bac25deb72b7e96fb461f7afe4489bd483c9de0dd212d84a4ebc6adde89c883771af7215814ed81", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x88}}, 0x800) 10:18:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000) 10:18:21 executing program 4: syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000000)='fd/3\x00') r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x711001, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd27, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x9bb0e252e8dbb776}, 0x0) 10:18:21 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x6c}}, 0x20) [ 655.285511] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 655.307030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 655.320628] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 655.378352] attempt to access beyond end of device [ 655.383432] loop3: rw=2049, want=6434, limit=52 [ 655.384096] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 655.420747] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 655.424594] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r10, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYRES64=r8], 0x88}}, 0x800) 10:18:21 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x74}}, 0x20) [ 655.499985] attempt to access beyond end of device [ 655.514310] loop3: rw=0, want=6434, limit=52 [ 655.538715] Buffer I/O error on dev loop3, logical block 3216, async page read [ 655.608033] minix_free_inode: bit 1 already cleared 10:18:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB="fab9e571", @ANYRES32=r6, @ANYBLOB], 0x88}}, 0x800) [ 655.690657] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 655.705290] attempt to access beyond end of device [ 655.714366] loop3: rw=2049, want=6434, limit=52 [ 655.722824] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:21 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x7a}}, 0x20) [ 655.740464] attempt to access beyond end of device [ 655.745986] loop3: rw=0, want=6434, limit=52 [ 655.754104] Buffer I/O error on dev loop3, logical block 3216, async page read [ 655.762501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r2, &(0x7f0000000000)=""/179, 0xb3) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0xf8, r4, 0x1, 0x0, 0x6, @multicast}, 0xa) sendmmsg(r3, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) recvfrom$x25(r3, &(0x7f0000000280)=""/220, 0xdc, 0x40002043, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="170900002f000000000000080009002000fe80000000000008000000eeff0000bb08000a0000000000060002000101000314001f00ff01000000005603247d399cb896a01913a1dda50000"], 0x5c}}, 0x8000) [ 655.844771] minix_free_inode: bit 1 already cleared [ 655.857236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f00000001c0)='./file0\x00', 0x7f, 0x3, &(0x7f0000000500)=[{&(0x7f0000000200)="febff63345e763ad15efe7d26378a743fe7182b128f5ab74f127dd40b9f3d2817640f1d821587a14e14bda51dcbdef426981f9d5da902eb78568672c6c7d26445d53973ababb87f6700d742b70a2d3b0218147055b0f8ecbb8b1034b982ddd71583e7995fda2de500245df15993735d7fa40d54c781bfbf3b85ceeb9f1bcdc655ab9596f314b056948ddd441fa457704884006a17527fa28b2e085229c02f2376fa4db1d84d25dd874f9a47d0034f8", 0xaf, 0x1000}, {&(0x7f00000003c0)="0c39d91a2a2c11a47cfc2207eef6cc18aa78a1d6d5822a68621cadff07c00c0951", 0x21, 0x7b4e}, {&(0x7f0000000400)="7f4249651c0f628cebdfc83bddd4811a30b96d69e120a5fac4a5ccdd477a9d9e2ffcff5cef0ecb763fe993b23a638ad284cf7d8f189ff84c9dcd4eb673aee0c42cb4877c768c6a7dae729ecd59c4c91a6c96707b602564fb6ee4f388f316af7b3825fc7c8f666f7109348b4df1db586b57f173996ca6d638d86b85888d726db61dcbe568e52e1734ef31c2a7aa877d265919656bec5d1679bebf4868fb3a7a08aa2bea885405200ca065f80f3aa9f6310b09352c1f158f2c5dd0fcb0cdccd9e754a407f7e2a8", 0xc6, 0x1f}], 0xc002, &(0x7f0000000580)={[{@noquota='noquota'}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x84203, 0x0) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f00000000c0)={0x6, 0x0, 0x40}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={r8, 0x1, 0x6, @broadcast}, 0x10) r9 = socket(0x100000000011, 0x2, 0x0) bind(r9, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={r10, 0x1, 0x6, @remote}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x90, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000005}, 0xc8c1) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x88}}, 0x800) 10:18:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="cf8b2f9722880a486946adfa8b345e5f82876c7cac40d9ff1d920ee964ffc911d29f712de34a4d281de0cc5c94909fc98304ba321643f9edc4c861d95c46e1c72ba93d91efccfa7f79f75306a0e360f6da2a4d3d2c4bb497abb6e9c542adc42e724e3ce2cb2f93436a6035e73f602696d4341d4d2391ca07bbba0000d1993d8078e036587c663dac61321da9a98756f800"/160, @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000000000000000000000000000bb08000a0000000000060002000100000a14001f00ff010000000000000000000000000001000000c092b6ef52c3a7bd1647bb80c90888928c98b6a63a6e5120de843e2a4fa3f2a05ac701b627884a5d3bb3871b50033c1915fd9e7685b44f0cbee59de37aa8d29e6ce0b188e2bbc60d61de83de7e17e181d6a3246af2dda81f02f58b60633d6ddcd7b3ade81b39ee684ffb00fa9a31810160ba3c3c1bd7a28c8215321c67e262deb3230971cfd1657f913200c3b4f68e63d2d9674e026cc939a76f8f84845f533222ee"], 0x5c}}, 0x0) [ 655.995616] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 656.063908] attempt to access beyond end of device [ 656.072371] loop3: rw=2049, want=6434, limit=52 [ 656.133715] attempt to access beyond end of device [ 656.151579] loop3: rw=0, want=6434, limit=52 [ 656.271476] minix_free_inode: bit 1 already cleared 10:18:22 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff00c) 10:18:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x100}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) 10:18:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) tee(r2, r4, 0x80000000, 0x2) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 10:18:22 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xf0}}, 0x20) 10:18:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x88}}, 0x800) preadv(r5, &(0x7f0000001500)=[{&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f0000000040)=""/63, 0x3f}, {&(0x7f00000003c0)=""/108, 0x6c}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/160, 0xa0}], 0x5, 0xec6c) [ 656.423101] device team_slave_0 entered promiscuous mode [ 656.449090] MINIX-fs: mounting unchecked file system, running fsck is recommended 10:18:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) [ 656.500714] attempt to access beyond end of device [ 656.531410] loop3: rw=2049, want=6434, limit=52 [ 656.564561] attempt to access beyond end of device [ 656.584602] loop3: rw=0, want=6434, limit=52 10:18:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x84, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6074}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffffa45a7448}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x100}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x24}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000003c0)=0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x88}}, 0x800) [ 656.671956] minix_free_inode: bit 1 already cleared 10:18:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200800, 0x0) r2 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000000)={r5, 0x1, 0x6, @remote}, 0x10) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x130, 0x13, 0x4, 0x70bd2d, 0x25dfdbff, {0x26, 0x8, 0x0, 0xb9, {0x4e21, 0x4e24, [0x7, 0x2, 0xffffffff, 0x2], [0x3, 0x7, 0x3f, 0x81], r5, [0x3, 0x52]}, 0x8, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x89, 0x1, "a7c44655c22ac47e94222c941c0acac571cc6716841a495e33145ce870408629c4e6ca576c6ad4de0e5e78290a88484ff238f17dcd12027d4074c4a62dc773b91210565d29711441ab02db89f538acc11f379cbe9723362c36d71d88561ea0e65392aa310fa7ad098afb09e4d3e89c0863b6e9aa81d47af61c0f35033d2a853475c797a678"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "19583be341de681554decfd0a68a566dd359f24663d25d1d7ee7b92ad56843e2d9b555b36a3a41c2408906657dff16039a1fbfcf2e0acaf2e9a0b50e15d1b7af05ac4f04a6c7bc7d0fdf90163e9c64a691"}]}, 0x130}, 0x1, 0x0, 0x0, 0x4040089}, 0x20000001) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000440)=""/197) 10:18:22 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xff}}, 0x20) [ 656.793064] device lo entered promiscuous mode [ 656.828152] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 656.839570] device lo left promiscuous mode [ 656.870478] attempt to access beyond end of device [ 656.885728] loop3: rw=2049, want=6434, limit=52 10:18:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$UI_SET_PROPBIT(r8, 0x4004556e, 0xf) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x2, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}}, 0x800) [ 656.923866] attempt to access beyond end of device [ 656.936518] device lo entered promiscuous mode [ 656.954588] loop3: rw=0, want=6434, limit=52 [ 656.974615] device lo left promiscuous mode 10:18:22 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 657.063866] minix_free_inode: bit 1 already cleared 10:18:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x88}}, 0x800) [ 657.169681] kauditd_printk_skb: 10 callbacks suppressed [ 657.169693] audit: type=1800 audit(1588501102.927:748): pid=761 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15812 res=0 [ 657.210573] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 657.242788] attempt to access beyond end of device [ 657.270421] loop3: rw=2049, want=6434, limit=52 [ 657.316733] attempt to access beyond end of device [ 657.333298] loop3: rw=0, want=6434, limit=52 [ 657.358740] audit: type=1800 audit(1588501103.117:749): pid=772 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 657.457377] minix_free_inode: bit 1 already cleared 10:18:23 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff00d) 10:18:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e1fdffff10000104040000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800c0001006d6163766c616e0018000280080001000800000004000580060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="2700010000000000"], 0x60}}, 0x800) 10:18:23 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x2]}}, 0x20) 10:18:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r1, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}]}, 0x28}}, 0x0) r2 = getuid() mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,mmap', @ANYRESDEC=r2, @ANYBLOB]) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040001}, 0x44881) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', &(0x7f00000001c0)='./file1\x00', 0x6, 0x2, &(0x7f0000000340)=[{&(0x7f0000000280)="6c5cf5b08208815570769ea4018a82fe21cefdead9048f0316dd029c4a540abe4b2b31be5640ab3c7fb0e0a11629d0f6d0e3f8", 0x33, 0x5}, {&(0x7f00000002c0)="372d795d657b13fece78940646b4f13636ca4a8d78174d746ccad1094f41e7d1c9d077ee0297d8a28c81fede227187ba9aba646522b6ab71632fe34d9b481258b6c7004eb49fd7517ee19273615c01c5e83f0eb102d4d4dd", 0x58, 0x101}], 0x808, &(0x7f00000003c0)={[{@nodatasum='nodatasum'}], [{@uid_eq={'uid', 0x3d, r2}}, {@obj_role={'obj_role', 0x3d, '127.0.0.1\x00'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB="53b46e5a", @ANYRES16=r3, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f00ff010000000000000000000000000001"], 0x5c}}, 0x0) [ 658.102392] audit: type=1800 audit(1588501103.857:750): pid=783 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16019 res=0 [ 658.140046] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 658.195727] attempt to access beyond end of device [ 658.217548] loop3: rw=2049, want=6434, limit=52 10:18:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000400)={r7, 0x1, 0x6, @broadcast}, 0x10) r8 = socket(0x100000000011, 0x2, 0x0) bind(r8, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000000)={r9, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x88}}, 0x800) [ 658.263010] attempt to access beyond end of device 10:18:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900000000daf10d627ba8af99e14c234b00000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f00ff010000000000000000100000000001590ed02c4e40a743c6161f372b3ea44e282a19a4c60d3e13644447dfeb7c48ea235e5894bb6eea4ddfebb15733aed9919d7b42e3d1e0a82d670fdaa1cb5f312e618262ee2d0a13e1eb6a1e93020672ea73c3d2cfdb4a3e8a34a215a33fc20aa72153a5b92a10c24b116f34d07cbf19e0388c6c780a"], 0x5c}}, 0x0) [ 658.296829] loop3: rw=0, want=6434, limit=52 [ 658.311909] audit: type=1800 audit(1588501104.067:751): pid=796 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 658.355635] device lo entered promiscuous mode 10:18:24 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x3]}}, 0x20) [ 658.427104] device lo left promiscuous mode [ 658.432551] minix_free_inode: bit 1 already cleared [ 658.494471] device lo entered promiscuous mode [ 658.521212] audit: type=1800 audit(1588501104.277:752): pid=813 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15970 res=0 [ 658.561102] device lo left promiscuous mode [ 658.570868] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 658.601179] attempt to access beyond end of device 10:18:24 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000040)={'veth0_vlan\x00', 0xfffff239}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB="5c000100", @ANYRES16=r0, @ANYBLOB="17092cbd70000000000001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) [ 658.631782] loop3: rw=2049, want=6434, limit=52 [ 658.643563] buffer_io_error: 10 callbacks suppressed [ 658.643574] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 658.711169] attempt to access beyond end of device [ 658.723298] loop3: rw=0, want=6434, limit=52 [ 658.738799] Buffer I/O error on dev loop3, logical block 3216, async page read [ 658.761148] audit: type=1800 audit(1588501104.517:753): pid=819 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:24 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x4]}}, 0x20) [ 658.830118] minix_free_inode: bit 1 already cleared 10:18:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x9, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) splice(r1, &(0x7f0000000040)=0xffffffff, r5, &(0x7f00000000c0)=0xfff, 0x4487, 0xc) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'macvlan1\x00'}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20048010}, 0x40) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x52181, 0x100a2}}, 0x88}}, 0x84800) [ 658.952156] audit: type=1800 audit(1588501104.707:754): pid=827 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15970 res=0 [ 658.994894] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 659.039088] attempt to access beyond end of device [ 659.049062] loop3: rw=2049, want=6434, limit=52 [ 659.061657] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 659.084149] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x10001, 0x1, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000200)={r6}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0xa800, 0x9, 0x8, 0x9, 0x7fffffff, 0x140000, 0x0, 0x3ff, r6}, &(0x7f0000000040)=0x20) [ 659.116960] attempt to access beyond end of device [ 659.142431] loop3: rw=0, want=6434, limit=52 [ 659.164227] Buffer I/O error on dev loop3, logical block 3216, async page read [ 659.185489] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:25 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x5]}}, 0x20) [ 659.210097] audit: type=1800 audit(1588501104.967:755): pid=833 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 659.257511] minix_free_inode: bit 1 already cleared [ 659.374181] audit: type=1800 audit(1588501105.127:756): pid=847 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16019 res=0 [ 659.413070] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 659.442831] attempt to access beyond end of device [ 659.462672] loop3: rw=2049, want=6434, limit=52 [ 659.503344] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 659.551789] attempt to access beyond end of device [ 659.564860] loop3: rw=0, want=6434, limit=52 [ 659.574659] Buffer I/O error on dev loop3, logical block 3216, async page read [ 659.583267] audit: type=1800 audit(1588501105.337:757): pid=855 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 659.647788] minix_free_inode: bit 1 already cleared 10:18:26 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff00e) 10:18:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000140)={0x8, 'bond0\x00', {'ip6gretap0\x00'}, 0x8}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, &(0x7f0000000040)=0x9, &(0x7f00000000c0)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x88}}, 0x800) 10:18:26 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x6]}}, 0x20) 10:18:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x14, r1, 0x917, 0xfffffffd}, 0x14}}, 0x0) [ 660.499246] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 660.528385] attempt to access beyond end of device [ 660.546004] loop3: rw=2049, want=6434, limit=52 10:18:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x50, 0x0, 0x917, 0x0, 0x2, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x50}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) sendmsg$AUDIT_USER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, 0x3ed, 0x300, 0x70bd2d, 0x25dfdbfb, "a39c21b1010b9037e4ea30e06768e688539fca8d3b654400ff5c93b45008a417fce9cecd3f2397b29d2f490877bd85b8a3f3a0fc0230d79eb5bc04c48b4095f2ee0224202f00aebe8295cbe8d32cbd3ca707844a57a419e112405d88e80902447ea0c9a3174a59ace2588b25d714ae2b7ec16a8e615d267472e8fdd7f33b013b06948091ef742d5b01b222070e6ee281387c27619a8c14a00d3a1b03e69b94acd9c0", ["", "", "", ""]}, 0xb4}, 0x1, 0x0, 0x0, 0x40088c0}, 0xc08d0) [ 660.578138] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:26 executing program 2: kexec_load(0x0, 0x7, &(0x7f0000000740)=[{&(0x7f0000000040)="12326b37e89eab92125dcbb437ac993dca687900bca7c4b725", 0x19, 0x2, 0x9f3e}, {&(0x7f00000001c0)="df352a791f318f196f8a0b03320c72aed683239fbe4068b178e496cfa7750745350850dac49a55a58cf2233693562fc54a83117ae2f41c3376d7927f3147529014fd3cf6cb9213f709beef038684de6218c8f05b16b59fdd1333", 0x5a, 0x0, 0x6}, {&(0x7f00000003c0)="282991b4f25a55b518d43b6efd5188d1b3f48d56ef904ae3aaefbd45e95b1819876f56ed7c4607d7537b37752640ad7ec0560ca2663b8030acc92e497c7dd5ad850b0d8b2981aba7de68e8b4c7e4b804821ad81d61c965781b8bf370843716d3e16c851fbe12e22812b793c0a2acbcb4100e644d73e23a68b4cbc7e8c1b9779b2c920f1c35e53132735819271fda16f6ccfd62a94cc3a999abbb9dbb547c56920d8e1c38f5cc05d3639884106d1ca42b7c953bc31a8ef41d69c141aae754865d7166cdfc5636c9176c2a1172642c0b4962c8e850d4194075172a03320570200e94b9536115efbbd3ab82221ed9655b5fc7f2262884f5d6c5", 0xf8, 0x1, 0x8}, {&(0x7f00000004c0)="1349759120adc2188d8a324da0b92e148699f3f86da7900dd37d51cf35da46b9009d48e7f20362de92264c5a216ce981e046f2421f1291885965dfc826969a34a9df05fa352c0ca369328cd398da7306f9b959c1f81c9975c697ffb6c20d0cd4c568dff9b87a96e39384fb1617c31abd38e77b1365e08cf1bfeb2a6f9b8f71e8837734ebb3090209ef9b326e67ec736bc777496a142182ae5ce42445b1c4463743a8b777395d31100d05e1ed17e10b147b88fe433a89651df3a9d3dc44fd5a036aaea494ef35e547f0d5", 0xca, 0x4abc8d0, 0x3}, {&(0x7f0000000240)="3e1963b7e29f9350cad5d5e83ace50be7d67417911235a457959493fdd0662584952858deee161b0348827e337c874217cf19002d8ecccaeaa181c0727f2f821dd64f7e7f65ebb07aacf864e9c6dda90e4f733c4520ebd90921d7a2f449476dccf1d17ec3464f340d04978c6fe74a9", 0x6f, 0x2, 0x6}, {&(0x7f00000005c0)="9cb448a4ead4e0c284fbc26c28f8530f0edacd580873181fd069b79b63c356b3c2a3a737dbccef9d149e861a08397eef5266e01702180099a92ff19c144ebff865987d384b856d70e0f373fafe954922f0487d093775419d29c7cc9c64980d0e2f93c450a194451bb5cf83662ad28e6b2756f21d25c09f6688ec5362", 0x7c, 0xfff, 0x6}, {&(0x7f0000000640)="302e9ba7aee498c093c1db255c4a540f2fb54548df14736f80a3d78aa43ad3fa4e072d5b50117e2dacd76116cf75ed7e01222aa47c3f29a590a579735b75034f0269a5e822e57330893139655d4de8ae59b0dfaf8f20ea459e79a0a0e0000506c77da66fd2804ef126b166b24f422b7cdfdf5b8d7835a70e93659ccdfb220b3131d18f87f6dc5d9d4977613275072d633e2ad6f3c2eb4c7db66ada2b86c4e855abb0709c010c3ea5c60586ca02194abe818708fb4e2cc00f64f8697168f7c8bf3fc92646", 0xc4, 0x10001, 0xcb}], 0x140000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000e4ffffffffff570012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000402aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500327c5c25945320d419db76ec6949857a9fdb8de2a54fb004dbf2876fa8a376b0a091f943307964f6d37f6dc95e1d47417e17ebd8ece92cc98ece2c13befca2c7b86ac0400cc1005d8a455cdabe4aedb30e091d9e3e310ff964c43c6f820fd9fe15599de5dd9d91729b1a24456a107ef8ac", @ANYRES32=r6, @ANYBLOB="08000a00f2d0cf75f75f36d4a062cd7806c6a92aa7e4a28f5b3279ea419e124da1d107e2e3dc11ea0f01185e3ce520ab389d164cc4ed693b17b5b1a49a631ef74fade1166f380a818f06d375ec88", @ANYRES32=r6, @ANYBLOB], 0x88}}, 0x800) [ 660.620907] attempt to access beyond end of device [ 660.640409] loop3: rw=0, want=6434, limit=52 [ 660.655366] Buffer I/O error on dev loop3, logical block 3216, async page read [ 660.683472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r2, 0x7004) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) [ 660.739251] netlink: 71 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:26 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x7]}}, 0x20) [ 660.791879] minix_free_inode: bit 1 already cleared 10:18:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x5c}}, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffff0000000006000000000000007f00000164010102e0000001ffffffff7f000001b368c2dd12141b7e53c8"], 0x28) [ 660.879941] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 660.905701] netlink: 71 bytes leftover after parsing attributes in process `syz-executor.2'. [ 660.950983] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 660.978944] attempt to access beyond end of device 10:18:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f00000001c0)={0x81, 0xa, 0x4, 0x10000, 0x0, {r6, r7/1000+10000}, {0x5, 0x1, 0x9, 0x4, 0x8, 0x6, "f39800e8"}, 0x3f, 0x3, @offset=0x7, 0x10000, 0x0, r0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r8, 0xc0405519, &(0x7f0000000140)={0x0, 0x3, 0x166, 0xa, 'syz0\x00', 0x6}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaeaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x88}}, 0x800) [ 661.011230] loop3: rw=2049, want=6434, limit=52 [ 661.024565] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 661.060013] attempt to access beyond end of device [ 661.091656] loop3: rw=0, want=6434, limit=52 [ 661.111227] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:26 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x10]}}, 0x20) 10:18:27 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom(r0, &(0x7f0000001200)=""/4096, 0x1000, 0x0, &(0x7f0000000080)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB], 0x2}, 0x1, 0x0, 0x0, 0x20040001}, 0x50842) r2 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000000)={r5, 0x1, 0x6, @remote}, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf8, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xae, 0xac, "b442bb1b1c1c991b3aa85afa14b3df7702f754012ea6364461180b3f50e636fd97baa51225e9652904e9f64639bf3285d8c98571660c6833e5c9e1ba20debdbb41ed8f957f47d2681a4fb730c9341b55e0d0e9656d78643dcedcf60f19df00500266fa41a60fa91975282acb6da940f84ffdf6677822c884679b62fe7615f99988bb43afeae90361739e3418aaf3bfda29e64b9daae64b0c9da1216f1c799b8eb6530888a9ae14a33494"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0xbfde}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000080}, 0x40884) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB="04000000", @ANYRES16=r6, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f00ff010000000000000000000000000001"], 0x5c}}, 0x0) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r8, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) [ 661.247346] minix_free_inode: bit 1 already cleared [ 661.331723] device lo entered promiscuous mode [ 661.355078] device lo left promiscuous mode [ 661.386135] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 661.418265] attempt to access beyond end of device [ 661.431270] loop3: rw=2049, want=6434, limit=52 [ 661.455118] device lo entered promiscuous mode [ 661.465463] attempt to access beyond end of device [ 661.474151] device lo left promiscuous mode [ 661.479837] loop3: rw=0, want=6434, limit=52 [ 661.560884] minix_free_inode: bit 1 already cleared 10:18:28 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff00f) 10:18:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000040)=0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400ffffffffffff0000060002000100000008000500", @ANYRES32=r6, @ANYBLOB="ae7ffbddaa1169c0c0c308001300", @ANYRES32=r9, @ANYBLOB], 0x88}}, 0x800) 10:18:28 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x48]}}, 0x20) 10:18:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000200)={r6}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000000)={r6, @in6={{0xa, 0x4e20, 0x1, @private2, 0xffffff27}}, 0xf, 0x1000}, 0x90) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x50, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x80}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x50}}, 0x0) [ 662.650397] kauditd_printk_skb: 6 callbacks suppressed [ 662.650409] audit: type=1800 audit(1588501108.407:764): pid=930 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16362 res=0 [ 662.654126] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 662.711159] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 662.748748] attempt to access beyond end of device [ 662.767470] loop3: rw=2049, want=6434, limit=52 [ 662.801430] attempt to access beyond end of device [ 662.831247] loop3: rw=0, want=6434, limit=52 [ 662.849744] audit: type=1800 audit(1588501108.607:765): pid=937 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 662.855366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:28 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x4c]}}, 0x20) [ 662.957458] minix_free_inode: bit 1 already cleared 10:18:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$inet_buf(r2, 0x0, 0x23, &(0x7f0000000280)="8b7a9ae031ae4d83af60e2adb395b154ef303e8893502c063c8f366bd2e3f68a86ddad8a8ab08586d2c1265e6c2d73659d969ecaec49481b84365edf66c174b93167dbf2ce33c4537898ae72c70de7fd089631fc0bf38acad12c54be88e6323e6f7ff01603c5a621f27ab517e26fc6a5efe868c950eb89dc1a597c113905189314be7b6e1e2b4d78d91f70c733a4c09d4ba79b64ebd0933eab9309f3f85a26512c696f7316c509d5cb368087", 0xac) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@getstat={0xe0, 0x15, 0x2, 0x70bd2c, 0x25dfdbfd, {{'morus1280\x00'}, [], [], 0x400, 0x2400}, ["", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) [ 663.044469] audit: type=1800 audit(1588501108.797:766): pid=943 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16356 res=0 [ 663.056794] MINIX-fs: mounting unchecked file system, running fsck is recommended 10:18:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) write$P9_RGETLOCK(r2, &(0x7f0000000040)={0x1f, 0x37, 0x2, {0x1, 0x800, 0xe95b, r3, 0x1, '+'}}, 0x1f) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={r8}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x7fff, 0x7, 0x8009, 0x3, 0x6, 0x0, 0x0, 0x100, r8}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@mpls_delroute={0x4c, 0x19, 0x0, 0x70bd27, 0x25dfdbfc, {0x1c, 0x10, 0x0, 0xff, 0xfc, 0x3, 0x0, 0xa, 0x400}, [@RTA_VIA={0x14, 0x12, {0x2f, "f3f8da6d7b48b3ba8b807e9f4842"}}, @RTA_DST={0x8, 0x1, {0xff, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x4}}, @RTA_DST={0x8, 0x1, {0x2, 0x0, 0x1}}]}, 0x4c}}, 0x800) 10:18:28 executing program 5: ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000002c0)=""/144) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="59525b60972508000118b0ad281fc9f14bd80340c9d7000000000200000008b6291603267f90db00010001000000080001000100000008000100000000000800019617f627ae06cccb00c9806e35ff787c6e45a8214bdd0200000008000100"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000380)={0x81, "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"}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap$snddsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x110, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r3, 0x80000, r4}) sendto$inet(r2, 0x0, 0x0, 0x240087fd, &(0x7f0000000240)={0x2, 0x11, @multicast1}, 0x10) [ 663.121343] attempt to access beyond end of device [ 663.172918] loop3: rw=2049, want=6434, limit=52 [ 663.211823] attempt to access beyond end of device [ 663.224156] loop3: rw=0, want=6434, limit=52 [ 663.235580] audit: type=1800 audit(1588501108.987:767): pid=954 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:29 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x60]}}, 0x20) [ 663.337239] minix_free_inode: bit 1 already cleared 10:18:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r3, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400010006000900080009000500ae803cd38e93194ce34267c82df1d1208fbcb781b67ac379c8010bbe84319238a9b9a2bb4152dd4d436fb8434f9069d0f8c9d1d385a7f10f2b6bd3fb7c"], 0x12) r5 = dup(r2) clock_getres(0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000000)=0x6) [ 663.437815] audit: type=1800 audit(1588501109.197:768): pid=962 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16356 res=0 10:18:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f00000001c0)={0x1, 0x9}) sendmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x113040, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000200)={r6}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000100)={r6, 0x7ff}, 0x8) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x30e, 0x7, 0x5, 0x80, 0x3, @remote}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r6, 0x1000000}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) [ 663.480494] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 663.509996] attempt to access beyond end of device [ 663.533265] loop3: rw=2049, want=6434, limit=52 [ 663.563593] attempt to access beyond end of device [ 663.579439] loop3: rw=0, want=6434, limit=52 [ 663.610548] audit: type=1800 audit(1588501109.367:769): pid=970 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="88a20143159d05f496aedf02beadedbae59070e8f0099f94ecdc4eb095408a375d2a4f99fd3769d2f995225ed463266761b4846d9938101a7412f6e8f2c87f8b505f95907f0c56a88f50ba30cd0439", @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f00ff010000000000000000000000000001"], 0x5c}}, 0x0) [ 663.737360] minix_free_inode: bit 1 already cleared 10:18:30 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff010) 10:18:30 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x68]}}, 0x20) 10:18:30 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x40, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$getregset(0x4204, r2, 0x60b, &(0x7f0000000040)={&(0x7f0000001200)=""/4096, 0x1000}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 10:18:30 executing program 5: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r4}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x4, 0x1020, 0xffffff80, r4}, &(0x7f0000000040)=0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x10000, 0x0) [ 664.647234] audit: type=1800 audit(1588501110.407:770): pid=995 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16372 res=0 [ 664.685647] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 664.713858] attempt to access beyond end of device [ 664.726968] loop3: rw=2049, want=6434, limit=52 [ 664.733280] buffer_io_error: 8 callbacks suppressed [ 664.733292] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 664.753806] attempt to access beyond end of device 10:18:30 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x6c]}}, 0x20) [ 664.777673] loop3: rw=0, want=6434, limit=52 [ 664.792939] Buffer I/O error on dev loop3, logical block 3216, async page read [ 664.802155] audit: type=1800 audit(1588501110.557:771): pid=1002 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 664.908233] minix_free_inode: bit 1 already cleared [ 665.043852] audit: type=1800 audit(1588501110.797:772): pid=1008 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16372 res=0 [ 665.062104] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 665.132421] attempt to access beyond end of device [ 665.151292] loop3: rw=2049, want=6434, limit=52 [ 665.165621] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 665.194185] attempt to access beyond end of device [ 665.212379] loop3: rw=0, want=6434, limit=52 [ 665.222995] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:31 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x74]}}, 0x20) 10:18:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = msgget(0x2, 0x2) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000040)=""/57) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x88}}, 0x800) [ 665.242193] audit: type=1800 audit(1588501110.997:773): pid=1014 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) readahead(r0, 0x7fff, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) syncfs(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xffff, 0x22104) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) [ 665.318060] minix_free_inode: bit 1 already cleared [ 665.506004] MINIX-fs: mounting unchecked file system, running fsck is recommended 10:18:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="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"], 0x88}}, 0x800) 10:18:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@sha1={0x1, "594eb6692f111da8cc0058e102dc83e05d76ba49"}, 0x15, 0x0) 10:18:31 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x7a]}}, 0x20) [ 665.657165] minix_free_inode: bit 1 already cleared 10:18:31 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff048) [ 665.774657] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 665.832358] attempt to access beyond end of device [ 665.854182] loop3: rw=2049, want=6434, limit=52 [ 665.873159] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000480)={0xfffffffe, "b17b01656bdad5a959203db90aa6e48406e70033854f8148ce98633eb1addccf", 0x1, 0x1, 0x5, 0x8, 0x8, 0x2, 0x6, 0x1c2c5e33}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1709000000000000000021000000050007000000002a641e8f0b550b9909000000000014002000fe8000000000000000000000000000bb08000a00004b84a6bc53000000060002000100000014001f000000000000880000000000"], 0x5c}}, 0x8805) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000040)={0xffff7fff, 0x6, 0x0, 0xc8fd, 0x4, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r8, 0x80845663, &(0x7f00000003c0)={0x0, @reserved}) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0xd613ce081c177094}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x88}, 0x1, 0x0, 0x0, 0x240040c0}, 0x800) [ 665.920518] attempt to access beyond end of device [ 665.934525] loop3: rw=0, want=6434, limit=52 [ 665.950789] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:31 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0xf0]}}, 0x20) [ 666.097951] minix_free_inode: bit 1 already cleared 10:18:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000860002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x88}}, 0x800) [ 666.221386] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 666.269721] attempt to access beyond end of device [ 666.285078] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 666.294007] loop3: rw=2049, want=6434, limit=52 [ 666.314380] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 666.343888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 666.345896] attempt to access beyond end of device [ 666.383697] loop3: rw=0, want=6434, limit=52 [ 666.394192] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:32 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0xff]}}, 0x20) [ 666.507131] minix_free_inode: bit 1 already cleared 10:18:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xc, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x88}}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000200)={r10}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r10, @in={{0x2, 0x4e22, @multicast1}}, 0xff, 0x6, 0x80, 0xfce, 0x0, 0x80, 0x9}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r11, 0x35}, 0x8) [ 666.605894] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 666.658735] attempt to access beyond end of device [ 666.674020] loop3: rw=2049, want=6434, limit=52 [ 666.683493] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000000)={0x37ac, "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"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r4, 0x917, 0x70bd29, 0xffffffff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x54}}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, r3, 0xb9a8c000) sendto$inet(r0, 0x0, 0x0, 0x801, &(0x7f0000e68000)={0x2, 0x14, @remote}, 0x10) [ 666.726850] attempt to access beyond end of device [ 666.731941] loop3: rw=0, want=6434, limit=52 [ 666.756762] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:32 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:18:32 executing program 5: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f00000001c0)=""/128, 0x80}, {&(0x7f0000000240)=""/226, 0xe2}, {&(0x7f0000000340)=""/67, 0x43}, {&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/78, 0x4e}, {&(0x7f0000000580)=""/45, 0x2d}], 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000780)={'filter\x00', 0x0, 0x4, 0x9f, [], 0x4, &(0x7f0000000680)=[{}, {}, {}, {}], &(0x7f00000006c0)=""/159}, &(0x7f0000000800)=0x78) r3 = socket$inet(0x2, 0x5, 0x0) sendto$inet(r3, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) prctl$PR_SET_KEEPCAPS(0x8, 0x0) [ 666.987314] minix_free_inode: bit 1 already cleared 10:18:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000001c0)={0x0, 0x3b, 0x9, 0xc2, 0x8, 0x2}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x88}}, 0x800) 10:18:32 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff04c) [ 667.175883] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 667.247808] attempt to access beyond end of device [ 667.273979] loop3: rw=2049, want=6434, limit=52 [ 667.298139] attempt to access beyond end of device [ 667.317445] loop3: rw=0, want=6434, limit=52 10:18:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="e11e3749983465d97550d34343efae3b13c2652b3e27433729c587cbcb78b2b313379de9160a16380c1f6ae00368b0f8b6561a71a049a207a8e1c4ba4e48d22962679c3c795048aa3afb0fc3e609b197cc6230561facb42d5bdad2c5931c39afff5e0f95eafc243741f4c22e5be2ac5e34e82efeb8602c3147ec3efeebc4eda3cef8138a39fa0a889a763415705a", 0x8e, 0x2}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000240)={r5, 0xf0, &(0x7f0000000140)=""/240}) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000280)=0x1de000) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 10:18:33 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}, 0x20) [ 667.407215] minix_free_inode: bit 1 already cleared [ 667.533541] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 667.573793] attempt to access beyond end of device [ 667.589156] loop3: rw=2049, want=6434, limit=52 [ 667.616478] attempt to access beyond end of device 10:18:33 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}, 0x20) [ 667.645182] loop3: rw=0, want=6434, limit=52 [ 667.665214] kauditd_printk_skb: 10 callbacks suppressed [ 667.665234] audit: type=1800 audit(1588501113.417:784): pid=1140 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 667.757259] minix_free_inode: bit 1 already cleared [ 667.840084] audit: type=1800 audit(1588501113.597:785): pid=1149 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16376 res=0 10:18:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) socket$inet(0x2, 0x6, 0x9) [ 667.881588] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 667.901114] attempt to access beyond end of device [ 667.911886] loop3: rw=2049, want=6434, limit=52 [ 667.934895] attempt to access beyond end of device [ 667.949568] loop3: rw=0, want=6434, limit=52 [ 667.960526] audit: type=1800 audit(1588501113.717:786): pid=1153 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:33 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x4]}}, 0x20) [ 668.087442] minix_free_inode: bit 1 already cleared [ 668.189409] audit: type=1800 audit(1588501113.947:787): pid=1165 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16376 res=0 [ 668.220934] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 668.265334] attempt to access beyond end of device [ 668.302840] loop3: rw=2049, want=6434, limit=52 [ 668.339107] attempt to access beyond end of device [ 668.344329] loop3: rw=0, want=6434, limit=52 [ 668.350150] audit: type=1800 audit(1588501114.107:788): pid=1172 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r3}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="7f006600bcf865559d33703c9f762c5a367ddc1b3dfaa51a4ebde5725ea304d2fcf7e2c6fae66205e99529f57f8ef94eab037da29758dd54bfd7733fcdcb36f11d9586dcfacb8ce9302e256bb7926b5b85f9f4b565af9cd774bf37dbe51d6bbdf887e00ba17f2dffdeab52498730aafb452da53fefce669c5a52ef233deef0a3"], 0x6e) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/160) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 10:18:34 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x5]}}, 0x20) [ 668.437380] minix_free_inode: bit 1 already cleared [ 668.534033] audit: type=1800 audit(1588501114.287:789): pid=1182 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16378 res=0 [ 668.579571] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 668.610387] attempt to access beyond end of device [ 668.623710] loop3: rw=2049, want=6434, limit=52 10:18:34 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x6]}}, 0x20) [ 668.647611] attempt to access beyond end of device [ 668.652802] loop3: rw=0, want=6434, limit=52 [ 668.677318] audit: type=1800 audit(1588501114.437:790): pid=1186 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 668.757720] minix_free_inode: bit 1 already cleared [ 668.838635] audit: type=1800 audit(1588501114.597:791): pid=1195 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15873 res=0 [ 668.878603] MINIX-fs: mounting unchecked file system, running fsck is recommended 10:18:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000000)={0xffff, 0x0, {0x3, 0x0, 0xa1c, 0x1, 0x3}, 0x3ff}) [ 668.904260] attempt to access beyond end of device [ 668.921886] loop3: rw=2049, want=6434, limit=52 [ 668.951177] attempt to access beyond end of device [ 668.968977] loop3: rw=0, want=6434, limit=52 [ 668.988237] audit: type=1800 audit(1588501114.747:792): pid=1200 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:34 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x7]}}, 0x20) 10:18:34 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff068) [ 669.097736] minix_free_inode: bit 1 already cleared [ 669.215277] audit: type=1800 audit(1588501114.967:793): pid=1215 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16364 res=0 [ 669.249137] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 669.293458] attempt to access beyond end of device [ 669.306144] loop3: rw=2049, want=6434, limit=52 10:18:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getdents64(r1, &(0x7f0000000040)=""/249, 0xf9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 669.344352] attempt to access beyond end of device [ 669.361988] loop3: rw=0, want=6434, limit=52 10:18:35 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x10]}}, 0x20) [ 669.477196] minix_free_inode: bit 1 already cleared [ 669.593916] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 669.621243] attempt to access beyond end of device [ 669.641081] loop3: rw=2049, want=6434, limit=52 [ 669.670384] attempt to access beyond end of device [ 669.692633] loop3: rw=0, want=6434, limit=52 10:18:35 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x48]}}, 0x20) [ 669.811873] minix_free_inode: bit 1 already cleared 10:18:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "d0895bda035d96ab468a1ac81ff133c8"}, 0x11, 0x1) [ 669.930839] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 669.970941] attempt to access beyond end of device [ 669.982876] loop3: rw=2049, want=6434, limit=52 [ 670.003293] buffer_io_error: 16 callbacks suppressed [ 670.003306] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 670.056028] attempt to access beyond end of device [ 670.069326] loop3: rw=0, want=6434, limit=52 [ 670.081154] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:35 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x4c]}}, 0x20) [ 670.157429] minix_free_inode: bit 1 already cleared 10:18:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) [ 670.253510] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 670.284454] attempt to access beyond end of device [ 670.302026] loop3: rw=2049, want=6434, limit=52 [ 670.327634] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 670.359245] attempt to access beyond end of device [ 670.369838] loop3: rw=0, want=6434, limit=52 10:18:36 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x60]}}, 0x20) [ 670.381621] Buffer I/O error on dev loop3, logical block 3216, async page read [ 670.460118] minix_free_inode: bit 1 already cleared [ 670.598276] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 670.628879] attempt to access beyond end of device [ 670.644408] loop3: rw=2049, want=6434, limit=52 [ 670.656319] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 670.686021] attempt to access beyond end of device [ 670.696768] loop3: rw=0, want=6434, limit=52 [ 670.707862] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:36 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x68]}}, 0x20) 10:18:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="49006ec8faa9f5b62c70c34a52be3f8d3f1a3b9d2b75598fd11006861d8b54810196245ef0dff69173ad", @ANYRES16=r3, @ANYBLOB="08002dbd7000ffdbdf25010000000000000001410000002000170000000f000002006574683a6272696467655f736c6176655f310000"], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x1) [ 670.810860] minix_free_inode: bit 1 already cleared [ 670.915024] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 670.963885] attempt to access beyond end of device [ 670.982144] loop3: rw=2049, want=6434, limit=52 [ 671.004457] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:36 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff06c) [ 671.061179] attempt to access beyond end of device [ 671.076119] loop3: rw=0, want=6434, limit=52 [ 671.092319] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:36 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x6c]}}, 0x20) [ 671.177206] minix_free_inode: bit 1 already cleared 10:18:37 executing program 1: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r5, @ANYBLOB], 0x2}, 0x1, 0x0, 0x0, 0x20000001}, 0x50842) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x68, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x1e, 0x3, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_REG_RULES={0x0, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x3f}, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x10000}, @NL80211_ATTR_FREQ_RANGE_START={0x0, 0x2, 0x4ab}, @NL80211_ATTR_FREQ_RANGE_START={0x0, 0x2, 0x800}, @NL80211_ATTR_FREQ_RANGE_START={0x0, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x0, 0x2, 0x4f}, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0) [ 671.342275] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 671.400021] attempt to access beyond end of device [ 671.424941] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 671.438569] loop3: rw=2049, want=6434, limit=52 [ 671.461812] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 671.502522] attempt to access beyond end of device 10:18:37 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x74]}}, 0x20) [ 671.543243] loop3: rw=0, want=6434, limit=52 [ 671.549152] Buffer I/O error on dev loop3, logical block 3216, async page read [ 671.611134] minix_free_inode: bit 1 already cleared [ 671.772473] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 671.830574] attempt to access beyond end of device 10:18:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f0000000280)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r3 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000400)={r4, 0x1, 0x6, @broadcast}, 0x10) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x9) write$UHID_DESTROY(r8, &(0x7f00000001c0), 0x4) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={r6, 0x1, 0x6, @remote}, 0x10) r9 = getuid() mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,mmap', @ANYRESDEC=r9, @ANYBLOB="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"]) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, [], 0x29}, @in=@local, 0x4e21, 0x0, 0x4e20, 0x9, 0x8, 0x0, 0x20, 0x89, r6, r9}, {0x0, 0x51, 0x6, 0x1, 0x5, 0x2, 0x0, 0x8dd}, {0x60, 0x6, 0x5, 0x8001}, 0x100, 0x6e6bbc, 0x2, 0x1, 0x2}, {{@in6=@private2={0xfc, 0x2, [], 0x1}, 0x4d5, 0x33}, 0xa, @in=@broadcast, 0x3506, 0x3, 0x3, 0x7, 0x4603, 0x1, 0xa5b1}}, 0xe8) [ 671.861748] loop3: rw=2049, want=6434, limit=52 [ 671.891676] attempt to access beyond end of device [ 671.903186] loop3: rw=0, want=6434, limit=52 10:18:37 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x7a]}}, 0x20) [ 671.961479] device lo entered promiscuous mode [ 671.972471] minix_free_inode: bit 1 already cleared 10:18:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @remote}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24014090}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000000c0)={r4, 0x0}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000000)={r4, 0x1}) [ 672.118380] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 672.157857] attempt to access beyond end of device 10:18:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000080)) [ 672.186466] loop3: rw=2049, want=6434, limit=52 10:18:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x80000001) [ 672.230323] attempt to access beyond end of device [ 672.246802] loop3: rw=0, want=6434, limit=52 10:18:38 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0xf0]}}, 0x20) [ 672.337289] minix_free_inode: bit 1 already cleared 10:18:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'veth0_vlan\x00', {0xf1}, 0x3ab6}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x40) [ 672.473517] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 672.526948] attempt to access beyond end of device 10:18:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) socket$isdn(0x22, 0x3, 0x23) [ 672.548669] loop3: rw=2049, want=6434, limit=52 [ 672.587483] attempt to access beyond end of device [ 672.612925] loop3: rw=0, want=6434, limit=52 [ 672.697247] minix_free_inode: bit 1 already cleared [ 672.739691] device lo left promiscuous mode [ 672.830339] device lo entered promiscuous mode [ 672.887004] device lo left promiscuous mode 10:18:39 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff074) 10:18:39 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0xff]}}, 0x20) 10:18:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) ioctl$void(0xffffffffffffffff, 0xc0045878) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={r5, 0x1, 0x6, @remote}, 0x10) r6 = getuid() mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d7463702c706f5ce314f79b1fcb61303030303030303030346532322c6d6d6170", @ANYRESDEC=r6, @ANYBLOB="56f11d0a949126e5add8ccfd9863cb38d90db964216ddcabf82ba52a4c0cbc373d7b02ef021084c462ab5f1bb0247d45fffc815af6371af83783e0232d5b9d4d14ffb58415b0908448a5cdc8b98bf0e29afb6a2690fd26b8db2f227d97366a3ea23eae8ed6188e0af73eed"]) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, [], 0x3b}, @in6=@loopback, 0x4e21, 0x6, 0x4e24, 0x1d, 0xa, 0xa0, 0x40, 0x2, r5, r6}, {0x9, 0x1, 0x4, 0x5, 0xfffffffffffffff8, 0x4, 0xffffffff00000001, 0x2000000ed0}, {0xe5, 0x3, 0x2, 0x2}, 0x4, 0x0, 0x1, 0x1, 0x73db2ef2b082d68b}, {{@in=@empty, 0x4d3, 0x32}, 0x2, @in=@multicast2, 0x3505, 0x4, 0x0, 0x1f, 0x4, 0x7fffffff, 0xbb}}, 0xe8) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_STEREODEVS(r8, 0x80044dfb, &(0x7f00000001c0)) 10:18:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TCSETX(r3, 0x5433, &(0x7f0000000080)={0xff, 0x9, [0x400, 0xe6d7, 0x40, 0x0, 0x6], 0x4}) [ 673.513017] kauditd_printk_skb: 19 callbacks suppressed [ 673.513029] audit: type=1800 audit(1588501119.267:813): pid=1397 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16414 res=0 [ 673.530529] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 673.582590] attempt to access beyond end of device [ 673.593532] loop3: rw=2049, want=6434, limit=52 10:18:39 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 673.631258] attempt to access beyond end of device [ 673.644907] loop3: rw=0, want=6434, limit=52 [ 673.662697] audit: type=1800 audit(1588501119.417:814): pid=1404 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 673.728030] minix_free_inode: bit 1 already cleared [ 673.851531] audit: type=1800 audit(1588501119.607:815): pid=1410 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16414 res=0 [ 673.889198] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 673.946143] attempt to access beyond end of device [ 673.963218] loop3: rw=2049, want=6434, limit=52 [ 674.003819] attempt to access beyond end of device [ 674.023721] loop3: rw=0, want=6434, limit=52 10:18:39 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2]}}, 0x20) [ 674.041753] audit: type=1800 audit(1588501119.797:816): pid=1414 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 674.133083] minix_free_inode: bit 1 already cleared [ 674.239471] audit: type=1800 audit(1588501119.997:817): pid=1419 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16414 res=0 [ 674.283410] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 674.320456] attempt to access beyond end of device [ 674.328737] loop3: rw=2049, want=6434, limit=52 [ 674.366204] attempt to access beyond end of device [ 674.386180] loop3: rw=0, want=6434, limit=52 [ 674.409092] audit: type=1800 audit(1588501120.167:818): pid=1423 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:40 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3]}}, 0x20) [ 674.527557] minix_free_inode: bit 1 already cleared 10:18:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r4, 0x536ae464467e3e0b, 0x0, 0x0, {0x1e}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x200000000000000}, 0x0) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) 10:18:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r3, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x80020) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) [ 674.592537] audit: type=1800 audit(1588501120.347:819): pid=1435 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16409 res=0 10:18:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000000000000731af2befa5bea9d9802410000001400136576683a6d3bea"], 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x400, 0x4) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) [ 674.645405] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 674.685778] attempt to access beyond end of device 10:18:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$packet(0x11, 0x2, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYBLOB], 0x30}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4], 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x78, r4, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x85c, 0x1, 0x1, 0x5]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x2b, 0x3, 0x8, 0x1, 0x2]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7, 0x1f, 0x6, 0x9]}]}, 0x78}}, 0x800) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB], 0x88}}, 0x800) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000003c0)={0x0, 0x3}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) bind$packet(r7, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r7, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x104, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r7, 0x800442d4, &(0x7f0000000040)=0x5d) [ 674.715676] loop3: rw=2049, want=6434, limit=52 [ 674.744485] attempt to access beyond end of device 10:18:40 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4]}}, 0x20) [ 674.767004] loop3: rw=0, want=6434, limit=52 [ 674.776270] audit: type=1800 audit(1588501120.527:820): pid=1449 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 674.846011] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 674.879409] minix_free_inode: bit 1 already cleared 10:18:40 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff07a) [ 674.964567] audit: type=1800 audit(1588501120.717:821): pid=1462 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15844 res=0 [ 674.999558] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 675.038224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 675.042533] attempt to access beyond end of device [ 675.074327] loop3: rw=2049, want=6434, limit=52 [ 675.091487] buffer_io_error: 14 callbacks suppressed [ 675.091498] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 675.115900] attempt to access beyond end of device [ 675.135499] loop3: rw=0, want=6434, limit=52 10:18:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r6, 0x5501) socket(0x1, 0x803, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r8, @ANYBLOB, @ANYRES32=r8, @ANYBLOB], 0x88}}, 0x800) 10:18:40 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5]}}, 0x20) [ 675.151048] Buffer I/O error on dev loop3, logical block 3216, async page read [ 675.174949] audit: type=1800 audit(1588501120.927:822): pid=1487 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 675.257466] minix_free_inode: bit 1 already cleared [ 675.331163] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 675.350634] attempt to access beyond end of device [ 675.352101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 675.362923] loop3: rw=2049, want=6434, limit=52 [ 675.375602] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 675.412895] attempt to access beyond end of device [ 675.423787] loop3: rw=0, want=6434, limit=52 [ 675.435603] Buffer I/O error on dev loop3, logical block 3216, async page read [ 675.454145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:41 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6]}}, 0x20) 10:18:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r3 = timerfd_create(0x0, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'ip6gretap0\x00', {}, 0x800}) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SG_GET_VERSION_NUM(r7, 0x2282, &(0x7f0000000080)) [ 675.537828] minix_free_inode: bit 1 already cleared 10:18:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240)={0xfa, 0x1, 0x7, 0x0, 0x7, 0x1, 0x6, 0x0, 0x0, 0x9, 0x9, 0x20, 0x1, 0x2}, 0xe) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f0000000140)={0x7, 'syz1\x00'}) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000001c0)) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r6, 0xc0305615, &(0x7f00000000c0)={0x0, {0x4, 0x2}}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8800000010000104000000000000000000000000abc413b318a37f58f759cf803ca96725c10bafa8b3e7a73a81af19baa5ddac3c427916e5849be7c413288b800f70b1acc42d84dc86e72339510fc12761ced20bf63dd5077b70e0815abefb221d05e1a52e3f4892ed528f8751bc9232428b8446151eb72fb94cfe004e450c7efcf6808deb6d8d65711dd255179731f7efccb2337986f806099ac659bc5ca4311c8da4dba3c2db", @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r5, @ANYBLOB="c6f32f8ddd6b4422bb4843d40ce0df14b6a7a4140af7d1894cbe66f8b233c566f5f856bdb23bddad1ae968ba7f6943fa68014bbf920b32659d6bc7ae94186d68dcf9da9f2a59a638fd4e2a8a85b7cfc69c11f8ede768771c34aea8d004612d8384a572bd7e3d66c99b2f64f8aadc18d9ff6291524b63e6bdbaba964aa7417e5cd3ba0437e54246", @ANYRES32=r5, @ANYRESOCT=r3], 0x88}}, 0x800) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r8, 0x80386433, &(0x7f0000000680)=""/4096) 10:18:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) [ 675.685046] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 675.706891] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 675.726022] attempt to access beyond end of device [ 675.738755] loop3: rw=2049, want=6434, limit=52 [ 675.749838] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 675.776094] attempt to access beyond end of device [ 675.790147] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 675.801379] loop3: rw=0, want=6434, limit=52 [ 675.812802] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:41 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7]}}, 0x20) 10:18:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="a6096cab5b9ddcbb36c0cb19d338fcd4a158789ad985228dbc96d62154a504bb105e1e7fc739b07cb0eacd3e2d4b8f60339f8bf3b968bd0a535b696ea72b67293ae3d5a14fc279312b43e4fdfb373ee456ee864ad687903f83de392357fc43fd26a58d12e9079e5f25f8a128f39b3ce2c22a68e96ba187ae3a5b185d0971c7c439a9d11d12ac0fd7d642d0e9d3695c58ec3302b52280845acf711500000000000000000000000000000008a4a20f83db0e87174573d052be28aacd405536f44da7b3c7f3246618fb556c4142a26b2ac335c4dd6df564eb076a01213d249e9aa493d907b4d0ffd3"], 0x88}}, 0x800) [ 675.907532] minix_free_inode: bit 1 already cleared [ 676.050623] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 676.084683] attempt to access beyond end of device [ 676.104167] loop3: rw=2049, want=6434, limit=52 [ 676.121627] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) fcntl$addseals(r4, 0x409, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x88}}, 0x800) [ 676.159384] attempt to access beyond end of device [ 676.177964] loop3: rw=0, want=6434, limit=52 [ 676.196283] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:42 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) 10:18:42 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x10]}}, 0x20) [ 676.317668] minix_free_inode: bit 1 already cleared 10:18:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="800200001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003aff12800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB="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"], 0x280}}, 0x800) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r7, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r7, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0xffff, @remote}, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x40, 0x0, 0x0, 0x0, 0x8a8c, &(0x7f0000000040)='lo\x00', 0x7, 0x1c29, 0x3}) [ 676.459477] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 676.493377] attempt to access beyond end of device [ 676.526479] loop3: rw=2049, want=6434, limit=52 [ 676.546074] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 676.566124] netlink: 608 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$RTC_WIE_ON(r4, 0x700f) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f00000000c0)=""/51) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) recvfrom(r7, 0x0, 0x0, 0x40000100, 0x0, 0xffffffffffffffc4) r9 = socket$caif_stream(0x25, 0x1, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f0000000040)=""/6, &(0x7f0000000080)=0x6) 10:18:42 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) [ 676.579823] attempt to access beyond end of device [ 676.597798] loop3: rw=0, want=6434, limit=52 [ 676.613722] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:42 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x48]}}, 0x20) 10:18:42 executing program 5: r0 = socket$inet(0x2, 0xa, 0x81) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) [ 676.697953] netlink: 608 bytes leftover after parsing attributes in process `syz-executor.2'. [ 676.727939] minix_free_inode: bit 1 already cleared 10:18:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) 10:18:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="8800000010000104000017000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x88}}, 0x800) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r7, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r7, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000280)=0x89, 0x4) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x6400, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, 0x2, 0x2, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xff}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22010041}, 0x4801) [ 676.853529] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 676.883294] attempt to access beyond end of device [ 676.889454] loop3: rw=2049, want=6434, limit=52 [ 676.914967] attempt to access beyond end of device 10:18:42 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x3, 0x1a3440) sendto$inet(r0, 0x0, 0x0, 0x40467bf, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000000c0)=""/155, &(0x7f0000000000)=0x9b) [ 676.945818] loop3: rw=0, want=6434, limit=52 10:18:42 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4c]}}, 0x20) [ 677.016263] minix_free_inode: bit 1 already cleared [ 677.153978] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 677.193866] attempt to access beyond end of device [ 677.207060] loop3: rw=2049, want=6434, limit=52 [ 677.247167] attempt to access beyond end of device 10:18:43 executing program 5: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x6, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, 0x0, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xc050) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000080)="413cae5f20d98b6bdbef88f5d17e83c3fe41", 0x12) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$DRM_IOCTL_GET_MAP(r7, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x642304b2, 0x2, 0x42, &(0x7f0000ffe000/0x1000)=nil, 0x8000}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1b) sendto$inet(r6, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) [ 677.271788] loop3: rw=0, want=6434, limit=52 [ 677.394458] minix_free_inode: bit 1 already cleared 10:18:45 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x800400204) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000080)=0xe0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) 10:18:45 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x60]}}, 0x20) 10:18:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket(0x5, 0x4000000000080002, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r7, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r7, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r9 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r9, &(0x7f00000000c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r9, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r11 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'lo\x00'}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0xfffffffffffffd62, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x3c, 0x2, 0x0, 0x1, {{0x8, 0x1, r1}, {0x8, 0x2, r1}, [@IFLA_GTP_ROLE, @IFLA_GTP_FD0={0x0, 0x1, r9}, @IFLA_GTP_FD1={0x8, 0x2, r7}, @IFLA_GTP_FD0={0x8, 0x1, r5}, @IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x78}}, 0x800) 10:18:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getuid() mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,mmap', @ANYRESDEC=r3, @ANYBLOB]) r4 = geteuid() r5 = getuid() mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,mmap', @ANYRESDEC=r5, @ANYBLOB]) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x2, &(0x7f0000001100)=[{&(0x7f00000000c0)="b083b52fa135001096188e03", 0xc, 0xb6}, {&(0x7f0000000100)="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", 0x1000, 0x100000000}], 0x800, &(0x7f0000001140)={[{@noattrs='noattrs'}], [{@fowner_gt={'fowner>', r3}}, {@euid_eq={'euid', 0x3d, r4}}, {@subj_role={'subj_role', 0x3d, '&'}}, {@uid_eq={'uid', 0x3d, r5}}, {@context={'context', 0x3d, 'system_u'}}, {@subj_role={'subj_role'}}]}) 10:18:45 executing program 5: r0 = socket$inet(0x2, 0x800, 0x3) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) 10:18:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="0500000000000000054f4ec0080001000000050007000000000008000900000000001400270000000000000000000006001f006234c26ed417000020000000000000000000000000000000000000000000000000000000b3807aa17b156d66151a7ace96ed3617c475bddc7742be98650a0000c054c81daa99c14b4f4304b12bdeef55998c538683dbce1c974d36caba12d63ed0f27754b99848103d257ffbbcba73b126b825dd71e5bf20bc56780b3a5d3eba22fc1ac45ae931842f9dd973ab7fa238fceb5c6be07ad86d06e287a8dd91b67cf06bb3a9dfbaa1ecb04bf7006ee0cf5446a95fca11e5ce5b6f69607daf992dc8f43b0685dbdff3bf56a89adf5518fa3a30e572ca405079e6f39918685ce6b7250ef73289e3af6615b44826d679d1bcdf139e70a10dd9b7d605933ab45054aee889cde30e30281d374cf504518026b18b3897e834866289e745737151271fcc4c9d886f2f7fd08979f671da225c2116de52ad518331acba40a1954955268e0e1a1346c2a72b9b81aa8b3496ab52ca45335d3e868bdf75d9ed62c1300d640a8b228046239d5b8592d182e0f48e4c1288c6c036c4dcd0e7518daddc408a7a2427e5f608747690f4305a591240742bde673702262a430b917040a59671eae0c6014a93c16d3220feab807d053a0824989dceb2e5a2817174ad09c875cf91d04757d76d74bd56087dbdde35470d5037e18c6cc13f1f849a7ded54703d352e5b7166e74ada97ef0f5ee6ec1f564754716f83e523bf92d1febe661e82d697fc3e8218198aa5718f327699fe849db733b53f4fb36f8722e2a523aab51ded05cfb367f6e40d615e55a0b5285161e0b324a214df4a9c9af26deac5d61bf61e6b4b2ad2e01ee1d70dc8f6795ce0b3a13bacb92a8791ee30159ea661352eb67f6ccacfaf59ce263272018db11f1e240963cf5d68aad6fc8a873656b500000000"], 0x54}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000380)={0x7, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, r5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r10, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="7428de2c444fefe679f80dd59a600cbe897b2fa5fbeef50e7741f2aaf572b8c5202786e0a569f2e4df8fd50cdbefdfb0d34500988a5ffaba8f8c67680058a0b8b827731b795b55c78dc1ee7b679f45d100db9a18e8984057eed5635d6eeb8e7bce5ed91024d83811cf53d986b963e425b09045716ab51202f7314058b736f94f194f", 0x82, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r8, 0xc01064ac, &(0x7f0000000180)={r11, 0xdd, &(0x7f0000000280)=""/221}) [ 679.374958] kauditd_printk_skb: 12 callbacks suppressed [ 679.374971] audit: type=1800 audit(1588501125.127:835): pid=1634 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16431 res=0 [ 679.387863] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 679.430589] attempt to access beyond end of device [ 679.455233] loop3: rw=2049, want=6434, limit=52 10:18:45 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x68]}}, 0x20) 10:18:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f00000000c0)='Z Gw', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000000)={0x0, 0xfffffffc}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x8, 0x2}, 0x0, 0x0, &(0x7f0000000280)={0x1, 0x2, 0x4, 0x7}, &(0x7f00000002c0)=0xffffffffffffffc1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x2}}, 0x10) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000040)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="00000000d9824046aeb182de6c8c278ab011925361b7269ed26b181b4668693f715bd29cb026b48398c79ff6eecdfb55833d7a2e6170447493ba251bbc8d324c3e99de10da0c060f4b2b1790e9615dc12a6967f43384b51ffda94fb0960ac8c937c4b9290f69cfdddf2624d19adb94fd92dcd39a3c331d8e019e7af58cff0551a8dfb07b1b39a9be8d65e4c723c565e5ef775e05e0323c8b631d9de0365bc347", @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f00ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 679.482747] attempt to access beyond end of device [ 679.489149] loop3: rw=0, want=6434, limit=52 [ 679.514300] audit: type=1800 audit(1588501125.247:836): pid=1648 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 679.583275] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "fowner>00000000000000000000" [ 679.595374] minix_free_inode: bit 1 already cleared 10:18:45 executing program 5: r0 = socket$inet(0x2, 0x80000, 0x7a) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000300)={0x2, 'team_slave_0\x00', 0x2}, 0x18) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r4, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@local, 0x1, r3}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr=0x64010100, @multicast1}, 0xc) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) 10:18:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') prctl$PR_GET_DUMPABLE(0x3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) [ 679.725565] audit: type=1800 audit(1588501125.477:837): pid=1671 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16164 res=0 10:18:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88000000100001042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="943bcd5605c657ff0300000000000004000012edf4059d596090bc132efbd5a6246725de7400"/49], 0x88}}, 0x800) [ 679.784972] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 679.831294] attempt to access beyond end of device 10:18:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @private=0xa010101}}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c1}, 0x20000040) [ 679.853534] loop3: rw=2049, want=6434, limit=52 [ 679.899764] attempt to access beyond end of device [ 679.910859] loop3: rw=0, want=6434, limit=52 [ 679.936227] audit: type=1800 audit(1588501125.687:838): pid=1685 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 680.017581] minix_free_inode: bit 1 already cleared [ 680.343212] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "fowner>00000000000000000000" [ 680.362420] 9pnet: p9_fd_create_tcp (1702): problem connecting socket to 127.0.0.1 10:18:48 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x1}) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 10:18:48 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6c]}}, 0x20) 10:18:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x68, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bond\x00'}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x68}}, 0x0) 10:18:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000280)) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r8, 0xb03, 0x0, 0x0, {0x12}}, 0x14}, 0x1, 0x2000000}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r8, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}]}, 0x54}}, 0x1) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000000)=""/109) 10:18:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x84501, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x6, 0x804) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x88}}, 0x800) 10:18:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000400)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000000)={r7, 0x1, 0x6, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', r7}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000b88eb9e2410909ee000000000000000000000000bb0800080000000000000002000100000014001f000000000000000000"], 0x5c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x20) 10:18:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x50, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x50}}, 0x0) [ 682.483010] audit: type=1800 audit(1588501128.237:839): pid=1721 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16462 res=0 [ 682.515949] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 682.530747] attempt to access beyond end of device [ 682.544862] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 682.554272] loop3: rw=2049, want=6434, limit=52 [ 682.564390] buffer_io_error: 8 callbacks suppressed [ 682.564402] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 682.587221] attempt to access beyond end of device [ 682.592391] loop3: rw=0, want=6434, limit=52 [ 682.602316] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 682.616952] Buffer I/O error on dev loop3, logical block 3216, async page read [ 682.629015] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 10:18:48 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x74]}}, 0x20) 10:18:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0xfffffff, 0x4, 0x8, r2, 0x0, &(0x7f0000000040)={0x98090c, 0x100, [], @p_u32=&(0x7f0000000000)=0x3ff}}) accept$netrom(r4, &(0x7f00000000c0)={{0x3, @bcast}, [@default, @null, @bcast, @remote, @rose, @default, @bcast, @netrom]}, &(0x7f0000000180)=0x48) [ 682.641564] audit: type=1800 audit(1588501128.397:840): pid=1734 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = dup2(r1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r4 = socket(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0xddf5) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="da241b01", @ANYRES16=r5, @ANYBLOB="020029bd7000fddbdf25060800050001000000080009007d000000060002003a00000008000800"/54], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000091) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1004}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000003c0)={0xfffffffc, 0x6, 0x4, 0x10000, 0x44, {}, {0x5, 0x2, 0xcd, 0x1, 0x5, 0x5, "b667de79"}, 0x8, 0x2, @fd, 0x9, 0x0, r4}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r11, 0x8}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x88}}, 0x800) [ 682.747756] minix_free_inode: bit 1 already cleared 10:18:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) [ 682.820409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=1750 comm=syz-executor.2 [ 682.842363] audit: type=1800 audit(1588501128.597:841): pid=1752 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16456 res=0 [ 682.872213] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 682.892009] attempt to access beyond end of device [ 682.898295] loop3: rw=2049, want=6434, limit=52 [ 682.903642] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x2000}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0002010000000000000001000000050007000000000006000e0000080000140020000000000000000000000000000000000108000a000000000006000200010000000c0016002000000000000000"], 0x54}}, 0x0) [ 682.921786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=1759 comm=syz-executor.2 [ 682.936280] attempt to access beyond end of device [ 682.941729] loop3: rw=0, want=6434, limit=52 [ 682.950432] Buffer I/O error on dev loop3, logical block 3216, async page read [ 683.009401] audit: type=1800 audit(1588501128.767:842): pid=1758 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 683.108308] minix_free_inode: bit 1 already cleared 10:18:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) write$vhci(r1, &(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, "31ba4a31e348be5eef61f5a02f200e709b56bb15fd79a329060ad9aebe8f116a38ec03600f285c0499c76b3d7706d2198ed1d3bde390f11b08f5a05e51246ccb67a6d1b9dc235af7645d401d5364b8506fdd9d448627d7d3377f09cdd25cbf4ca5a6224fb35a360819520e0ea8ab0636e71d09ea6d2d52b63fb62e87358d0d877fee4f49dd4e87c561c25223f31892cab7da2fa0a8c84743a8e1d357f2c51842126da52aaa803e4f7050877686373c5b2254026b6381e4f8abfeeb17a8a1e7def6793fa6"}, 0xc5) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) bind$bt_sco(r1, &(0x7f0000000040), 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x88}}, 0x800) 10:18:49 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7a]}}, 0x20) 10:18:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x821}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r4, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, 0x3, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_NAT_SRC={0x30, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x4004010) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000000)=""/95) [ 683.316317] audit: type=1800 audit(1588501129.067:843): pid=1783 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16468 res=0 [ 683.351852] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 683.362500] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 10:18:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000ffd, &(0x7f00000000c0)={0x2, 0x11, @empty}, 0xffffffffffffff0d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 10:18:49 executing program 0: ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) [ 683.389707] attempt to access beyond end of device [ 683.414139] loop3: rw=2049, want=6434, limit=52 [ 683.429030] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000040)="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", 0x1000, r0}, 0x68) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 10:18:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) accept4$tipc(r2, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000) [ 683.457771] attempt to access beyond end of device [ 683.469769] loop3: rw=0, want=6434, limit=52 [ 683.475453] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x9, 0xfffffffd, 0x80000001, 0x3ff, 0x4, "c2b9a4cb2eef588e3e2425078833857b8245cb"}) r6 = socket(0x1, 0x803, 0x0) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f00000000c0)=0xa40, 0x4) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x88}}, 0x800) [ 683.522747] audit: type=1800 audit(1588501129.277:844): pid=1796 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:49 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xf0]}}, 0x20) 10:18:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r3}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r3, 0xfffffe01}, &(0x7f0000000040)=0x8) [ 683.637806] minix_free_inode: bit 1 already cleared 10:18:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f00ff0100000000000000000000000000015b38407635c610cb32fac271dbb90b060441db47601ab0150a5af193b17e6e3f0bcb328105d25c82d59baf60b9e260a022bdd2fe836302caf52b69a8a04256e53ac8e360cc1b3d4d24774dfff8f7bf14b3e56bb60e3ab6b67c43a67275beeaf91a41e42d0f8071524afccbc41ccfb565621debbff314aa6668bd69c96af09e865582f763e956bf0d1cfb5107844f"], 0x5c}}, 0x0) 10:18:49 executing program 2: getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) rt_sigreturn() ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xb, 0x4, 0xfffffff9) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000000c0)={0x9c0000, 0x4, 0x2, r2, 0x0, &(0x7f0000000040)={0x0, 0x20, [], @value=0x1}}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000580012800c0001006d6163767bfe6e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaa6ca367da000a000400aaaaaaaa11000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x88}}, 0x800) [ 683.833770] MINIX-fs: mounting unchecked file system, running fsck is recommended 10:18:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x28000, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000280)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) writev(r3, &(0x7f0000000600)=[{&(0x7f00000003c0)="6ae3690ebffa2a33ac61f02791db8ba948cab5b12ffbffe9075ed9900f8fb2dffa5b3c73a82bc6f98a1ef7bbf70a828134b0bfd3a08ae68aea0cef6510910cb1fd24c33ef5eb71e4da2fc57779724d222648e7783a0ff5b227510b1a963e4f6b6f9921eb5115df2f6fcf260c443e9f94993c93d03dd15c134ef4ba8adf3576a605e457bc3c986f5bcc5fe5154c1731e874544d2bd98193faed0b32", 0x9b}, {&(0x7f0000000040)}, {&(0x7f00000000c0)="ccb9dbc9879991e25a7dccb06d87abf63953dbbc1c0282b14d516593a8f2b73190733e9edefa7b39", 0x28}, {&(0x7f0000000140)="485db9920a91424b2a", 0x9}, {&(0x7f00000001c0)="2359cf9875c2f00858789b6ddea68436fe0cafd45b955ab2d353be2087de435288969b47661a5f29355cbf04ad4313966e122a", 0x33}, {&(0x7f0000000480)="fa4a870cda01d88517a60bc82ae84ae4f2f7f265207d66ed0a66172d64d35be8f796ad08874e08ed4b848dd987848fbc362ecf5840178c269dcd134fcfa80adcc0fb098b62e863fd74a46a55b20b43ee8a3cc31caf530aaacb756fb0ba7e7e277479ee9810696a8c410ec63526016eb701b5feb1c8203d259262f7d9568d0780c8627e40793405c46d0559d79be05b9b23ebfe19d2798f9a8cdc1068431ee56d8dfe2e4263f3979fff045aad8168078cb6546129339e10f896c0bd335fb47f7a6131", 0xc2}, {&(0x7f0000000580)="5853c3a3400e40eb83902a9b26c22c8156b1d2da10afae3f83d81c643dd3e4f746b8e7c37ef27899294374c1dd2c7f6f325bc34ce8c11bd252740509dc30cecff37eea2c4f5aefe502edf8716939d0cb1ac427b1c678b72645376b5e741a219c5ac4227a299bab3f0520252bdf38e6e9ea170411e32edce6bfa5ed74d8", 0x7d}], 0x7) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000200)={0x3a, 0x5, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x20, {0x1, 0x6, 0x0, 0x80, [0x8, 0x3, 0xffff]}}, @pad1, @pad1]}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r9, 0xc0405519, &(0x7f0000000040)={0x8, 0x3, 0x8001, 0x2, 'syz1\x00', 0xf48}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @multicast}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @multicast}]}, @IFLA_MACVLAN_FLAGS={0x53, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x88}}, 0x800) [ 683.897276] attempt to access beyond end of device [ 683.902576] loop3: rw=2049, want=6434, limit=52 [ 683.945925] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 683.980715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 683.990037] attempt to access beyond end of device [ 684.004160] loop3: rw=0, want=6434, limit=52 10:18:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001b00)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@private1}}, &(0x7f0000001c00)=0xe8) r5 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000400)={r6, 0x1, 0x6, @broadcast}, 0x10) r7 = socket(0x100000000011, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000000)={r8, 0x1, 0x6, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="e3fee517f4fbd8e6c826afc2d9318d12a454e92db25361c71b81b7dc87e43c4f1455b7dd0e694cf3f34df86b75af01c561cf8f6a301acfb72555f5", 0x3b}, {&(0x7f0000000280)="ea8b015c08aaa2b702bc1605290eda1201933286af1a5fd432786e7cd5277102314aa3bfe1f00e4c146dc6b26bf50a1f7171d02d66d5cf44aa8725c611fc95b049981f26bf90bc538dbfe8113f002fadc1c4d0f62b22d6d844b94d9392630a4c7819bb0a196524cdd97625b18b469ea60a97cd4c10a5dfd9035a3cf85d68a77feba83e89c9a5a395560a1859c4995669eb5e7f2d13c798f7d58f58f0e07d0ef2ed2e39a65cb6a44541d45e5259f33a29233a25f5821dd440ad1c6f5f1c0d907f9b73f70162b0be226e46526fcd3f42ab", 0xd0}, {&(0x7f00000003c0)="4ccf03aef84f71f1379713d4c583ffd13f2a3708fa6196666127dc3fce0ceecb94f5fef0dc4fb60cb793277634ceeffccaa694aff856f29c16b850fe4f76a09558ef6bbac3ef120bcf1cc0e749bc2012728d7628a1e5b8479adfc3b7c374da0f898f45ff249da629e5c776b5cb409d865fd023ea50c4d55484c91f5daf62e2843f994512a638fa602e95dff3987284eba639b96d875408455aa2380c20aa36db70ca99a9d6babbb3dbb1e477ed7c1157cd76e707d9a118d5ff3106b5149d74b9fc149be5c6eb8e3a9220c606f5204bc686f0df10f563d712848bd3dccd0106ffd665", 0xe2}, {&(0x7f00000004c0)="e4859d66215ad741bfb8f2f2db66843a9755264ed10282be2044cd81828e55a9f87666d3b53ba7c1bf6936bc25c50a16a60da934f7d58fd45da65b6bb7cd829ccbe7a33417c50ae97f99ea6c7ff9bdd49a800a0a82837a01a769fa111c1f3655d660a9d2885dfa4a8a599e7b70e46693aab738bb92f6f1745c6175fba040ca8a690139ff7667a8f312892fc6669eaf4b1891f321513d25b690a26c15ca003db908ea2b49df95f0473b633f8dea3bfd14634fff8a3c70f2f52ca40b9bc0988e9fffc2851b81133a3e6b4df6bc61d9e6be43816e1fd1bb04e95e4c3fbea2462bb161c6dee7fbc7b6ff", 0xe8}, {&(0x7f00000005c0)="788dd0ee7286d39f7a934f74c7b9f141f2a9c7b854afb06ba5e7962055e7bd11193c890d265f0a3629acbf01e2d98d040397ba3f8794d34d83b678816e675ecd96262524abb411cf2a6d0ca593203f964984bebcdfa5fffe8ab106c87d02974cb7215b13c4712a39fd2752ef2e23a48f6c8a54396af009e02718120215749e6a5cc1db42a49c28d07611cb0982e06da66e7e1edcb6049beed0cf", 0x9a}, {&(0x7f0000000180)="742da1a033a83a2c20cf6360dbb535b4e1de1d25c5577bfe0224488749c771f3a58d6c13aa79f994aba401e399dde467e7d1bc2ff8a4feec276f1e1c4a24b9af163e169811e93a7457475c64df38d6af187ad7860260fe83646c66369686874586e5ac10e18c96f086b54aa707597719e231fc33", 0x74}], 0x6, &(0x7f0000000700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe0d}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010100}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@generic={0x88, 0x7, "f0a2a06482"}, @timestamp={0x44, 0x2c, 0xfb, 0x0, 0x9, [0x0, 0x7, 0xfffffeff, 0xa952, 0x3ff, 0x9, 0x5, 0x0, 0x4, 0x3]}, @lsrr={0x83, 0x1f, 0x36, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @local, @broadcast, @remote, @broadcast, @loopback]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}}}}], 0xf0}}, {{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000800)="842bf27d64b565ad2c86471ea3318de34e2d17b95366ebfd1c094916105b2b5e4bfd01f97c5a05cfa55fca7bd77cf19ac9ac35e97632dcbe533a49df3045d0c31894ef84b752d686462c206b42a74e5893180536a23d1a1ac8d2f965397bf55068ec71c7e93a642d", 0x68}, {&(0x7f0000000880)="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", 0xfd}], 0x2, &(0x7f0000000b00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7e}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0x44, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x1}, {@multicast1, 0x3f}, {@empty}, {@private=0xa010100, 0x897}]}, @end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x67, 0x3, 0x6, [{@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x40}, {@empty, 0x4c9f}]}, @cipso={0x86, 0x51, 0x1, [{0x7, 0xb, "2247dd6e6aa2a4cf23"}, {0x0, 0xb, "3dfb94f4cd2a0824a3"}, {0x5, 0x4, "b781"}, {0x7, 0x7, "d808a70124"}, {0x7, 0xf, "67343445fc10c98f4f9fd619e9"}, {0x5, 0x9, "bc779874eb7b1c"}, {0x0, 0x2}, {0x1, 0x10, "be58b0a8681f40e4c14abd2dcf25"}]}, @timestamp={0x44, 0x8, 0xde, 0x0, 0x3, [0x525]}, @lsrr={0x83, 0x27, 0x30, [@private=0xa010101, @broadcast, @broadcast, @private=0xa010100, @remote, @broadcast, @empty, @loopback, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @rand_addr=0x64010102}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x7, 0x19, [@broadcast]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x4e, [@multicast1]}]}}}], 0x180}}, {{&(0x7f0000000cc0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000d00)="d4015d3e74f3e3f3498375e8ac30ee2a578e8b921e2e4f448505e2de1ac5d96d60e3dacc7e7dcee0c19dae37c8e248f9450e4b5641723b31cf1811beb561925a823edaa5a6911138de11a59d349442d2d8d0ded5cc8317d3bac816d22dede562efaeb86c0988a1b8df33a7d3b6d542aa6c124097cb8f73b98b82df6b5a47c4210d99070266933a", 0x87}, {&(0x7f0000000dc0)="f7f9a74b7a81b728", 0x8}, {&(0x7f0000000e00)="cdcc2a891d0d736b31d930cdd0bc9ae069772440a8aa1cebb8f9bf7db7c9086a1464bc20039ce0f7e2063e8c9d574f528462eb70e13ce2da7e5ca8991679fad0de13571f3bca7a28d71100fd87e1236f1b841d279c7ea353dfc427d7bc55409ff58fb25ecdbbb1274a60b7bf39048640955d55060efe1df3f62ef9b4a1d551d28edea18edb4bfca75da996a3e144a3cd9fec7f321fcc7386c040ce970c5774b2f9ec338fc4436425ec5db878680e2c72613b0e6682b39010e778", 0xba}, {&(0x7f0000000ec0)="6846b973fee099ceab0ff8c5ddabae3395e171987000753e15beed033602a2910304c8c7e0925ae04323bf356f0a67471d0bbf5043da17ddcbf4e1b6a5c145bc51c2314b85852bdcc800bf0be285f5385f3a1eed8613e02011ba651d375665c5f8a5afcfdcdd0cbb4e79dd5fc2bec409c15f8168c7415ba1c8c215e7bb59653694d6e1f99d6274faf958737a3cd7c9ccfae07171cdf2d8fd47acb3ba3d6f46cacc441848dde049a0f4895b8775a4165d161725912bff598c9e310cc879ddb5e2de564be3e7d4af96164bc18c6ee6578f1991eae94d9cbd2f910a", 0xda}, {&(0x7f0000000fc0)="88eeec59079e81dc6e858b95a8bbd8216c6932bf682fd18a6008a2576f3bf634bef1208740fe404c268336731f499e6f4c4d7619dc3a9c6748640eb7573fe6f0353a39c6b310c0dcf605571c3084c77196e57d5e818296a7a22f09180c05072fb519b29e5f7efb8112f3299b8156731027ff2061f85443836396d079fc9501ddba56d40e2bbd35c141", 0x89}, {&(0x7f0000001080)="3ea74b7f27041e31012d5187bc11b38f044e20092ed005a18ceef42252c43b0c2309d909c8f26d39fb6a1c4ef66a6bf4a1a3edfbf4001a96b4ad3d9c570fe571b2de8dea0b400264acad906c1d88f3bde0425547f35cdf66802c894d4c03f56d96131307057a0d3231daadcf57b6eb78f0ca1d3507fdd189e96ffd406dd887a9bae1aac5870fd00fc823229f030a042ee8887f00f829be725e5ebe84e92ec3547fb99cadf4f7f6a6c7d55c95523481546715789724ee23c8eb6a183ef523af0a5eb5e97d93177edd9353fc400f16d2cba3f1c49508a33df2117b6eca3666736d3df863c0a81d27de11c1b909e895a6baab69ce", 0xf3}, {&(0x7f0000001200)='h', 0x1}, {&(0x7f0000001240)="52241c3241e071c273ac8beeebb67fc42e36367ff1b5e042de4e22b90722f9c90ee4e19d54d74e3abd2a7076ed1061dd31cf3a2f9030eed9ae9b4f85442f6b46efa279d3326cb3ac8572f12c5f55b4a234517d7720a0d6d016e350d038a8147c896d79d9d66c9b3f04130b", 0x6b}], 0x8, &(0x7f0000001340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xc5, [@multicast1, @rand_addr=0x64010100, @local, @loopback, @empty, @local]}, @timestamp_addr={0x44, 0x14, 0x42, 0x1, 0x7, [{@loopback, 0x8}, {@remote, 0x5}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x23, 0x46, [@dev={0xac, 0x14, 0x14, 0x38}, @multicast2, @remote, @rand_addr=0x64010101, @rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x20}]}, @timestamp_addr={0x44, 0x34, 0x36, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x39}}, {@local, 0x8}, {@empty, 0x80000001}, {@empty, 0x3}, {@multicast2, 0x5}, {@empty, 0x80}]}, @timestamp_prespec={0x44, 0x1c, 0xa9, 0x3, 0x0, [{@local, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe96b}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x9}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xab}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x150}}, {{&(0x7f00000014c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001600)=[{&(0x7f0000001500)="940866c5a1b6e3e560107b16762e37edc16b93f5ed747872fdcafd218351ec93fb91766121cec5dc84d6ba74f8eedc446757f364d9a0c784eca490", 0x3b}, {&(0x7f0000001540)="0a9babdf4e8c62f7b31fdb562f3db23c52bec04e536fce526fe0096af10381b896b97fd6dc83c758ef7da38092d37145b2ab8849ed7923c6b79a33a387b8208ddf7b162cc70b53753a9c0e5aa2ad06d2b8b7cf5e5343d12197f07a900f53762c986626cb35f6e1b151ea5822f0bcbda880de3a6ee3ca5f54ac7da1afcff1283a71ca2675a03f81dfce49e2f1eb8d78a9b515c9ed3b6e53b60f4412eff50a501654f3fe53205f710de675b9", 0xab}], 0x2, &(0x7f0000001640)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x7, 0x9d, [@local]}, @timestamp_prespec={0x44, 0x14, 0x47, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@remote, 0x10000}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1f}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@generic={0x94, 0x7, "8465f265d0"}, @generic={0x89, 0x6, "15cfa539"}, @generic={0x94, 0xb, "61015012511e286a60"}, @lsrr={0x83, 0xb, 0x65, [@rand_addr=0x64010101, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x9e, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@broadcast, 0x7f}]}, @timestamp={0x44, 0x18, 0xa8, 0x0, 0x1, [0xa7, 0x6, 0x8, 0x8001, 0x9]}, @cipso={0x86, 0x57, 0xffffffffffffffff, [{0x7, 0xd, "03a43e25fcd7e4a73c6616"}, {0x2, 0xc, "51d09cfecd7cceb6f228"}, {0x2, 0xf, "dc107d565f72161fa21d7ed2bb"}, {0x6, 0xf, "36aeea40ef6620060193bb3c34"}, {0x0, 0xd, "255d24d0fee8a199fec0f7"}, {0x5, 0xd, "efb1160d9fee0bd4a9ed9f"}]}, @rr={0x7, 0xb, 0x60, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x130}}, {{&(0x7f0000001780)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001a00)=[{&(0x7f00000017c0)="a78cea788083aa386436926130f23882482745aded2a242636672326ee48195db1ccd4fcc6c59ced09790793e152160925437bfb241455de4b86ae4e5339e916233604e3aad0b1ef46db2a913471a6047a96d7ba515de02fbb250864c8ba85ff155ebaf484e124636a0aab1370a002e24fadefd50f6695e6061d00b34ff6ff396ab535d542aba7715a46fcbeda5f58aec5a1e145c0e4768478034911be901c63fac89a864e977566d935dbfc2054839051f2f7f85ad7b35661b8f8369cc0f75f9dbd1c28265bf1c18b", 0xc9}, {&(0x7f00000018c0)="99d981f923495fd7e54af53f61a02c83fa41", 0x12}, {&(0x7f0000001900)="4a3c91b9eefff9cfa481cdaa101592c93c475b7df4b5d2cdbcf0dcc0a5bb6b4375a9d214ad57903a9420", 0x2a}, {&(0x7f0000001940)="953acc24ad0003a09c9ee960a3c26463da379846364a24196daf55c62fc3b3862caebe3dcc4fe491939164a95e200f7cac6c8cc932b0a184e7880322e2aba4c84a259e714c5ad468b2349281087c86d503bb861fdd76827f3ea1ca95cda620f879fc16bfa24a5ac1148edacafb1bf091831ebb4d1c92e0ba989549f459c4f29aa9886279c6c381afd6cf5483a4d084e646b63320559d636b920cd79069", 0x9d}], 0x4, &(0x7f0000001c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x86}}], 0x38}}, {{&(0x7f0000001c80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000001cc0)="f950f8e3", 0x4}], 0x1, &(0x7f0000001d40)=[@ip_retopts={{0x58, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x56, [@remote, @broadcast]}, @lsrr={0x83, 0x1f, 0xea, [@dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @loopback]}, @cipso={0x86, 0x1b, 0x3, [{0x7, 0x2}, {0x7, 0xa, "e9a32452ca9ee3ce"}, {0x6, 0x9, "72ed08304c2272"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x70}}, {{&(0x7f0000001dc0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002100)=[{&(0x7f0000001e00)="6b6defc73ac73ae488423a97ce6909eacc665c4f7eee448a360fe8", 0x1b}, {&(0x7f0000001e40)="34f6d861ffd21af2f4098d75340ff9981c3ee5861cfc74e0fc78375eb51b666f75ef100c56ddd43953fed21a1b334f05313f07c2272d539fb2af88384c82982447cbd68ac652d2e2310802880c90a09528b5619e392dae1839fa93f09abe56e71ef686ef1fd3a3064ab1cb209ca10fe7db", 0x71}, {&(0x7f0000001ec0)="79748e9876ceb57bc09e340f9c14bdff47b96db4ca7eb4898afeef35d3c6a66fbeb6528f0dff40bdf95a8bf04dc7ff2b5271c8d2039ff98f76d9db91f01b4925e2274be59624012df196e38056ad0c9c897ba89f2aece7c8bf4943985209f416869d32c341e8822f3aba7de7a42d2a56f1d2d4bc68a94b08042f0809b4a8fff86d2c56152d49a2c80312e3c43306a7b31c7b2b92b8435f17945aeeea36e6cf", 0x9f}, {&(0x7f0000001f80)="890b427e253df9827d7d32a62aa35eaef4bee7b091bfc86cc2b2fe3c096bf77f648776647b1bb35ac188bd444465677b8da9f1d214de8331015c89893394c171f61f06bd5d35ce3c4350999cea652f12684d5b9565cbe84610764dc1f582206d8576dd83aafee23bc19f55092488a379d9dc8a0b8ef7d7e6a6e5dc9a1a1ed20b516771febc3817faf88a6e2f64b7f7536bb9bd8e83f0e3c95915f70c1f5ec37b0ddbf3eccbd520148a2154ac7a4e1e32202f8975601fab00b7f3959a1979f87518c67112c91170689de9422b18cd2a17de1e21a83a8162093e5e0ef9a0014f23a60b57d2104ae7f6358487d08dd6ba9f", 0xf0}, {&(0x7f0000002080)="3ca048888dfa1b24eba06566061e4fe582e242e6256c542dd8dd24ffabf9b95764f15108ffdb0b1c5ad9ba5845e6d11185764ae82b3e6dcd6aaaf93231469e6bffa6b6b382c4cb72", 0x48}], 0x5, &(0x7f0000002180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @empty}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x3e, 0x0, 0x6, [0x6, 0xffffffff, 0x2, 0x7fffffff, 0x4, 0x7ff, 0x2, 0x1ff]}, @ssrr={0x89, 0x17, 0x48, [@local, @private=0xa010100, @multicast1, @broadcast, @local]}, @timestamp_addr={0x44, 0x24, 0x5, 0x1, 0x3, [{@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@rand_addr=0x64010101, 0x7fff}, {@broadcast, 0x3}]}, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0x4, 0x8, "950fba73453c"}]}, @rr={0x7, 0x7, 0xd5, [@multicast1]}, @generic={0x89, 0xb, "fc6e38bcde0165d406"}]}}}], 0xb0}}], 0x7, 0x200000c5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090000000000000000010000050500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0001000000060002000100000014001f00ff010000000000000000000000000001"], 0x5c}}, 0x0) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) ptrace$getregset(0x4204, r9, 0x6, &(0x7f0000000080)={&(0x7f0000000000)=""/82, 0x52}) [ 684.024786] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:49 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xff]}}, 0x20) [ 684.124813] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 684.127634] minix_free_inode: bit 1 already cleared [ 684.176260] device lo entered promiscuous mode 10:18:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0xffefffffff7f0900, 0x0, 0xa00000006000000) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000400)=ANY=[@ANYBLOB="d700000084d75e6a0ea78cd028e54f74c18b8826624f7cfd80f4781d7aedeba14b8e1a98c59dd79b96bde88e9ae5b5719d2b766879187310df29eb4dd4e811ddf51e276972a5e772dfe6db228b865fc01b2ae87440885b7523a128d1bcea248ca1e103bc2ade8bd5d7b69e24d33fd5a84963eea8bef30de6cc66b438a19edf8c6c9346bc94556e2076c43fc9a57456db00815541d8e5f59073c26db19d6238671f7ec3686ee89f1c87fea14fbf6aca7ba2aee17fadd25f80db11fa4919a1bd0f7c0c1a34ce823db32d1bc9dfe2cd11a8c2b2899088c80445b985461476755a4c84de18bff3"]) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_delrule={0x60, 0x21, 0x139, 0x70bd2c, 0x25dfdbfb, {0x2, 0x80, 0x0, 0x8, 0x4, 0x0, 0x0, 0x4, 0x10}, [@FRA_DST={0x8, 0x1, @private=0xa010100}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0xcf}, @FRA_FLOW={0x8, 0xb, 0x5}, @FRA_FLOW={0x8, 0xb, 0xfffffff7}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth0_to_hsr\x00'}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_FLOW={0x8, 0xb, 0x9f}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x20008041) [ 684.295312] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 684.363955] attempt to access beyond end of device [ 684.389434] loop3: rw=2049, want=6434, limit=52 [ 684.410946] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 684.461450] attempt to access beyond end of device [ 684.492264] loop3: rw=0, want=6434, limit=52 [ 684.509625] Buffer I/O error on dev loop3, logical block 3216, async page read [ 684.526504] device lo left promiscuous mode [ 684.537429] kauditd_printk_skb: 3 callbacks suppressed [ 684.537441] audit: type=1800 audit(1588501130.297:848): pid=1864 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 684.627281] minix_free_inode: bit 1 already cleared 10:18:50 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:18:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) recvfrom(r1, 0x0, 0xffffffffffffff9f, 0x121, 0x0, 0x0) 10:18:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB="27000000bfae3426c626405c075e38c399e2df7eee066bba565ba0a374ea538808bb599e16ba8bca6919694ac813b373c8008f3c6d05b9212979df9fadd385b6ef61674a8c08734f005b23f536500b5254d764e864698ca073b8010527835199236a2b71f976889d97aece8a2dad662bc6c77969e95425e5cd28bbfb22df4170217375b48abd85ba90d720ec7df1f3dae72db2db2c4ee2e8b6d9d3c82d", @ANYRES32=r6, @ANYBLOB], 0x88}}, 0x800) 10:18:50 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x8) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x10001) 10:18:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000140)=""/182, 0xb6}], 0x1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x40) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x0, 0x4}) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x102, 0x28) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0xfffff295, 0x2, 0x100}}) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) [ 685.072748] audit: type=1800 audit(1588501130.827:849): pid=1885 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16001 res=0 [ 685.097959] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 685.114001] device lo entered promiscuous mode 10:18:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r3, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0x0, &(0x7f0000000040)=0x3, 0x4) [ 685.118478] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 685.138983] attempt to access beyond end of device [ 685.145314] loop3: rw=2049, want=6434, limit=52 [ 685.163396] attempt to access beyond end of device 10:18:50 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}}, 0x20) 10:18:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000040)) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x88}}, 0x800) [ 685.178058] loop3: rw=0, want=6434, limit=52 [ 685.185935] audit: type=1800 audit(1588501130.937:850): pid=1890 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 685.267095] minix_free_inode: bit 1 already cleared 10:18:51 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:setrans_initrc_exec_t:s0\x00', 0x2b, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r2, 0x10001, 0x8) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x100000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1c, r4, 0x1, 0x4, 0x6, @local}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40440d1}, 0x20000095) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x60400090}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fedbdf250f00000028000380060007004e230000080005007f00000114000600200100000000000000000000000000003c00028006000f000180000005000d0000000000050500000000000008000400ff07000006000e004e20000006000e004e21000008000700020000050000008008000b007369700044000280080008106f0b00000800050007000000080003000224a8b900000006000b000a00000008000800090000000800090080000000080007100700000008001c00000000000800040007"], 0xd0}, 0x1, 0x0, 0x0, 0x4004801}, 0x20000000) listen(0xffffffffffffffff, 0x0) r5 = getpid() prlimit64(r5, 0x0, 0x0, &(0x7f0000000200)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x7ffff000) [ 685.327023] device lo left promiscuous mode [ 685.331582] audit: type=1800 audit(1588501131.087:851): pid=1903 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16001 res=0 [ 685.341556] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 685.400655] attempt to access beyond end of device [ 685.419155] loop3: rw=2049, want=6434, limit=52 [ 685.432695] attempt to access beyond end of device [ 685.458417] loop3: rw=0, want=6434, limit=52 [ 685.465659] audit: type=1800 audit(1588501131.217:852): pid=1911 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x68, r1, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0xfffffffffffffe28, 0x8, 'veth0_to_team\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 10:18:51 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0x0, 0x5, {0x8, 0x1, 0x0, {0x4, 0x1f, 0x5, 0x20, 0xfffffffffffffe09, 0x80000001, 0x101, 0x81, 0x78c, 0x9, 0x1a678d8a, 0x0, 0x0, 0x1ff, 0x20}}}, 0x78) sendfile(r4, r3, 0x0, 0x7ffff000) 10:18:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x17, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x8c, 0x10, 0x400, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x8c}}, 0x800) 10:18:51 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3]}}, 0x20) [ 685.552961] minix_free_inode: bit 1 already cleared 10:18:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000040)='\x00') ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x2, 0x5, 0x1, 0xcacce068d35b637e, 0x0, 0xe983d89, 0x8, 0x6, 0x7, 0x9, 0x10001, 0x8, 0x80000000, 0x8, 0x4, 0x5, {0x3f, 0xfffffc01}, 0xa, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c9f9a3301a27e34736fd80001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x88}}, 0x800) sendmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40) [ 685.814027] audit: type=1800 audit(1588501131.567:853): pid=1927 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16114 res=0 [ 685.844684] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 685.859256] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 685.864752] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 685.886319] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 685.903042] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff12, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000000)={{0x3, 0x0, @descriptor="ccb97b722433287b"}}) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000040)={0x80000001, "5835e6f8e8246ef88a3a2360bf1dbed2b41e169ef569c55565e005f03161ef32", 0x0, 0x33, 0x8df2, 0x1, 0x1}) [ 685.914124] attempt to access beyond end of device [ 685.930403] loop3: rw=2049, want=6434, limit=52 [ 685.956605] attempt to access beyond end of device 10:18:51 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}}, 0x20) [ 685.994294] loop3: rw=0, want=6434, limit=52 [ 686.013920] audit: type=1800 audit(1588501131.767:854): pid=1939 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r5 = socket(0x10, 0x3, 0x0) sendfile(r5, r4, 0x0, 0xddf5) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="da241b01", @ANYRES16=r6, @ANYBLOB="020029bd7000fddbdf25060800050001000000080009007d000000060002003a00000008000800"/54], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000091) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="df2503000000080004008100000060000180060001000a00000006000200290000000800080039000000060004004e23000014000300ff010000000000000000000000000001060004004e21000008d1370073697000060004004e22000006000200000000000700060073680000500eaf354003a7509971425d7aa37b1a568653512865966a27bca2bbf277f61d9ee84feeaff6c07ffdb2cae8be6a3df2cbe0fe1bee886b330f3b165dc589cc3a6202a276dbde6852a48b32c28ec37dce1af0b8c12c30a461475b39dc3ca69433f8d580addeac7fcb907bf79d6295cd5695ed5043c9bfb863fa07214e910f58e3a2165a53bba1789b7d06ae47116572d8"], 0x7c}, 0x1, 0x0, 0x0, 0x4000085}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r8, &(0x7f00000000c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r8, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) ioctl$SIOCX25SDTEFACILITIES(r8, 0x89eb, &(0x7f0000000280)={0x6, 0x9, 0x8, 0xc4, 0x7f, 0x23, 0x0, "525975779a0121bb37b92c798c1db8489d23b325", "761a026d5d44fac6a141624e05ebee17a708f979"}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) [ 686.107272] minix_free_inode: bit 1 already cleared 10:18:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x88}}, 0x800) [ 686.178050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=1950 comm=syz-executor.4 [ 686.246879] audit: type=1800 audit(1588501131.997:855): pid=1954 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15922 res=0 [ 686.282344] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 686.294114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=1950 comm=syz-executor.4 [ 686.330398] attempt to access beyond end of device [ 686.335524] loop3: rw=2049, want=6434, limit=52 10:18:52 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5]}}, 0x20) [ 686.350003] attempt to access beyond end of device [ 686.356620] loop3: rw=0, want=6434, limit=52 [ 686.369508] audit: type=1800 audit(1588501132.127:856): pid=1957 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') open$dir(&(0x7f0000000180)='./file0\x00', 0x202, 0x98) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x4, 0x3ff, 0x2016, 0x3, 0x2, 0x6, 0x0, 0x7}}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f7107010000000000000000000000000001"], 0x5c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x81, 0x4, 0x2}, {0x0, 0x40, 0x9, 0x4}, {0xd5e5, 0x6, 0x8, 0x7ff}]}) [ 686.417981] minix_free_inode: bit 1 already cleared [ 686.498963] audit: type=1800 audit(1588501132.257:857): pid=1969 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15922 res=0 [ 686.534470] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 686.575675] attempt to access beyond end of device 10:18:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x88}}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006ec0), 0x0, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x2, 0x56}) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="419cb15216c3f874237dbd4c13c3003c2afba6764f05dbfbd687cdda4af5b20a7336c2ea344cfea769857f01b2cb6a1dad684a6532676b5090d63303599565969031f12d8cdcc6b8ccfa1562e78231cdbfac096d6ac5986b5664b6f94eb95e45a6ae782b9ed2fb8928569da6d9e0a3758921a0284a6541df8b92a01678482ed32cc928d9ae3e53dd4cf2fbc37a4b0658cb6c231d0b4f9b693980bdb8b7acbe350321a9ef4152d763f1355de474e0e4379d0707fd161ff601f3d3a1", @ANYRES16=r9, @ANYBLOB="17090000000000000000010000000500070000000000270009000002000014002000fe80000000abf50000000300000008f7b45f5be0879456bea4887b62fcc69d34b3b1dca06c000000000a0000000000060002000100000014001f00"], 0x5c}}, 0x0) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000001c0)={0x800, 0xc, 0x4, 0x200000, 0x100, {0x0, 0x2710}, {0x1, 0x5, 0xe1, 0x9d, 0xff, 0x0, "38c1d171"}, 0x8000, 0x4, @planes=&(0x7f0000000040)={0x80000000, 0x8, @userptr=0x4, 0xff}, 0x5, 0x0, r8}) setsockopt$packet_buf(r10, 0x107, 0xd, &(0x7f00000000c0), 0x0) [ 686.606490] loop3: rw=2049, want=6434, limit=52 [ 686.640759] attempt to access beyond end of device [ 686.660855] loop3: rw=0, want=6434, limit=52 10:18:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="aaf200000700"/19], 0x48}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x0) r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r8, &(0x7f00000000c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r8, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000980)={{{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@dev}}, &(0x7f0000000a80)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1200080}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x18c, r4, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r10}, {0x170, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc080}, 0x1) [ 686.767488] minix_free_inode: bit 1 already cleared 10:18:52 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x428}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10000, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x1000, &(0x7f0000000880)=""/4096}]}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 10:18:52 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6]}}, 0x20) 10:18:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, &(0x7f0000000040)={0x8, 'veth0_to_batadv\x00', {'batadv_slave_0\x00'}, 0x2}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x94, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x84, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x70, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={[], 0x12}}, {0xa, 0x4, @link_local}, {0xa, 0x4, @random="bb8e0c71997e"}, {0xa, 0x4, @dev={[], 0x33}}, {0xa}, {0xa, 0x4, @dev={[], 0x28}}, {0xa, 0x4, @dev={[], 0x2f}}, {0xa}, {0xa, 0x4, @link_local}]}, @IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MAP={0x24, 0xe, {0xa45, 0x2, 0x4, 0x7, 0x8, 0xff}}]}, 0xe0}}, 0x10000014) [ 687.119400] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 687.149397] attempt to access beyond end of device [ 687.162907] loop3: rw=2049, want=6434, limit=52 [ 687.186825] attempt to access beyond end of device [ 687.197429] loop3: rw=0, want=6434, limit=52 10:18:53 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7]}}, 0x20) [ 687.283473] minix_free_inode: bit 1 already cleared [ 687.369637] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 687.399210] attempt to access beyond end of device [ 687.414586] loop3: rw=2049, want=6434, limit=52 [ 687.449396] attempt to access beyond end of device [ 687.470560] loop3: rw=0, want=6434, limit=52 10:18:53 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x10]}}, 0x20) [ 687.567188] minix_free_inode: bit 1 already cleared [ 687.694923] MINIX-fs: mounting unchecked file system, running fsck is recommended 10:18:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sync() ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000040)={0x200, 0x7}) [ 687.738611] attempt to access beyond end of device [ 687.745962] loop3: rw=2049, want=6434, limit=52 [ 687.763806] buffer_io_error: 14 callbacks suppressed [ 687.763817] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 687.817471] attempt to access beyond end of device [ 687.836947] loop3: rw=0, want=6434, limit=52 [ 687.842575] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:53 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x48]}}, 0x20) 10:18:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r3 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000400)={r4, 0x1, 0x6, @broadcast}, 0x10) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={r6, 0x1, 0x6, @remote}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a0, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000001}, 0x1840) r7 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000100)={0x7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="170900000000000000000100000005000700000000000800090000d8dc1bf8000000000000000000000000bb08000a000000000007000200010000ae075a220000000000000000000000000000000000a8793df93d2352074c70d85fb8f310ecbdd771584d824268987cd1549ec5"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e23, @broadcast}}) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) [ 687.937778] minix_free_inode: bit 1 already cleared [ 687.964819] device lo entered promiscuous mode [ 687.984895] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. [ 688.069040] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 688.124971] attempt to access beyond end of device 10:18:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x5c}}, 0x0) r2 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x4, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89fd, &(0x7f0000000180)={'bond0\x00', @ifru_names='caif0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYBLOB], 0x30}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5], 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @multicast1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x848b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) [ 688.147455] loop3: rw=2049, want=6434, limit=52 [ 688.176176] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 688.203253] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 10:18:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000ac0)=0x0) statx(r2, &(0x7f0000000b00)='./file0\x00', 0x100, 0x4, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = getuid() r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000780)=ANY=[@ANYRESOCT, @ANYRES32=r8, @ANYBLOB="08000000164466919ad2f9bca14d246dc8779220610dfafd1daeacaf098ec2087ae384d8136a06baaefb073f022b19e56177de712c7bd7552647a0c60d69997945ed9df88c78cd37db5c47e57c75f0532b3d3f58300145a4d5f162b0a761bc0f2817311109bf3c40c0d3a35e4b3c2fb3", @ANYRES32=r8, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)=[{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000040)="19d893e5178563cb15e26c5fc722745c78d354ea8736181e2eac92ffa55930deb9c7d240405f2ba7c9d136", 0x2b}], 0x1, 0x0, 0x0, 0x4044015}, {&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000006c0)="bda8469cad488ce925a64890e08dc9bffe0ae7cc22a0d630809b787eeba68bc3d1b7aed42b7bc2d2b2ea9cbba9f2d99cd02db6d85b8b85d1996cd9215b7e70f62f927ea6688c0ff3ad0cecd1de1ca5bb117b358eae7c7e8582b7eec323aa62b193e237a675ca0abcffac0788412e981570fba73fe11276b46a7893560dc0875e192ad6ad9e917640d2f8f9db9263043f6dc3231a053326b58021094f3d1a2b8778c45429f1f673bae5af7db065b3d7df4f3f2daa7b9d5c0d077cfa", 0xbb}, {&(0x7f0000000140)="8842f909db53c478472df96a4f50f3", 0xf}, {&(0x7f0000000480)="943460e42666f89bb0617dcb523d9757", 0x10}, {&(0x7f00000004c0)="27a54b15597919c9914e07cfc3d07b53a7d13c860d27cdf7ab7a1b7dabd4283733656eb357861c8c2d835272557b82af44a3f25d6704f0d2e199f2e31bbeb63d931d66fd0968d6c2e6ff5653cfd45f4106816d236853cd92546635e7ac15ab25", 0x60}, {&(0x7f0000000540)="834990db41b809b3b7c914b2e3f4370e28d1cde353db425dbf9f621823933d", 0x1f}, {&(0x7f0000000580)="01e4ad7b2c73bb8ed33e2d6f851575afa3311dfbc11aeb421c2d3cb56cd854014f6470eea636affab8fc5cc49f6f50c4bbdb93000b588773eded7400a6307f9ef82547261f764a0da086d375ad0b8f106844535c3fab177d96d8d504e0379a993a63ae86cdb31574e50b0559916454ec8231b16e5b106fa43a2990ff3e42e50a0640497c1f82381f09df1b27736db23cfd403018c631656211ec78", 0x9b}], 0x6, &(0x7f0000000c40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r8}}}], 0x138, 0x10}, {&(0x7f0000000d80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000e00)="8bcfcf74599f3b829d0154420664408c94de1f036e38ca0a8c5c9e9c3b3c6aeb687e86a577d7b09e589adaa9a9a9969b5f99dc4fdac0abf9abd0281f409cfead189a7f3598fb0f8a6fe681e8d16d799bf075987df0ca07baefe092535dcad45fc9934e3427c6011f96d0b5bdbe29e3515789b48a5f2a4098915d98b7bacd2512c4ed96698b61395ce7cdddef4ad44bfb4f3206c84fbd8d58c90d95761ab7854ed1c86edfddd872919ced0c25", 0xac}], 0x1, 0x0, 0x0, 0x8040}], 0x3, 0x1) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @local}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x88}}, 0x800) [ 688.222005] attempt to access beyond end of device [ 688.249454] loop3: rw=0, want=6434, limit=52 10:18:54 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4c]}}, 0x20) [ 688.269690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pig=2042 comm=syz-executor.4 [ 688.282542] Buffer I/O error on dev loop3, logical block 3216, async page read [ 688.319928] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 688.330794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pig=2049 comm=syz-executor.4 10:18:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x4010, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x14, r3, 0x917}, 0x14}}, 0x3) [ 688.360244] minix_free_inode: bit 1 already cleared [ 688.440238] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 688.458752] attempt to access beyond end of device [ 688.471846] loop3: rw=2049, want=6434, limit=52 [ 688.484330] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 688.497560] attempt to access beyond end of device [ 688.506361] loop3: rw=0, want=6434, limit=52 [ 688.511496] Buffer I/O error on dev loop3, logical block 3216, async page read [ 688.714113] minix_free_inode: bit 1 already cleared [ 688.753489] device lo left promiscuous mode 10:18:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r3, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/148, 0x94, 0x40, &(0x7f0000000100)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x6) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 10:18:54 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x60]}}, 0x20) 10:18:54 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 10:18:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r4, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}]}, 0x28}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x24}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) 10:18:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r6, @ANYBLOB="08f90a006d25ad90f4889cfaed8753187f2bd2d4c5dabac8f19dd067009661dc38a8280c9817510da98def000400000000000053e888f3d979415b0b0e9d8bab4ffaa81e0a912e7f4a74ba27", @ANYRES32=r6, @ANYBLOB], 0x88}}, 0x800) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r7, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r7, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) accept4$bt_l2cap(r7, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x3, 0xffffffffffff0000, 0x3}}, 0x30) [ 688.815668] device lo entered promiscuous mode [ 688.841518] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. [ 688.862493] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 688.873386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 688.901227] attempt to access beyond end of device [ 688.922500] loop3: rw=2049, want=6434, limit=52 [ 688.932305] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 688.932712] device lo left promiscuous mode [ 688.954594] attempt to access beyond end of device [ 688.968107] loop3: rw=0, want=6434, limit=52 10:18:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0xa, @sliced={0x3, [0x812e, 0x6, 0x1, 0x9, 0x7ff, 0x6, 0x1, 0x87, 0xffff, 0x9, 0x4, 0x3, 0x629, 0xf30, 0x6, 0x40, 0xf5, 0x4, 0x3, 0x7, 0x9, 0x3, 0x1d, 0x9, 0x3ff, 0xfff7, 0x800, 0x4, 0x1f, 0x15, 0x0, 0xff7f, 0x9, 0x2, 0x752c, 0x95, 0x100, 0x0, 0x7f, 0xf4fd, 0x1e6, 0x6, 0x8001, 0x3, 0x85, 0x5, 0x6, 0x3], 0xd2e}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r3, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000058f014a28db1bcbb548f8e14aa69341da176de8d13c111ca93fbc9b92918941ae1fd66bf64951023ae086acf3c23aa0ba937f85810d3779bbdf5f0a51a7e6ac9660bd8b55b0673549bb9c21e159e441374e8bec4499dae74ad6976d82bed69373ebfccb28fd247c1e1fb1fcbd2ab18dfa62598721d1f215b3045e87e2f99a1e12f94be630452762be24bcbc02d9fd3a095cd0fc84b2e8d5171d13d1f65d9c0f804b73ca09e56cbe2a28b986474a561727803f911091af388ccc0458074e42a26526aa6df022e68b67e116e3648e5ab5f71ee10592ca7a0845df4327c0dc87344dd7fb0cebd7d8fbecb", @ANYRES16=r5, @ANYBLOB="170900000000f0ff0000010000000500070000000000080009000000000014002000fe800000150b95c81ed0d470850000faffffffffffffff00bb08000a0000000000060002000100000014001f00844049ff010000000000"], 0x5c}}, 0x0) [ 688.973730] Buffer I/O error on dev loop3, logical block 3216, async page read [ 688.974471] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:54 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x68]}}, 0x20) 10:18:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)=0x8, 0x4) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000ac22019a89ce3da473e1e373cf699aa29d7eb4b500e012e77b606c4359c72ddaa542f9fd15ec0cf90303df22d07d8d80332ab4d5e2339f61fa64b39b6355ce73b2570819e6d7f82e582afc03ccd0333ffcf54e3274893a5576d81df4a5d32c3872c4cb36628365da312acd575b8f2a9506f6e5a41b9c2bd6a920000000000000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r4}, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x8, 0x2}, &(0x7f0000000140)=0x8) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0, 0x0, 0x0, 0x30}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0xff, 0x0, 0x0, @remote}, 0x80, 0x0}}], 0x3a3, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000200)={r9}, 0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={r9, 0xbe}, &(0x7f0000000080)=0x8) [ 689.087387] minix_free_inode: bit 1 already cleared 10:18:54 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 689.196260] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 689.219695] attempt to access beyond end of device [ 689.229359] loop3: rw=2049, want=6434, limit=52 [ 689.253481] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 689.279901] attempt to access beyond end of device 10:18:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 689.300623] loop3: rw=0, want=6434, limit=52 [ 689.320518] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:55 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6c]}}, 0x20) 10:18:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 689.430638] minix_free_inode: bit 1 already cleared [ 689.515343] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 689.554504] attempt to access beyond end of device [ 689.564438] loop3: rw=2049, want=6434, limit=52 [ 689.579655] attempt to access beyond end of device [ 689.585013] loop3: rw=0, want=6434, limit=52 [ 689.595460] kauditd_printk_skb: 16 callbacks suppressed [ 689.595471] audit: type=1800 audit(1588501135.347:874): pid=2132 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 689.667413] minix_free_inode: bit 1 already cleared 10:18:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x6, 0x485, 0x0, 0x0) 10:18:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x68, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bond\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x68}}, 0x40000) 10:18:55 executing program 1: r0 = inotify_init1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) socket$caif_stream(0x25, 0x1, 0x5) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x400000, 0x0) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x1f, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r4, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f00000001c0)=0x1) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) 10:18:55 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x74]}}, 0x20) 10:18:55 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ptrace$getenv(0x4201, 0x0, 0x1, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 10:18:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x44, 0x485, 0x0, 0x0) 10:18:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x5, &(0x7f0000000000)={0x8, {{0xa, 0x4e21, 0x401, @remote, 0x1}}, {{0xa, 0x4e22, 0x3, @ipv4={[], [], @rand_addr=0x64010101}, 0x2}}}, 0x108) [ 689.830992] audit: type=1800 audit(1588501135.587:875): pid=2149 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15890 res=0 [ 689.869653] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 689.904878] attempt to access beyond end of device [ 689.919906] loop3: rw=2049, want=6434, limit=52 [ 689.943813] attempt to access beyond end of device [ 689.949489] loop3: rw=0, want=6434, limit=52 [ 689.954757] audit: type=1800 audit(1588501135.707:876): pid=2161 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x1) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) 10:18:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x600, 0x485, 0x0, 0x0) 10:18:55 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7a]}}, 0x20) 10:18:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000040)=0x2, 0x4) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r4, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000200)={r8}, 0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r8, 0x4}, 0x8) [ 690.057394] minix_free_inode: bit 1 already cleared 10:18:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x4400, 0x485, 0x0, 0x0) [ 690.225031] audit: type=1800 audit(1588501135.977:877): pid=2178 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15763 res=0 10:18:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x1000000, 0x485, 0x0, 0x0) [ 690.286649] MINIX-fs: mounting unchecked file system, running fsck is recommended 10:18:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) setxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=@v1={0x2, "d7a97c50e36dd865ce762cac78d43d51a7a67f"}, 0x14, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000080)=0x3) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r3, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000040)=0x24) r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$assume_authority(0x10, r5) [ 690.338513] attempt to access beyond end of device [ 690.343746] loop3: rw=2049, want=6434, limit=52 10:18:56 executing program 1: r0 = dup(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x7fffffff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)={r2, 0x1, 0x101}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getdents(r4, &(0x7f0000000140)=""/104, 0x68) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) [ 690.390965] attempt to access beyond end of device [ 690.407343] loop3: rw=0, want=6434, limit=52 10:18:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(0xfffffffffffffffe) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x81]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040880}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0xffefffffff7f0900, 0x0, 0xa00000006000000) ioctl$KVM_S390_INTERRUPT_CPU(r5, 0x4010ae94, &(0x7f0000000180)={0x1, 0x2, 0x100000000}) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0xfffffffc, 0x80, 0xffffffff, 0x600, r0, 0x80, [], 0x0, r6, 0x2, 0x4}, 0x40) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x200}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) [ 690.424862] audit: type=1800 audit(1588501136.177:878): pid=2183 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 690.517501] minix_free_inode: bit 1 already cleared 10:18:56 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 10:18:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x6000000, 0x485, 0x0, 0x0) 10:18:56 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf0]}}, 0x20) 10:18:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="17090000000000080009000000000014090000008000000051b53795000000000000bb08000a0000000000060002000100000014001f00ff010000000000000000000000000001000000000000"], 0x5c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000000)=[0xffffffff, 0x2]) 10:18:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x44000000, 0x485, 0x0, 0x0) [ 690.770052] audit: type=1800 audit(1588501136.527:879): pid=2226 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15956 res=0 [ 690.807307] MINIX-fs: mounting unchecked file system, running fsck is recommended 10:18:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000bd9900042abd7000fcdbdf2508f03daf41e41500080001000100be044bcbdbdb64c1428a72820000"], 0x20}, 0x1, 0x0, 0x0, 0x842}, 0x2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000280)={0xffaffff, 0x5, 0x9, r6, 0x0, &(0x7f00000001c0)={0x9f0902, 0x1, [], @value=0x9}}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x24c, r9, 0x20, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x164, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe292}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf42}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c2d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x97fc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x22b3d72a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xae7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4850}, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) [ 690.830911] attempt to access beyond end of device [ 690.838635] loop3: rw=2049, want=6434, limit=52 10:18:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x2, 0x0, 0x0) [ 690.882006] attempt to access beyond end of device [ 690.894323] loop3: rw=0, want=6434, limit=52 10:18:56 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xff]}}, 0x20) [ 690.928351] audit: type=1800 audit(1588501136.687:880): pid=2234 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:18:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x3, 0x0, 0x0) [ 691.001853] minix_free_inode: bit 1 already cleared [ 691.079541] audit: type=1800 audit(1588501136.837:881): pid=2249 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15875 res=0 [ 691.107497] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 691.132165] attempt to access beyond end of device [ 691.143229] loop3: rw=2049, want=6434, limit=52 [ 691.161976] attempt to access beyond end of device [ 691.182810] loop3: rw=0, want=6434, limit=52 [ 691.194321] audit: type=1800 audit(1588501136.947:882): pid=2253 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 691.267329] minix_free_inode: bit 1 already cleared 10:18:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r4, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}, [0x4, 0x6, 0x7fff, 0x40, 0x8, 0xff, 0x5, 0x2, 0x9, 0x9, 0x80000001, 0x1ff, 0xcdd7, 0x7, 0xffff]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000540)={r6, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x1, 0xfff7}, 0x90) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x1a0, 0x0, 0x810, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdcf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5169}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x98f7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x237}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe93}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x463c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x975}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000801}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) 10:18:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x4, 0x0, 0x0) 10:18:57 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4040011) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000080)=0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 10:18:57 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:18:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r3, 0xfffffffc}}, 0x18) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r5, 0x0, 0x44, 0x0, 0x0, 0x0) 10:18:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r3 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000400)={r4, 0x1, 0x6, @broadcast}, 0x10) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={r6, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x1a0, 0x24, 0x300, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {0x1, 0xe}, {0x10, 0xfff3}}, [@TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x0, 0x8001, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x3f, 0x8, 0x4, 0x2, 0x1, 0x3, 0xfffffff9, 0x6}}, {0x10, 0x2, [0x4, 0xe6a, 0x2a, 0x0, 0x5, 0xff]}}, {{0x1c, 0x1, {0x6, 0x5, 0x8, 0x5, 0x1, 0x5, 0x5, 0x4}}, {0xc, 0x2, [0x80, 0x20, 0x8, 0x0]}}, {{0x1c, 0x1, {0x3f, 0x1f, 0xd5, 0x401, 0x0, 0x3, 0x4ae, 0x8}}, {0x14, 0x2, [0x2, 0xc16, 0x78, 0xfffe, 0x91c, 0x3, 0x3, 0x200]}}, {{0x1c, 0x1, {0x1e, 0x1, 0x4, 0x5, 0x3, 0x10001, 0x8, 0x2}}, {0x8, 0x2, [0x9, 0x1]}}, {{0x1c, 0x1, {0x6b, 0x6, 0x80, 0x7ff, 0x0, 0x7ff, 0x8, 0x4}}, {0xc, 0x2, [0x9, 0x80, 0x9, 0x8]}}, {{0x1c, 0x1, {0x6, 0x3, 0x1, 0x906, 0x2, 0x8000, 0x4, 0x9}}, {0x16, 0x2, [0x7, 0x100, 0xba9, 0x0, 0x1, 0x8c, 0x4, 0x5d8c, 0x0]}}, {{0x1c, 0x1, {0x40, 0x0, 0x5, 0x20, 0x2, 0x9, 0x4, 0x2}}, {0x8, 0x2, [0x8001, 0x0]}}, {{0x1c, 0x1, {0x2, 0x9, 0x4, 0x4, 0x1, 0xfffffff9, 0x9a4, 0x1}}, {0x6, 0x2, [0x21b]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4b6e89a2}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000084}, 0x40090) 10:18:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x5, 0x0, 0x0) [ 691.447000] audit: type=1800 audit(1588501137.197:883): pid=2274 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16163 res=0 [ 691.484338] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 691.510226] attempt to access beyond end of device [ 691.512328] device lo entered promiscuous mode [ 691.515412] loop3: rw=2049, want=6434, limit=52 10:18:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x6, 0x0, 0x0) [ 691.554247] attempt to access beyond end of device [ 691.568987] loop3: rw=0, want=6434, limit=52 10:18:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000200)={r6}, 0xc) sendmsg$inet_sctp(r3, &(0x7f0000000100)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x3, @loopback, 0xffff}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="9727bc43ce13f64a627e6fbd0652f38821539b85484fb5cd0575aa3efa66e60e347cbaae818755d00e5da2fadaf0ed781a5490", 0x33}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x800, 0x6, 0x8000, 0x5cb25569, 0x7, 0xfffffffb, 0x2, 0x101, r6}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xfffffffd}}, @init={0x18, 0x84, 0x0, {0x2, 0xffde, 0x2, 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}], 0x90, 0x3}, 0x4000) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SG_GET_SCSI_ID(r8, 0x2276, &(0x7f0000000180)) 10:18:57 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x20) 10:18:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x7, 0x0, 0x0) [ 691.717824] minix_free_inode: bit 1 already cleared 10:18:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x8, 0x0, 0x0) [ 691.772975] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 691.791102] attempt to access beyond end of device [ 691.801823] loop3: rw=2049, want=6434, limit=52 10:18:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f00ff010000000000000000000000000001"], 0x5c}}, 0x0) 10:18:57 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x20) [ 691.824905] attempt to access beyond end of device [ 691.840685] loop3: rw=0, want=6434, limit=52 [ 691.897252] minix_free_inode: bit 1 already cleared [ 691.996830] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 692.036205] attempt to access beyond end of device [ 692.055077] loop3: rw=2049, want=6434, limit=52 [ 692.078729] attempt to access beyond end of device [ 692.090821] loop3: rw=0, want=6434, limit=52 [ 692.157446] minix_free_inode: bit 1 already cleared [ 692.267027] device lo left promiscuous mode 10:18:58 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0xc}, 0x0, 0x80, &(0x7f0000000240)="a2d2723bb7c32a0dd140e2c408428b2485fd7cba48fa0a7ff7bee000f0d5acd0bb4100564eb88d2d8fda39036d0c4985737f2cd0df1bd5651fabc583933d43456a871555190455e8dc4e32380aeb8f4fc97a34970909e82ccfd1fd41b3bbb34c5ed4e076d01c245699a1d3e63c1a14abdd313ef901863f7d4ef756ca6dc1595f8081a5c432935350b0355527171f37c5c1ae331103e567e6da3a45cee47a3cf1edad5b76da2a75d8a8ba0629d6711d20ed43d3171da0a77a78016ebdb200228539c325194aeb58460e1f24774da24c", 0xcf, 0x0, 0x8, 0x9, 0x9, 0x4, &(0x7f00000003c0)="2b6a1db79004e37121df7f4775972bfa42c8d4d2cdb1bfad5af446d32992e1583065f52800bbd6f70a0f1caac1c31418928e1b66cffb666a85ef3fa1d818f52362c2573b146ba8c7b1c588d8f4118b1272e2f6dcc2e0fcf48d7c87b06f90e18093e8d87e06a960b1a756f511c098cd08aa4591c55a80b70f0d475ca661bab238b30dd3c11e8f40dcc67be32d3e33ad0f85d520251e98284f66bb69451ce834e225e9452502c4b5076afa60e7520072d2d72196a9b0e3afbc4551f63bfafbc022b617a77f520180c523dcf6409173306d0c2bbbc66e460008d0c73d175b179e5b004fa42aa022f2a6ab79837aaf0dd8416cd2c9"}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 10:18:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0xa, 0x0, 0x0) 10:18:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x70, r1, 0x8, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002d40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000e00000000000002034a000008000300", @ANYRES32=r4, @ANYBLOB='\n\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\v\x00\x00\x00\x00\x00'], 0x30}}, 0x0) r5 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000400)={r6, 0x1, 0x6, @broadcast}, 0x10) r7 = socket(0x100000000011, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000000)={r8, 0x1, 0x6, @remote}, 0x10) r9 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r9, &(0x7f00000000c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r9, &(0x7f00000030c0)=[{{&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x1, @broadcast, 'macvlan1\x00'}}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="5daadec59e7bef3f862d69b2384551ed75665b9ff74499ddbdbda5de2ed292a4eeb110198d5ddf790d60c3019399b9b25db72a084ff1f5fee59c2da30c9bbd88a7756f28080c045443a991cd742ede1e95201b2ac13e0faf6976e4863a92a6ac4fc62d3b72053c5c128267ce88f290ac5f67f25eb6d3f559c865583af75568aeeb0813e132f44e00da87ba67711dd71b462bb688c4a5b2cb553b38a2d9a84f697d4bae", 0xa3}, {&(0x7f0000001500)="144f8ee09b39c3eab22a1625ad58a716b27cb130540c853d05bb217fa0939ea93e81cca2ed0e928d78bb463cb9453060bc3ef6e0a991a02fe47ea62973ec84a4be1ae9de714cccc27b2a26b09ba60474e921e36cbb01a5a524cf62f3057a92aff2a9ca32d4a712a0d88c0f15bd4c2a29d8fa9fe66934bfaa599829cd7a4e9fd41a3ae8f79a351739ee4d37069ecf605e84a3bc23dd048698c0bf355951fc57c354f898aacba0908f430b45e9c4352807c5b8bdc1c804ced64671ea32e7c565a3f694e1da76de4d5fe34450d7d0d473de04616dabb2533838ce95e13841726a5855ac3cb92de999f7ff01da5f82072517588693e208a96538721fcf498e3a03dd9d1640e43567df76d4eb873d96fb811ce32c644ab6829abb1258da926483a970231f3c38ca411c06ef2aa276ea923aa51e0d72fc782e8b67856719d224de49df217e69c417877b3a3158d46cf1c7012207026c2da2ebe74e9db76d7f10110363338a58b2c42fcd11528e29f87318e79677fb79431d2fd1cc2a0efa038b39b851490faff91681a93361f84b2c41733bf7817a67b29d15c725f11ab6d2b82eec4c2e1c46d842142f8393dc8ccafe6eeeba657dacbe0f229dd933a0b623af63b117474ce52674004a20c3bcd745d1df09fe80b35186b9a4b1e003d2f660f15e31535712c231ac45ecf1eb2b4d0c40906460563b486a5c3a85567fa6774a878b14296c9b2f25b07cd744560840ea734f78128d068d256a6ff9862324b2b4790900be78f6afcb183f742a6871bfcdf01b579ecaeb859572c19685b5db33b6571c8688a6f9942d64ea4c6383cb92cf5be883fcaa76b9a267f12fcba3aea38369cdb8167295e2086765d59a78b3dc1ad8b828b6dfe5baacbe496cd3cd740eca8c11c12518449e6652b0bc4a88704bb349bc99759040f0598bb7b18eb10722be19c618f9116b58d9fe6ad7434f18cb5278bda3d66d118901d9e7ba5352f6cf9245911ee1632fb0806521c2756642b6736fda8c8a11e6324f5a33aba4b8ed89519471b3243869aaecbcd1dea02d3ad8953051bcb6f713369f3533ddadb120849e089853b858efe6130aedcac862c4903c80b092dae1295df7297f521eb5403a27b0d9f26fa66ee00304b8cedccb73fb8288ede7051fe6a1611e507842c049a9003f5b73ad4b06a5b27f0cb89586903ab5be7d33de0e3adb9cd6c922bf825215200a5ec62012eb5aef09466803b62aec3a7feae99b42d6df998a0121e7f25246419e81294bd61c1d84eeda505cfd6feaf85cc6b7e0338a411794dd1842b1a1436f91939bbbf4fa0408e007f1e3e6867413861ae91ffc7d99fbc4e6b875fabd97dc637c20d660c6c34e31a7f90ce27cee43aa2c2796dddc73cdb037eeed84614642ad282bd599c1e049d104660d9d0419cbc5d068349fa01b480284f6cfbae40d90c31d9debd33eec79b465b671893dea830df752b83605aef536a7c7fd6918e83f9f31c7da26c64fd1f8749f16da8c860c06b9d77322f8f59aa8b598d2afc1d4ede0ba413e17e1174da60a42636d0d55ea91a3bbcae8937102ed0462383cfedbc240d2a6a07a3e5f8b19ae0d79c7c33d8870827153269f10c55e03cd8b2869df664380a86292f1a1f8d8fe2c8959b220375df520f3375bb29045845f063730264215e34f5dd9c7b7a501e0419b0e44719e58158f4631ad9c6bfa0fd295928a0adde03e305bb4df86006099803128d7d870948c32ffbb1a7382979d7ac681f1477b556c5240db7c43c57e6d81765ed01490fe479dbc168a1b6b0082921815bfc33391ddca79a0f7791ab2d9c746e88636864d66f30bfd5c40c5616eb9096758d030152cd8b6e8e6851417f91d2d40208c58192bbbd9c05916aa04a418580464de1b7eb9de10ddcde4b16b8655c60c8756043e9d7039524d814d8184b7f383f2ac5e82e45b14bacfa77befb7cdc5fdcc3a5b72d3ad88c9d736890a6ccdc3ba02eaed6163f117c107a3157e2de098ff24eb67542a85c8493352c0485041ecd303b35f92d0a36bfadd0e319cfe19e69772e6e4bf49c25e97b5648e6f249fc3ed23647bfd1e36a1318c9da5b2621389c07ec489c8cada733294781002828173846f1976f1bdd7081cd99f615de8f978366ceaa3420c4d85ca1d93d7a396af3318a140a6239a0291b61a93fb72f266799f89d24a4d7afdc6f739f33e006b4fc10480629a026d3d53d1c0aa716d5a7b9b85569c7b5c3dc3b6935cb3354b05e6a28e86623a804501559ba0a3e7af6bb1b65d1e30a4ece6ee7db0f815e635625610aa1a171a21dc8844773ec635b337f540316e76ba55d49d911968c5de23b6b536dee60cd98c3aadd44f19a82ffdaa83a750410ff1a739d61410b6a24bca16ff8f59d411cc2296699daa6181f9ca8bb3affa29ed44024d9b8cff6bdffb35ff3755e5723427b766e93c9cf7417d3d7c9e67872babd5fe6e715d414251fba97fee3cf29fe5080a712d6c64d48c510f2e0bda25a4a6766c11b10f64ce69e5e5bdef31a85cafff87916a264d82c295b7e431bd77894098bbb2e0343f52858d0b4587f803aa67b3887ed6b2a67d3a53d7809c7899dcf0f726356df96e4443420fe721fc8cccd1f1e8af7d9e32d62232a2cd7c4472a31661811e0217e0b60ca36a4284c6752051c182b6608e742a12c8c0fda83e96e1a0658115e885a1b70328a36c415c99029e8be62e8b85789e7ddcd741e4f5566b3e260547136e2d65c3add31602880c2e5c8daa8549b3e2f4680dd11fdd0b16b0d9506993cfbbeb2baf027d827e37a2a68770295e61565ba7e7ceb302c434221fcda6fb64eeb214d3804bea0a40586971180d38f0863364e557cf288918ed60de073a338f3977a0b794d5a2511bdeddd90338470f7cabec72ff05e3fea387a38e416e4849f002dcb11131ba57a81fe0dc043eb6f15412c0dcf838f01fce4777c733307e63f108461f8e3dd659f420e7b253e2b4fe3e89d20ea5a02b085f5868777013fd353547bbc6adc5c8520194e6b34a39fb84b0b83273b27f96d0bb2350486a9f3c7f7d58c8686813330fbfadbff97ba3d2be69ba464c2871821e08c7b3357dfbc8a9e41ee12cd4c8e2bee3737bb9a6be6c079dae0fd04d731885cd5fa63cd349749902faacf8da9e6f283088262ecafb2df2d746f9b161623a73c3b0a51860dc44c6f07abf20850b856839a31a2ef95ae0a9383dcbbd027ef66db290997962c0470f0496ea063022e6281971c172aa29d09c2ce3d822b05f6055001507cb1d0686e29c7c17cb6e35041a5389fad8b6f8d531868df91d2f4eae58be304a8cb102ad284e965512d8a1b7de5bc1e75dd03da1abd056ddd3709d6ce1331ac58e29bff3660ea3573bf38b5d1b3a08b51776f7a5675b82ca7e5b65aafa0f781d274b06ecdcb8f00bb701bdc41ec9becdb8fcf31d133123d502bc4094d0875889aff0a1d940b8d7fe8a8e3758a41b9594842665aa454817f4035e77965e035617921a28dd6e1e7d641c74b7b59c4b4280f8fe55ffd4287725bfc09a9b1866c669c6934b10157878fefdd904cf7cd05cb243a3470bcf4c68193cfc5d4c6a5d900f5954fea2f41766a38f6bd695f8f5bebef6060d4590c3e78b52140242c4342f229ac214bc9f58170f88252ee1df8da2bb8f3b4764e739f723ff9a2138c94f76a8c87fb15dc3e49a607a691958eeb028a1639ae9f3335bb37bace2012bd0ccbc9fee9703cddb22700d71a912ee87c011f3c9c670cf7012fa155741d78901a3de97f686bf4196693733dbb015bd531af054216502f741ee78cd03f0f1dd9366408601e87a570e1c7842643f929988f16f0bdc91a5a018c98ae6a42aba40b8fd830c0498249ae08d04dea2c927c997f2e90961cc16ac8d2650f1169b0b8870c09c8beb973bd47d2df0df8ed3f4aa5ac525c0e46a660a79cfbfc4266f5c23d7438392303f6bf0f0ee2e94ee04de1b30ded949b518c1053fa32737f003835b62589cfb92407aa6488b70df65f1842a724c5a5dec95ef0694e652c970eb5fa2a49032ba1c6b800d5562f818a80a2089716d6aa4a222605a9501b05863f85f870a7e4aa10423e1f9f7ca45baabcfc82944428d2e491867a0fabffb92bed10968ef9cc7dc11cf4c536bec29c6838c46f2dd8a9db64def5cf0c7236355632a5e6e7c83657d0624122a46d7438aa5a5a8d039544d9d563f8a252764f94bb301ab73cda2b6fd349c850baebb21c6d92f88d67bc1b29b82fc3e8cf66357823a077422d9100f115567b8f2647d3108f2d46029512f8e5487dfb54f06a003f29bce67c432b34fd5b08643a6c251ce49535ec7013e6cd708b996eab03908e232f3659b3d1e87f56b64ddf52f24bd0743aca7b820a6a5d994fae7404fcebfb02f9f008c9d9139b521f138a6057f0ce450a375badb720142765d6377505abd7b341405568ae7017cc3f9a1c55472fca43fc3398e587dc83d41a8126972bcdf5598cfad118c5e746428f05ed506f911ce83b7ecb2e9f5915857175834348c63102861a4c40f4153336535fe4c20d56284ddbe7c824d1fa425c817f0174685fa52f06ca7d1789cf5f33c345a0d654898726bf4c6f03233de967fc4a56cf51da9d07907b1b989795958a822413dd4f62e96333250c4c83cca643176575ffae1dd4a35f8e4b2f38f92b6903c0236c36b7ee367322d68efb5a1bf2b6755265b704d3773740e9f80fec278dca1dd31ca3d3de684fc1a2f322f089056377a89825675af1edfb73029e14230c52c35bcbd7cbf9f3e0294abe762b7f99a8b57421fd53ed00bbf0099911ff69473b5c854673e89526939f3218768c04b31dbbaa705f7993394424794f0b019c4cf8222b9b1fd2cbebb8953d883d8b8d250bee06469ed4bdb3f6e178e577a284c75c397668996847bb833812e367dacf8d5889558e22185bae7d61d038ccc6a462aecf9e90f10cab5febf35d115ba2a243d549cfb0724432b303cfe2edfcffbbaa74e11f9d8e2476f54054da396141710a5977e3204f85983fa5d91be404ca1476b568982a6d12468f0daa0b5eb47dd300ccfc6275e2865ca9669dda135926c9ff4c8ec60d516911411a3fce41b41b15efad8df6a282d95bf218c703c09423f19e6bef06dee00887da1f33fe082596f97b8a4e184c25e80b13a0d6a58dd9bb28ca920cefd0571a488246a8702d7fef6fe4d099f798e6f21bb46cfd4303f0e5e2caf0ed0eacbc2ffdcdf3cfb683b968aaebeb7c2718870ae5c5dbc16f069bd8ed9c38864e6e375d19c7eb528f30159bc9ea9d93ae7c04712b890be890c1638f96ff1774deacbdec6c47e206575805509acee3d556ba6ee666384acd1c22f8a1e52159b29a2f418f3c7e31cefe824712852d2ff8346853bf370d1f9ca5de5ea477d46a4e49f07667c374176e0dedde5726a5f5b6dcf07a02415d598ac1951e13a196467dd2c70f69ad0bf5d5910d51428eb649934e27e7ee60a1cc25c855e749a5a803c15b36056c4c9f271513979d3a770903e1dea4ecc4bbd7686a53270140f00d3badaa5f04141e7e36875590e7f5addf3ff472a6d53a817fc320908019a76d29f2b3a6ab7cb56a5b760ff0760489fb5642a98534041711dbb966d25497ec74fdbf4737fee470fed5ff267fe5320b728641bcb83bb2246dc5b7f4eba12f7ed3054722ea126499a7bf184df1074d7832b4aac1e53e164125a07c5b455269a1ad92e11f60669d2ac21ecd784559be75c6f10f5ff939040f43336fbab46624cbd9d166a660ddc0ab7aca3522700da91e21d06dbfdc6c08c2163", 0x1000}, {&(0x7f0000002500)="6caa482c9d5758457de0d25523d50a69c1d37c05786e0062e450b421cb0cbe8b38e0d1ced03a75920dc5c6ed3b106a65f39a75853ff1ff6e1aabbadabe26833092851b1b13c61ac0c4bc73343c98173c907a4d441ccf9ae239ce550cd850c10aabec7a1f4ea6e0601c40ff67babaf817244ab2f871aa7f956297", 0x7a}, {&(0x7f0000002580)="32279d08499f61857355988754c8be1311fb77ef7eb9157ff3bc7836dd6ff94afac94a459905ac60493319d0f560aa6b47e38126b809f53a39f3ecbc114705e04bc6b51f1fd303333a1b96ea15e041f197032df0ebb148d891f0837e77182f0ade02c8ee1229c120f774dce30961dc73e95feeaca01fea", 0x77}, {&(0x7f0000002600)="522655efc3476a2d5e3e38d400d49454c6c8a486519f8473d4fbc2b4f41bda01c4eb6b4735daa6cd994cf1ce1a13dc7f4bfd447b05e7fca7afa90824a1cfbdbc58a6b837be34dbc74bdd8af3cbe4d5", 0x50}, {&(0x7f0000002680)="28f21c3507620e78f8867a6e34e9c764e0890ad444308e71b567a983adc6522f6925cb35aad1dfbf156683e7dbc3de9a270a837c177e7599e40c79aec032f6b95c167de8836117dcf110f2c3913fe6539f85349ab62ee8048eb9e93ace6269781f56dcb3702259c5f3e3a060905d87249e77a69d51eb82c02fdc9566745da38867", 0x81}, {&(0x7f0000002740)="4acd1567be88685dd26ed62b87fefd880428776eb20023cc057071c686058efc45001b0ec952263bc3f898064f3e38f2371901a38d4f3ed9a5f17870ef6ab5cc4a", 0x41}], 0x8}}, {{&(0x7f0000002840)=@xdp={0x2c, 0x0, 0x0, 0x12}, 0x80, &(0x7f0000002d80)=[{&(0x7f00000001c0)="b6e1596438c9fb95dd8e222cd0b22ebe186921b254fc6981a860df10132b3396f177b100924209fb66a63a0b", 0xffffffffffffffaa}, {&(0x7f00000028c0)="230064db115cdba2dcbffff9a7e19c5f03a28b007baf740d56a495ddd3b4b1ca9aba035e153e06030a772dd5aae69117075134328ac1e2b1b08ee5a0f97ae888a588621bede20a18eb1e24fe781cdbdeb0941a3d011916e632f804d60c8455fc5a88db1e4cd647a83548aa89831d0731be84f8a79ebd1b0fd4e4428981c0ad9e868b58329fb5753535b8a18614fbd7f5f013de1fe4df5317", 0x98}, {&(0x7f0000002980)="fcbdf65ac39fea9b10f800f3a7318332f4e0453c4ee0bfd1ff57478b9a21bb2a9b595494edf8b0ba851b735ed20b99c88932c66102bf76d0b67b816a5da619ef3a6616", 0x43}, {&(0x7f0000002a00)="6ea8795c9229b5acdeb51f13af4f2a46ed2347247a420e9242c95853ecf7349573646110ef3fe329e6ce1c8a5d5c2087e648cf086f9a1477dd93944d6da940e654420f7450aa36c14abf6f89989f1c12d095d305e2d752f5d891406e4d3c8e5c82561c2e31718cbad52fb55eb5933141dc4796f6b52ee7fadeea08d417935c07a3b0504463278ede", 0x88}, {&(0x7f0000002ac0)="0af64cbadde392b0627c64b95d9cf22e364a70379ae4502e516f9ddb243a682964449e47c6910fd5491d2a0f1a41324f4747f291520691c6a345f63009c5bb078efddcad62251f35c627e8f735eb6d6dc343aeb46d379c856f7aa1508d045c8a2cb7dcb88c6f5758d607f61e02e72e2efe9069", 0x73}, {&(0x7f0000002b40)="3212014997d21b2f814d0dd5edc844876b317d850a9768ad028225832115b04b7b208d259651d8e568051c4c84fd84d4ab57982af1e2707925a7c17cd6cd0ff29c141a4743b0d177281447f415d6f7c8aea7483d4c4013506deb403cc65d357bf24727024b58fb56b7a2549981d380d43456af713b6df3600f3beb294eb731a5b758f3d2580aa7fad891ea707796ff92a32bffb8707d3374954627bcc0e675e042a7ee697f6e308b729c14c8", 0xac}, {&(0x7f0000002c00)="ce16daef34214e6909db62a44ccd44d028adfdb85336162e3e3fab6b2326a3256c4392dfb92c28280d9cc78be4f937353e436b0c0ecf1e40df75f18bcb746d3966df3a428b897535cf8edd4ad9556343e4a2f60d4c3c2bd7a36e432ad68559fd48cc17f155604d9b5f2c3f4367988cb2e0976432712c3b1b9aa1e3c761d102d5824bd26718bfb70c03", 0x89}, {&(0x7f0000002cc0)="b03a7dad3f59c7cbf6fdfc7c3803576d237f9543e0a9189684a4eac9c0b18f2ae5b19d44a0410b3a71f2f81ec970819b8f660d4b58c216c26a10de9ac5af0b8e4bce1747e4354546ee546453c17d99994749d69e7975c0c88de7", 0x5a}, {&(0x7f0000000300)="8e25fe93b15dea42a2177caaef32c8f2e31fdec6d8d2b60ab44889c5bc7547c1cce0ea5157befadfea450c61c0dc2399bf3917387d0e2118bfa3b2", 0x3b}, {&(0x7f0000002d40)}], 0xa}}, {{&(0x7f0000002e40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2}, 0x4, 0x4, 0x1, 0x4}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)="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", 0xfd}], 0x1, &(0x7f0000003180)=ANY=[@ANYRES64], 0xb0}}], 0x3, 0x0) getsockopt$inet_mreqn(r9, 0x0, 0x0, &(0x7f0000000040)={@loopback, @dev, 0x0}, &(0x7f0000000080)=0xc) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044) [ 692.394456] device lo entered promiscuous mode [ 692.400470] device lo left promiscuous mode 10:18:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x4e22, @loopback}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 10:18:58 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x20) 10:18:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x80) write$vhost_msg_v2(r1, &(0x7f00000002c0)={0x2, 0x0, {&(0x7f00000001c0)=""/165, 0xa5, &(0x7f0000000280), 0x1, 0x1}}, 0x48) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ustat(0x9, &(0x7f0000000040)) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r3, 0x0, 0x4c, 0x40002001, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x8202, 0x0) write$P9_RSTAT(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="4e0000007d010000004500f30701000080010400000003000000000000000000003002000000050000000000000000000000000014008573656c666d696d655f747970657d286574683100000000"], 0x4e) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) removexattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@random={'os2.', '\x00'}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045540, &(0x7f0000000280)=0x9) signalfd4(r5, &(0x7f0000000080)={[0x2]}, 0x8, 0x0) 10:18:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0xb, 0x0, 0x0) [ 692.469524] device lo entered promiscuous mode [ 692.501364] device lo left promiscuous mode 10:18:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0xc, 0x0, 0x0) [ 692.542611] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 692.577989] attempt to access beyond end of device 10:18:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0xd, 0x0, 0x0) [ 692.604893] loop3: rw=2049, want=6434, limit=52 [ 692.636531] attempt to access beyond end of device [ 692.651139] loop3: rw=0, want=6434, limit=52 10:18:58 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x20) 10:18:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0xf, 0x0, 0x0) 10:18:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x10, 0x0, 0x0) [ 692.733265] minix_free_inode: bit 1 already cleared [ 692.870104] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 692.895362] attempt to access beyond end of device [ 692.936393] loop3: rw=2049, want=6434, limit=52 [ 692.966061] buffer_io_error: 18 callbacks suppressed [ 692.966073] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 693.008711] attempt to access beyond end of device [ 693.013728] loop3: rw=0, want=6434, limit=52 [ 693.020319] Buffer I/O error on dev loop3, logical block 3216, async page read [ 693.087558] minix_free_inode: bit 1 already cleared 10:18:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x11, 0x0, 0x0) 10:18:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYRES16=r1, @ANYBLOB="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"], 0x5c}}, 0x0) 10:18:59 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x20) 10:18:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 10:18:59 executing program 0: ptrace$setopts(0x4206, 0x0, 0x4, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) poll(&(0x7f0000000080)=[{r0, 0x9042}], 0x1, 0x8) ptrace$setopts(0x4200, r2, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = getpid() prlimit64(r3, 0x0, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x7fffeffd) 10:18:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00') r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000000)=0x63f5315b) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) 10:18:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x12, 0x0, 0x0) 10:18:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mq_getsetattr(r3, &(0x7f0000000000)={0x3f, 0xcc0b, 0x19, 0x6fd4}, &(0x7f0000000040)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) [ 693.525574] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 693.545317] attempt to access beyond end of device [ 693.562367] loop3: rw=2049, want=6434, limit=52 [ 693.582088] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:18:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x13, 0x0, 0x0) [ 693.622682] attempt to access beyond end of device [ 693.631277] loop3: rw=0, want=6434, limit=52 [ 693.635950] Buffer I/O error on dev loop3, logical block 3216, async page read 10:18:59 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x20) 10:18:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x14, 0x0, 0x0) 10:18:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x15, 0x0, 0x0) [ 693.777048] minix_free_inode: bit 1 already cleared 10:18:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dots,nodott,\x00']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETX(r3, 0x5433, &(0x7f0000000000)={0x5cf, 0x6, [0x1a, 0x2, 0x8001, 0x4, 0x8], 0x200}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f00ff010000000000000000000000000001"], 0x5c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x50, r7, 0x200, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xe829}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x50}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, &(0x7f00000001c0)={{0x1, 0x0, @identifier="5eebdca216ebfd600be754f773a1cbca"}}) getresuid(&(0x7f00000005c0)=0x0, 0x0, &(0x7f0000000380)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000440)={{0x2, r8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f00000001c0)=""/43) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000300)=""/72) write$FUSE_INTERRUPT(r5, &(0x7f0000000080)={0x10, 0x0, 0x2}, 0x10) [ 693.852046] FAT-fs (loop4): Unrecognized mount option "nodott" or missing value [ 693.919804] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 693.935573] FAT-fs (loop4): Unrecognized mount option "nodott" or missing value [ 693.948432] attempt to access beyond end of device [ 693.961280] loop3: rw=2049, want=6434, limit=52 [ 693.966201] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 693.993875] attempt to access beyond end of device [ 694.032009] loop3: rw=0, want=6434, limit=52 [ 694.038404] Buffer I/O error on dev loop3, logical block 3216, async page read [ 694.110522] minix_free_inode: bit 1 already cleared 10:19:02 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000080)="4644fd206a8e94d3ebd899a8fe2a630532b55149b3a464a60488d56ff2dbf63a5db27b3423f64f54965d301aef775cf127b06b4d51be451c45a8c79b8f26a57cd2575b381546603f872227117114f9aa3e63d982fb1630088034a1c8744f13ef00d8a79ad8", 0x65}) prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 10:19:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) 10:19:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x16, 0x0, 0x0) 10:19:02 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x20) 10:19:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, 0x1410, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x4041) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2b, 0x4, 0x0, {0x5, 0xfffffffffffffeb3, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) 10:19:02 executing program 1: syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x2, &(0x7f0000000180)=[{&(0x7f0000000100)="ea29de5dbedb0ea22b7fa0312ce1d17936baac54f2e6aa53eb6c28ac3e6e187d0a327de4d3e3a8d82933fa143126b93496acc815cc8315dfbbd260a57d60e43c", 0x40, 0x2}, {&(0x7f0000000140)="da258c47dcbfd7a9010e5f043872b778d20218", 0x13, 0x5}], 0x8a0, &(0x7f00000001c0)='/$ppp0em0^em1GPL%\'\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000003c0), 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffffffffffffec, 0xfa00, {0x43, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r7, r6}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r7, 0x9, "16a3bd", "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"}}, 0x110) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000200)={[{0x9, 0x8, 0xff, 0x6e, 0x0, 0x0, 0x3f, 0x5, 0x6b, 0x9, 0x20, 0x1f, 0xfff}, {0x9, 0x100, 0x3, 0x9, 0x5, 0x22, 0x6, 0x52, 0x48, 0x0, 0x8, 0x20, 0x4}, {0xffffffff, 0x20, 0x3, 0xfb, 0x4, 0x94, 0x0, 0x3f, 0x2, 0xf4, 0x80, 0x7, 0x81}], 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000040)) 10:19:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x17, 0x0, 0x0) 10:19:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x18, 0x0, 0x0) [ 696.554801] kauditd_printk_skb: 13 callbacks suppressed [ 696.554865] audit: type=1800 audit(1588501142.307:897): pid=2480 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16388 res=0 [ 696.661162] MINIX-fs: mounting unchecked file system, running fsck is recommended 10:19:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x19, 0x0, 0x0) [ 696.709407] attempt to access beyond end of device [ 696.714812] loop3: rw=2049, want=6434, limit=52 [ 696.735803] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:19:02 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r8, &(0x7f00000000c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r8, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) bind$netrom(r8, &(0x7f0000000280)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r7, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) [ 696.789835] attempt to access beyond end of device [ 696.794965] loop3: rw=0, want=6434, limit=52 [ 696.816496] Buffer I/O error on dev loop3, logical block 3216, async page read 10:19:02 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x48]}}, 0x20) 10:19:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x21, 0x0, 0x0) [ 696.848871] audit: type=1800 audit(1588501142.607:898): pid=2501 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 696.927404] minix_free_inode: bit 1 already cleared [ 696.990454] audit: type=1800 audit(1588501142.747:899): pid=2522 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16485 res=0 [ 697.002993] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 697.024082] attempt to access beyond end of device [ 697.031649] loop3: rw=2049, want=6434, limit=52 [ 697.036539] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 697.049130] attempt to access beyond end of device [ 697.054498] loop3: rw=0, want=6434, limit=52 [ 697.078821] Buffer I/O error on dev loop3, logical block 3216, async page read [ 697.099648] audit: type=1800 audit(1588501142.857:900): pid=2528 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 697.169368] minix_free_inode: bit 1 already cleared 10:19:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x22, 0x0, 0x0) 10:19:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090000020000000000200000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a000000000057bfb3551b2ef6d5b1bb4f06000200010000001400dddb7706000000"], 0x5c}}, 0x0) 10:19:03 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c]}}, 0x20) 10:19:03 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x42401, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x6, 0x48}, 0x408, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x5, 0x3, "383ada7b941eb084307aeaa30e91702b34b175e74a6ed7fb475d204d065ca157edf6b5fd7bdefec2f8f7f61b5bca3c3ae177f8d315b8d2d9c627df94dec99d031cf4fd6e3c46e53957a2bff671fda693f46da6a55bcbf2f8869d6bccdabd9ea5de69359908bb6191665cfc9a4e454bb1255626fc37b0a617b2c7905e744c9c5b1f12cd7b526607142887a4adf1fa55df999236c7782e7ff2bd3a6b4643355045d83c8672d801b6a98ea2475b0d699caf8b19570e9abff9b1da98678a81977cf18d7c5572822ce64832f601b50228e2e22aeb214b2ab02339d233d73f918beeb03c94fefb9bbe9e530175b83e5077a4bad3fbb91c996d6e43114d90983a235dcd", 0x1f, 0x7, 0x4, 0xb, 0x8, 0x5, 0x81}}}, 0x120) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) [ 697.308622] audit: type=1800 audit(1588501143.067:901): pid=2544 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16507 res=0 [ 697.338043] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 697.398934] attempt to access beyond end of device [ 697.411456] loop3: rw=2049, want=6434, limit=52 [ 697.429638] attempt to access beyond end of device [ 697.443469] loop3: rw=0, want=6434, limit=52 10:19:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000000)={0x20, 0xffffffffffffffda, 0x6, {0x0, 0x18}}, 0x20) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) [ 697.449699] audit: type=1800 audit(1588501143.207:902): pid=2563 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 697.507819] minix_free_inode: bit 1 already cleared 10:19:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x4b1b1340ebf453a) ioctl$RTC_PIE_ON(r3, 0x7005) 10:19:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x23, 0x0, 0x0) 10:19:03 executing program 4 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) 10:19:03 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x60]}}, 0x20) [ 697.612808] audit: type=1800 audit(1588501143.367:903): pid=2579 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16503 res=0 [ 697.637497] FAULT_INJECTION: forcing a failure. [ 697.637497] name failslab, interval 1, probability 0, space 0, times 0 [ 697.649248] CPU: 0 PID: 2580 Comm: syz-executor.4 Not tainted 4.19.120-syzkaller #0 [ 697.655387] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 697.657055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.657080] Call Trace: [ 697.657105] dump_stack+0x188/0x20d [ 697.657128] should_fail.cold+0xa/0x1b [ 697.657145] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 697.657161] ? inet_csk_get_port+0x2ad/0x1d40 [ 697.657187] __should_failslab+0x115/0x180 [ 697.679259] attempt to access beyond end of device [ 697.680576] should_failslab+0x5/0xf [ 697.680591] kmem_cache_alloc+0x44/0x710 [ 697.680607] ? lock_acquire+0x170/0x400 [ 697.680625] ? inet_csk_get_port+0xd9a/0x1d40 [ 697.686144] loop3: rw=2049, want=6434, limit=52 [ 697.689646] inet_bind_bucket_create+0x26/0x240 [ 697.689663] inet_csk_get_port+0x634/0x1d40 [ 697.689690] ? inet_csk_prepare_forced_close+0x140/0x140 [ 697.689709] ? lock_downgrade+0x740/0x740 [ 697.707133] attempt to access beyond end of device [ 697.711226] ? check_preemption_disabled+0x41/0x280 [ 697.711249] __inet6_bind+0x5d5/0x19c0 [ 697.711275] inet6_bind+0xf3/0x15c [ 697.711298] __sys_bind+0x20e/0x250 [ 697.720103] loop3: rw=0, want=6434, limit=52 [ 697.724519] ? __ia32_sys_socketpair+0xf0/0xf0 [ 697.724544] ? fput+0x2b/0x190 [ 697.724558] ? ksys_write+0x1c8/0x2a0 [ 697.724575] ? __ia32_sys_read+0xb0/0xb0 [ 697.784293] ? __ia32_sys_clock_settime+0x260/0x260 [ 697.789333] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 697.794104] ? trace_hardirqs_off_caller+0x55/0x210 [ 697.799136] __x64_sys_bind+0x6f/0xb0 [ 697.803075] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 697.807698] do_syscall_64+0xf9/0x620 [ 697.811513] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 697.812224] audit: type=1800 audit(1588501143.407:904): pid=2586 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 697.816723] RIP: 0033:0x45c829 [ 697.816739] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:19:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x24, 0x0, 0x0) 10:19:03 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x68]}}, 0x20) 10:19:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x25, 0x0, 0x0) [ 697.816747] RSP: 002b:00007fcfb7e79c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 697.816761] RAX: ffffffffffffffda RBX: 00000000004d9800 RCX: 000000000045c829 [ 697.816776] RDX: 000000000000001c RSI: 000000002047b000 RDI: 0000000000000005 [ 697.816784] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 697.816791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 697.816805] R13: 0000000000000033 R14: 00000000004c2d34 R15: 00007fcfb7e7a6d4 10:19:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000040)={0x1, 0xc0, 0x8af, 0x5, 0xe888, 0x1000}) r3 = dup(r0) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r4, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) getsockname$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 10:19:03 executing program 4 (fault-call:4 fault-nth:1): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) [ 697.967923] minix_free_inode: bit 1 already cleared 10:19:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x28, 0x0, 0x0) [ 698.095923] FAULT_INJECTION: forcing a failure. [ 698.095923] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 698.107752] CPU: 1 PID: 2603 Comm: syz-executor.4 Not tainted 4.19.120-syzkaller #0 [ 698.115557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 698.124936] Call Trace: [ 698.127557] dump_stack+0x188/0x20d [ 698.131222] should_fail.cold+0xa/0x1b [ 698.135177] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 698.140310] ? __lock_acquire+0x6ee/0x49c0 [ 698.144575] ? __lock_acquire+0x6ee/0x49c0 [ 698.148456] audit: type=1800 audit(1588501143.897:905): pid=2604 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16505 res=0 [ 698.148842] __alloc_pages_nodemask+0x1c7/0x6a0 [ 698.173251] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 698.178297] ? mark_held_locks+0xf0/0xf0 [ 698.182399] ? should_fail+0x142/0x7bc [ 698.186322] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 698.191546] cache_grow_begin+0x8e/0x8a0 [ 698.195897] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 698.200680] kmem_cache_alloc+0x648/0x710 [ 698.204856] ? lock_acquire+0x170/0x400 [ 698.208870] ? inet_csk_get_port+0xd9a/0x1d40 [ 698.213391] inet_bind_bucket_create+0x26/0x240 [ 698.218092] inet_csk_get_port+0x634/0x1d40 [ 698.222450] ? inet_csk_prepare_forced_close+0x140/0x140 [ 698.227923] ? lock_downgrade+0x740/0x740 [ 698.232089] ? check_preemption_disabled+0x41/0x280 [ 698.237124] __inet6_bind+0x5d5/0x19c0 [ 698.241045] inet6_bind+0xf3/0x15c [ 698.244602] __sys_bind+0x20e/0x250 [ 698.248250] ? __ia32_sys_socketpair+0xf0/0xf0 [ 698.252877] ? fput+0x2b/0x190 [ 698.256089] ? ksys_write+0x1c8/0x2a0 [ 698.259907] ? __ia32_sys_read+0xb0/0xb0 [ 698.263995] ? __ia32_sys_clock_settime+0x260/0x260 [ 698.269039] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 698.273830] ? trace_hardirqs_off_caller+0x55/0x210 [ 698.276503] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 698.278874] __x64_sys_bind+0x6f/0xb0 [ 698.278890] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 698.278905] do_syscall_64+0xf9/0x620 [ 698.278924] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 698.278943] RIP: 0033:0x45c829 [ 698.278957] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 698.278965] RSP: 002b:00007fcfb7e79c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 698.278977] RAX: ffffffffffffffda RBX: 00000000004d9800 RCX: 000000000045c829 [ 698.278984] RDX: 000000000000001c RSI: 000000002047b000 RDI: 0000000000000005 [ 698.278992] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 698.279000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 698.279007] R13: 0000000000000033 R14: 00000000004c2d34 R15: 00007fcfb7e7a6d4 [ 698.457137] minix_free_inode: bit 1 already cleared 10:19:04 executing program 0: accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4005, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x240000d0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 10:19:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x29, 0x0, 0x0) 10:19:04 executing program 4 (fault-call:4 fault-nth:2): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) 10:19:04 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6c]}}, 0x20) 10:19:04 executing program 5: socket$inet(0x2, 0x0, 0x5) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) sendmmsg$alg(r0, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="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", 0xfb}, {&(0x7f00000002c0)="58a0f951dabc9b4d7b16b5cf160ef579d5331a348da147f8dd628fa2ad7941c2d6c736347e90d428368a8a7cc925fb6b13ad02bb8d70ec2995c6b5dc1b4b35b82a6d42c9dd11fd3118adab40ff2004693ba16aa285acca269f787442222d59d05c217ababbcf63af214ba632d6a061cead66e7b2eba607e1", 0x78}, {&(0x7f0000000340)="ea8ae776b45464f52dc8953335639d9f17b33d0b2aca1b8e41967113bd1027f59c5cd88f987652feb842078cd83e5970d9bd85590302048711b8149df7de86e140832295227c7db983a78962ad59fb0c4821f3eea5f6f75d388f67b38095f463ec65154e2258836594a5c3d78bbe557a9149a81e197591bfcbfe80f4c593a7731f1a2cf55cb39c56ee301723227b3f127524c4882577fe7390c7c78139398d7468e864f9ba5608d139ca942e976ccfe698be4dc52dd367496750ef5e940492767f3e91680e638fc922dfba5a1f186df633b85e592ab1da1f8dd712d8ff5af951a7aa7c9c3a64495b603b898b1701b0cbe6f5c6a4fd", 0xf5}, {&(0x7f0000000440)="cae3e8bcc52b9ac394022f2f002a32cdafdce496d889ee552170c2084faa5b9fbd3331d59cfb777540b65d3d30307e930ff54dcee95e9dfdc7596208591d967bab9ed67ac1a8a41783ac68e0ab96d22f94258d6385b01f9753cb", 0x5a}], 0x4, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8004}, {0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000500)="f275b13624e5b75987aa3cb1d12911f534354846", 0x14}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="88ace6643ec221d1a210cc5b1dfba3e32822354b13576459ffb5beb4f48a4a0e0fdb52fb47151bb7a9c4d71e788c6e7ffbf39cb2668eca479ef924fc8ec00cc3598b48bd82a66bcdd0f5999666578c5a6b98fc4a0287302738061b25add9b696818febd664b947053867294c545cc15fdfa0d6ddfb68f938143c9a0427031ac1fa5c539bf3cec84bbc8dabd4fd1240b25c8fc031a56d51a7a60b5ac629ee42bc528ff6f28a2b2c1b8272ecfd80095493", 0xb0}, {&(0x7f0000001600)="585ea2a39aff4d42632cb8780d2cef923e288aec34674531d0a7c242939a11d5e03b35bd4f0a1bb958061960dd61f168b4a4b1d1ba0a13ab27076421c72ba4829a4386359f44459e8f7eda1030e193514292434178ac", 0x56}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)}], 0x6, 0x0, 0x0, 0x4801}, {0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002740)="f33a2f130185471ef178e74ef73f6f88dd12d76042b21ad023cf72efadf9128ae495379ef8a7403c30c64e3aad7def0fde73f94f2ff3f3646cb0a8bed4de53f91d6c4fd1f13f5f89ae979e2a88068dcc6f81f028953dbe23fe00d5877763c7f8a9dcd8d4c710c4bcf639e50c28ba53721f2cc457eb7da1aa62e5bdbe328b471a3f62a457f8397805e9deb5cfa61919fc6e", 0x91}, {&(0x7f0000002800)}, {&(0x7f0000002840)="361ea76fec6091a0c7657a58abf40b9ae7f0ea9182e9e8a315d8daea54cc86443f0f3e34c7cc6ee528873d4cbb73aa09fb55f73a3b384a1205c2", 0x3a}], 0x3, &(0x7f00000028c0)=[@assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x400}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x400}, @op={0x18}], 0x78, 0x2404c810}], 0x3, 0x400c004) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r4, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000002800)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000000)) set_tid_address(&(0x7f0000002680)) [ 698.719038] audit: type=1800 audit(1588501144.477:906): pid=2631 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16503 res=0 10:19:04 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) 10:19:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x2a, 0x0, 0x0) [ 698.765879] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 698.819251] attempt to access beyond end of device 10:19:04 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0x2, 0x0, 0x0, @mcast2, 0x1}, 0x1c) 10:19:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x2b, 0x0, 0x0) [ 698.850354] loop3: rw=2049, want=6434, limit=52 10:19:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r3, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) recvfrom$l2tp6(r3, &(0x7f0000000040)=""/86, 0x56, 0x1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x20) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 698.889000] buffer_io_error: 4 callbacks suppressed [ 698.889013] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:19:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x2c, 0x0, 0x0) [ 698.959309] attempt to access beyond end of device 10:19:04 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) [ 698.983480] loop3: rw=0, want=6434, limit=52 [ 699.020737] Buffer I/O error on dev loop3, logical block 3216, async page read [ 699.127701] minix_free_inode: bit 1 already cleared 10:19:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x2d, 0x0, 0x0) 10:19:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) 10:19:05 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x74]}}, 0x20) 10:19:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) 10:19:05 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x93}, 0x0, 0xfffffffffffffff9, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) listen(0xffffffffffffffff, 0x0) getpid() prlimit64(0x0, 0x9, 0x0, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 10:19:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x2e, 0x0, 0x0) [ 699.605004] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 699.626073] attempt to access beyond end of device [ 699.639785] loop3: rw=2049, want=6434, limit=52 10:19:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x1000000, @mcast2, 0x1}, 0x1c) [ 699.653172] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 699.666560] attempt to access beyond end of device 10:19:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x2f, 0x0, 0x0) 10:19:05 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7a]}}, 0x20) [ 699.698621] loop3: rw=0, want=6434, limit=52 [ 699.709341] Buffer I/O error on dev loop3, logical block 3216, async page read [ 699.798339] minix_free_inode: bit 1 already cleared 10:19:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x30, 0x0, 0x0) 10:19:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}, 0x1}, 0x1c) [ 699.924843] MINIX-fs: mounting unchecked file system, running fsck is recommended 10:19:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SECCOMP(0x15) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_create(0xfffffffc) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000240)=""/143) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) set_robust_list(&(0x7f0000000140)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x9, &(0x7f0000000100)={&(0x7f00000000c0)}}, 0x18) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000001c0)={0x990000, 0x1, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xa00905, 0x8, [], @ptr=0x6}}) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000200)='vegas\x00', 0x6) [ 699.978154] attempt to access beyond end of device 10:19:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x31, 0x0, 0x0) [ 700.012301] loop3: rw=2049, want=6434, limit=52 [ 700.045047] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 700.080234] attempt to access beyond end of device [ 700.101588] loop3: rw=0, want=6434, limit=52 [ 700.111050] Buffer I/O error on dev loop3, logical block 3216, async page read [ 700.177325] minix_free_inode: bit 1 already cleared 10:19:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x32, 0x0, 0x0) 10:19:06 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) 10:19:06 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xf0]}}, 0x20) [ 700.444017] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 700.465095] attempt to access beyond end of device [ 700.482472] loop3: rw=2049, want=6434, limit=52 [ 700.502914] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 700.552232] attempt to access beyond end of device [ 700.557295] loop3: rw=0, want=6434, limit=52 [ 700.561730] Buffer I/O error on dev loop3, logical block 3216, async page read [ 700.650584] minix_free_inode: bit 1 already cleared 10:19:06 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'geneve1\x00', 0x2}, 0x18) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 10:19:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000000)={0xa0, 0x2, [0x0, 0x60, 0xc695, 0x5, 0x5], 0x5}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$pokeuser(0x6, r6, 0x3, 0x7ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) mq_getsetattr(r8, &(0x7f0000000180)={0x100000001, 0x1, 0x80000000, 0xfffffffffffff184}, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x1, 0xb5, 0x6, 0x3, 0x0, 0x7f, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x0, @perf_config_ext={0x5, 0x1}, 0x50, 0x9, 0x10000, 0x4, 0xdf, 0x6}, r3, 0xc, 0xffffffffffffffff, 0x8) 10:19:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x42, 0x0, 0x0) 10:19:06 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) 10:19:06 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x20) 10:19:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10100, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000080)={0x100000001, 0x100, 0xffffffe1}) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 10:19:06 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) [ 701.105059] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 701.128517] attempt to access beyond end of device [ 701.137144] loop3: rw=2049, want=6434, limit=52 10:19:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x60, 0x0, 0x0) [ 701.152940] Buffer I/O error on dev loop3, logical block 3216, lost async page write 10:19:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) 10:19:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x62, 0x0, 0x0) [ 701.206158] attempt to access beyond end of device [ 701.214466] loop3: rw=0, want=6434, limit=52 [ 701.234442] Buffer I/O error on dev loop3, logical block 3216, async page read 10:19:07 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x4) 10:19:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x83, 0x0, 0x0) [ 701.329823] minix_free_inode: bit 1 already cleared [ 701.518046] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 701.565215] attempt to access beyond end of device [ 701.575973] loop3: rw=2049, want=6434, limit=52 [ 701.595383] attempt to access beyond end of device [ 701.603044] loop3: rw=0, want=6434, limit=52 [ 701.612613] kauditd_printk_skb: 10 callbacks suppressed [ 701.612624] audit: type=1800 audit(1588501147.367:917): pid=2800 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 701.687542] minix_free_inode: bit 1 already cleared 10:19:07 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 10:19:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) 10:19:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x480, 0x0, 0x0) 10:19:07 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x9) 10:19:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x5d, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) 10:19:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000140)=ANY=[@ANYBLOB="ef83c56f674f3ceb71801804000000000000005f9e6bc5081b506baf1cac8499f213742d3fa74eb3a7f48d57599ea1bf07a4d15701780fdff44c0ce2697fd35666d1bd13f294575a9faafbb42758528d884e5b2319764f913cdca482e5b6cd545a379a6830b32a5ea8"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 10:19:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) [ 702.062037] IPVS: set_ctl: invalid protocol: 35507 0.0.0.0:15375 [ 702.083377] audit: type=1800 audit(1588501147.837:918): pid=2828 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16532 res=0 10:19:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x490, 0x0, 0x0) [ 702.113154] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 702.126154] attempt to access beyond end of device 10:19:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) [ 702.162670] loop3: rw=2049, want=6434, limit=52 [ 702.185908] attempt to access beyond end of device 10:19:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 10:19:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) [ 702.214340] loop3: rw=0, want=6434, limit=52 [ 702.233762] audit: type=1800 audit(1588501147.987:919): pid=2839 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:19:08 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xa) [ 702.347863] minix_free_inode: bit 1 already cleared [ 702.418836] audit: type=1800 audit(1588501148.177:920): pid=2856 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16527 res=0 [ 702.487319] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 702.519008] attempt to access beyond end of device [ 702.525738] loop3: rw=2049, want=6434, limit=52 [ 702.537608] attempt to access beyond end of device [ 702.544527] loop3: rw=0, want=6434, limit=52 [ 702.551499] audit: type=1800 audit(1588501148.307:921): pid=2860 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 702.617558] minix_free_inode: bit 1 already cleared 10:19:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) 10:19:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x6, 0x0) 10:19:08 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x19) 10:19:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) 10:19:08 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="129adbbb3b7287da8b6d89fd6dd118b56c3e9d1fb16e2f69d0d4a4fe9cc0e51edaa035869803941f1b98b286152be6d8380fef2e19ec31cfe67f9471e14b659b65983aa6f0fd66d11459829cd268277a2bd823f0ba4e069382f4e46fe0011b696d8a531f70038607c78952d9da60652267c9e3ba609529e7124881d10978ccc8df282e74a02d6cbd37d8711e0b62979e17db83b4d3e7d77175c72fab3fd5ca38381aaf1f831f63f8112256123ec391cd5c87c3cc2bd30cc9876d5e1cfcbd426d3dbd9d1afa0c1492fe3d4aa9260d8b93a2d4a8e6", @ANYRESOCT, @ANYRESDEC=r3, @ANYRESHEX=r1, @ANYRES16=0x0, @ANYRES16=r4], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ftruncate(r7, 0x8) 10:19:08 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x414883, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000240)=""/116) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff000) 10:19:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) 10:19:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x44, 0x0) [ 703.035890] audit: type=1800 audit(1588501148.787:922): pid=2884 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16534 res=0 [ 703.089157] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 703.143574] attempt to access beyond end of device 10:19:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x600, 0x0) 10:19:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) [ 703.171188] loop3: rw=2049, want=6434, limit=52 [ 703.223283] attempt to access beyond end of device 10:19:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x4400, 0x0) 10:19:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0xffefffffff7f0900, 0x0, 0xa00000006000000) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000000)=0x20) [ 703.243413] loop3: rw=0, want=6434, limit=52 [ 703.255403] audit: type=1800 audit(1588501149.007:923): pid=2906 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 10:19:09 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x25) 10:19:09 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) 10:19:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x1000000, 0x0) 10:19:09 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) [ 703.377589] minix_free_inode: bit 1 already cleared [ 703.458481] audit: type=1800 audit(1588501149.217:924): pid=2926 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16529 res=0 [ 703.495920] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 703.532810] attempt to access beyond end of device [ 703.548753] loop3: rw=2049, want=6434, limit=52 [ 703.568017] attempt to access beyond end of device [ 703.576196] loop3: rw=0, want=6434, limit=52 [ 703.582060] audit: type=1800 audit(1588501149.337:925): pid=2940 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=1 res=0 [ 703.667466] minix_free_inode: bit 1 already cleared 10:19:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0xf7, 0xb6, 0x2}, 0x10) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 10:19:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x6000000, 0x0) 10:19:09 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x0}, 0x1}, 0x1c) 10:19:09 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x2f) 10:19:09 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x768f, 0x4}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 10:19:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x44000000, 0x0) 10:19:09 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x500}, 0x1c) [ 703.915444] audit: type=1800 audit(1588501149.667:926): pid=2960 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16504 res=0 [ 703.951406] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 703.992554] attempt to access beyond end of device [ 704.011760] loop3: rw=2049, want=6434, limit=52 [ 704.051819] buffer_io_error: 10 callbacks suppressed [ 704.051833] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 704.097982] attempt to access beyond end of device [ 704.108651] loop3: rw=0, want=6434, limit=52 [ 704.115883] Buffer I/O error on dev loop3, logical block 3216, async page read [ 704.197629] minix_free_inode: bit 1 already cleared 10:19:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x6) 10:19:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x17) 10:19:10 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x33) 10:19:10 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r3, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x120, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x2, 0x0}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x401}, @CTA_EXPECT_MASTER={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x42}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x8050}, 0x48000) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r5, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) r7 = getuid() mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,mmap', @ANYRESDEC=r7, @ANYBLOB="bd1a8fb526982803a613f0e6ffeab9cddfae787cf6b48ebc4359c64610653928d55203bd25a5bebf7d8bf285ebd36d19fa26b54f1df776"]) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000280)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x2}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000e68000)={0x2, 0x14, @rand_addr=0x64010100}, 0x10) 10:19:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1b) [ 704.384436] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 704.408528] attempt to access beyond end of device [ 704.425022] loop3: rw=2049, want=6434, limit=52 [ 704.453023] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 704.475955] attempt to access beyond end of device [ 704.485482] loop3: rw=0, want=6434, limit=52 [ 704.504625] Buffer I/O error on dev loop3, logical block 3216, async page read [ 704.593512] minix_free_inode: bit 1 already cleared 10:19:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x2047b01c) 10:19:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x44) 10:19:10 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x36) 10:19:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) r1 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={r4, 0x1, 0x6, @remote}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010101, r4}, 0xc) [ 704.821199] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 704.830858] device lo entered promiscuous mode [ 704.838825] attempt to access beyond end of device [ 704.843781] loop3: rw=2049, want=6434, limit=52 [ 704.848583] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 704.859443] attempt to access beyond end of device [ 704.869181] loop3: rw=0, want=6434, limit=52 [ 704.878511] Buffer I/O error on dev loop3, logical block 3216, async page read 10:19:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) 10:19:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='wlan1\x00', r1}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) sendmmsg(r3, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="67ffcb0b70a95c0000000000000000ac00000000", @ANYRES16=r6, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe800000000000000000bb08000a0000000000060002000100000014001f00"/81], 0x5c}}, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 10:19:10 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) socket$inet_udplite(0x2, 0x2, 0x88) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 10:19:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x600) 10:19:10 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x58) [ 704.967214] minix_free_inode: bit 1 already cleared 10:19:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x4400) 10:19:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000000)=0x9, 0x4) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) 10:19:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x1000000) [ 705.113905] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 705.152708] attempt to access beyond end of device [ 705.180948] loop3: rw=2049, want=6434, limit=52 10:19:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/157) 10:19:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x6000000) [ 705.205444] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 705.234261] attempt to access beyond end of device [ 705.244901] loop3: rw=0, want=6434, limit=52 [ 705.253485] Buffer I/O error on dev loop3, logical block 3216, async page read 10:19:11 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x60) [ 705.377223] minix_free_inode: bit 1 already cleared [ 705.479935] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 705.503514] attempt to access beyond end of device [ 705.508585] loop3: rw=2049, want=6434, limit=52 [ 705.513273] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 705.525629] attempt to access beyond end of device [ 705.532730] loop3: rw=0, want=6434, limit=52 [ 705.538639] Buffer I/O error on dev loop3, logical block 3216, async page read [ 705.573787] device lo left promiscuous mode [ 705.597459] minix_free_inode: bit 1 already cleared [ 705.658102] device lo entered promiscuous mode [ 705.668556] device lo left promiscuous mode 10:19:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x44000000) 10:19:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r3, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={0x0, 0xffc0}, 0x8) recvfrom$llc(r3, &(0x7f0000000140)=""/195, 0xc3, 0x0, &(0x7f0000000040)={0x1a, 0x12, 0x7, 0x1, 0x4, 0x7f, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000000)) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@mcast1, 0x5, 0x0, 0x0, 0xe, 0x83, 0x3}, 0x20) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) [ 705.861656] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 10:19:11 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x63) [ 705.994806] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 706.013275] attempt to access beyond end of device [ 706.030405] loop3: rw=2049, want=6434, limit=52 [ 706.036648] attempt to access beyond end of device [ 706.044089] loop3: rw=0, want=6434, limit=52 [ 706.107584] minix_free_inode: bit 1 already cleared 10:19:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x14, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="02000000", @ANYRES16=r2, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe8000000000000000000000000000bb08000a0000000000060002000100000014001f0000000000000000000000000000000000ba9c59c1b05a155556e8a6ad56834f8ec6760816239607fa950d298c07fa6e2ad769c271bf740a04f652c8128420f87a5b226f0882e1267c339e1265e7f3"], 0x5c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)={0x3, 'veth0_to_bridge\x00', {0x100}, 0x3}) r3 = getpid() r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r4, &(0x7f00000003c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg(r4, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) bind$pptp(r4, &(0x7f0000000180)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000000c0)=0x28) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x400803, 0x0) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000340)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r8, 0x100, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) 10:19:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x7ffffffff000) 10:19:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0xffefffffff7f0900, 0x0, 0xa00000006000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0xffefffffff7f0900, 0x0, 0xa00000006000000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0xffefffffff7f0900, 0x0, 0xa00000006000000) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000001040)) r11 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r12, 0x0, 0x0, 0x0, 0x0, 0x0) 10:19:12 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xc00) 10:19:12 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "31c08bd1080d01dca7127b5a7ccd94f851265c99"}, 0x15, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xfffffffffffffe92, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x44800) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 10:19:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0xf0ffffff7f0000) 10:19:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x100000000000000) [ 706.381401] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 706.418932] attempt to access beyond end of device [ 706.449824] loop3: rw=2049, want=6434, limit=52 [ 706.469525] attempt to access beyond end of device [ 706.477825] loop3: rw=2049, want=6436, limit=52 [ 706.486083] attempt to access beyond end of device 10:19:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x600000000000000) [ 706.509565] loop3: rw=2049, want=6438, limit=52 [ 706.534204] attempt to access beyond end of device [ 706.540262] loop3: rw=0, want=6434, limit=52 [ 706.544998] attempt to access beyond end of device [ 706.550757] loop3: rw=0, want=6436, limit=52 [ 706.555493] attempt to access beyond end of device [ 706.565955] loop3: rw=0, want=6438, limit=52 10:19:12 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x4c343, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x8800000) 10:19:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x4400000000000000) [ 706.599576] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 706.647959] minix_free_inode: bit 1 already cleared 10:19:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) sendmmsg(r0, &(0x7f0000002b80)=[{{&(0x7f0000000000)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="63cc62dfcbc7a0cfdb1fecd17ea92a3d6d29714cfb5b3411ef31207b8b15fe94edb058501f8e", 0x26}, {&(0x7f00000000c0)="f2dccd7140adc81d44880f7756933681d6d6de6a091299f226abb883ee8ef5c3239c603152162c92ec9a9edc7a2eec2b63bdaf875b27ed7765f2b926259290009db687928cdaa565bad86365a58d48cc5b3c4c18f45c9d6d8992412df935c6697a", 0x61}, {&(0x7f0000000140)="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", 0xfc}], 0x3}}, {{&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @loopback}, 0x4, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)="232fb709b4dc1d823db7a050c40dcf338ecdc37dec430da28b5876a178a4ab05373d9a3ec2af3d18704f247511ac754a2f8bec011c73eb6a862ae7999c78decd95962f22a86311e7992cce104c22c3cb1e6856fbb87559007619b97fe3f318b51bed00b5890f42998b4176e244", 0x6d}, {&(0x7f0000000380)="65b1be5ede3b1a97b169dc27e6e2", 0xe}, {&(0x7f00000003c0)="71ec229def5188ff67d33cbdf4648bbfbe60731e9bb13843c4273aa43f19568394efbcbc93f2c9aa954cdf85b661decf9fbc7ffb8404fb9e2757cd6d30a6988ea6e7be7971dc0acb0b6860c8523cbcdd3cf391e624a1fc77f7f29fb70306754600af2c693ec60fa418520d6f338b2cff5a9e1ca4cd2478091d0669a5895b17749034534df48875306db9d526dc53189448c147095192a515ca9245b57ee53399345b0b", 0xa3}, {&(0x7f0000000480)="59ba7fb5140f0137ed32307261a73cfb41147356a1a9b74c49ebfb4106a80286f6b339ad5e98efd8fec55a3d3eceb3cc94ce9609d86dea7927a64a79a0c439253b9b6d2549254788cf3763644a4699d98483ba4e7fa12f72152402690a52d4d9deec82097ece73b403b4bf99c9edbd8e03d56559d131aa1f94d9ebd4c96fbe", 0x7f}, {&(0x7f0000000500)="994da1dc791b46c54ca6", 0xa}], 0x5, &(0x7f00000005c0)=[{0xb8, 0x109, 0x8, "6f57169dea16cfd3f5129a311c0ccc8882162ea3892046b0f27f8cc590cdeebfe88ffccb44f51cc2b4cff5e3ca6f5a393791bfe0a645edaea25d3b3b0b6e376249af7a0234cdeda1a59a1d0d9ff11ca6ca211a730edc337edffc495cba929a00c14ccef30c385749ebec6451c41a4d8f4f8e1dc2fa7b828e992efcc1f3837ea2fd59111ce9bf14c7315285f362234f614f511dd2d06fab98899be725bef75cfb2e7d"}, {0xe0, 0x115, 0x9, "e63c1e07f469c866e4d2dbb093120e9eedd14dc00dd2a126fa83b149d3a730602b1779a2a11003867e3e3e6008d41ba5f7ac40499ae3e2412cffa5282fa375a5f3f4753dfc30e68c3fc9bfb53ac3183095f52f3733c602304537287744698a459bbecc17542eb5f4d804ae813dd23a8113d0b670fa6f39cc92daa84618c5bc49b9f458ad7e49021a66f62d5f86dc0a9a22e4c6ddce264e7c73990f9843ee3dc1f26c4c0601062f758739c88bc9fd688a3e4689aa4cb2e093e5ebe7ff89475c11aef64f783db4ddb417ad35ce40"}], 0x198}}, {{&(0x7f0000000780)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000800)="37bc2b7dbe3bc3f284a46bc659e5db0643710e01110ff044f0c46d42ac924bd5deb49b4ccc70b73c4f7412ae642c962f48261e9f25bf80f080344963f5c5c6bd2949da187761649ee316ac890434f299b632b495d0aa06a4d721b0f4f99374be397ce38f6c1b1b8875d1abc664045b22600c3e781ec5679a981049c91ebbac3193e82c750ed3f119be3908c9b2e29b03475108f5c8d36a2f9338278921dd7eac7196edf3d9883299531372d9a51737f8d47ee7133e2a8c2a745d430b5f9c014044e80780a40fbc5e17a3198c570dbe9e642e85970ace0cc17b5569b32c9bd97e150cecdf", 0xe4}, {&(0x7f0000000900)="07397f22aa346fea9e35c0568baf04c7254fdf61ccee6f2d84e12747da2ce1fa2d779eab83d6afddb802455b1c996405e40cf8b347fad7c4", 0x38}, {&(0x7f0000000940)="2ba09c12d13d12e3d1a699f57d37392f79b6995cbf4659126f8e31f2c5c52c0a1aa11ec7bcda019c1d0977bcf718431cacfd68d9b1b6bbb5e71b349cbe8e80dbf0abf2cbd98308c83b9d2a04dfe3a407621fad74108551dcb57da214976d31fefa0fc5ded3393cbf0bcd7b688e5362f31344eeb175011c44b7460812eb6f1fec48b536116d4e11d565262e490d2122168ae2691785627fdf523b985b52fb11", 0x9f}, {&(0x7f0000000a00)="43755d522da5a27a34d7e06acb8a83c54dbb64ea140c7b1e3ad84a91d8e642554d7ac87bfa47e8435c73b49f3b5fc6e0374b35810954e619d793f6c6a8cfe33a528cd3ee74cc52fbdc87b21cc1a319b42633e3005dec26e54c6278db218d83a1a644b1b8c59fdd9e2ff9600b34614e22ef144f851bc7fa7edc68365ac3548444462cecbe01e0132f1a5799b00199ff99529bc45850b7852a4195a12fd46e9a6a382bcb355a267b400010a201ff8fdd02bbe310c948760be82f75d9bd9840532e8f65b160fa648a19a93844df944f9e1fcf45ce536d852200934125b79d", 0xdd}, {&(0x7f0000000b00)="a5534f5818c8cdbc7bfaaba2a1d382185f3cb54470c2c95fb9a308469d05a6f7fe859ffb342ba5b73ff37db308507c31a3aa10f663766ec136e0097353f7ff92993ed422241cd52e01d6db91e2e1db0a28b8aa5cb421d00921da1f263628539f696ae488957b2d8c310f8cca4490e32265deb6484bb7d8b297ddc8f704c823bec4e291faa476787df20b00", 0x8b}], 0x5}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000c40)="052c0e2e53093a097876172140ebd8271b89053e712eeec6076c1b1ae033490d523b9d63ad029f47db7ad849742c7b4dc93bf6fc3b5cd91f4ea474308b34ce3e10d82d0e6e7618c4e8f2a02a2f79158c2022ac191ca5deadad12ec11f7ed8a4fac0a7369f2bb0c6ffe71eaaff1bce78b1fd0ef8a8f9abd8b5a68d4493a7465570a0a0effe3025839882c7e927f74e438c0be0dac60f4639886ad4d0024546c0e0af0d7e9a947ccd661aeb10360410f76e34d", 0xb2}, {&(0x7f0000000d00)="ea2ac4336b67673cee430e3ff167dc62dd40ec45fb7e2b96111c9607bc311947ff532ffc413dc00bbcb6eecc6467e7b7c6e7840b9ecf586d2698c231e4edee320c8978", 0x43}, {&(0x7f0000000d80)="888e707928cda6072095b3553d9cd9c34cfb7209392e0073f672af7ceea8b3d6dd0278370ea925ddeb5749c2e58daf3bff5532c01cfbc608f05f898a51649d1df2fd9a5f5e4e26281ce187bf52fa6f31f8d132787ff6d6770bac9d6f78d01d53ee4c1f8d65123beaa798f80e1408716771563d1a760eaeeb86990c13a51f000ae9484358abe4708775b5d0305fba2fd76fb372a0318c64308a40e412fb3a87bb5b943b57f402083419948f6a3d561eeea12fb4ba1d6f05546103528010b6f5fe50232f87dec951d3d76fd72c4f7cd0a873f2e242926757b93598ded8ec8fe7cf0143f64ed2db777ffb7901a25b759946e3b8094256e900900d9ef6b9643714ee4c8910d1a8b9945a5baf69ec92eb9b8b821a27ae4e4af2c2dd4e968931cf7ebb9f57242ab395e2224400948a9b14dfdc297d6be21c963ea10a7789594fafd1401f21ba117764467de0a2f7675249686540b0c17df159f29da09ad393c02f0416558742e57eab0404cb15e7a6e7efe73f94da2547a9ee17795bd586bf1580238b48a49f4a6cb2ab1299893854ee20f8497e15c49021e7da6cc2d28eef7e032f5f62a382b1b009ba739f0059a9fbeedbb2ebd5aac87717ae2251bf723c1850432fe58eb9046628e26f471d0fc27e81a0a4ef0c0bbba6aeb9dc62712d6286b8511ae2e758394c9d75579d37f01761180d794e75282f0e90e824dfefdd9a2909c3996b3824184d47c0ea39556acc1b13e9174f8e9986b4f66e039e46d92d1ffd5302c7705e35ed3fb1ce25bb8f82cf2c4ea951b173ba3170c7fc694453c386dd52a0e7e6345aaf81fe2658d05e0d64ee7f29ad46b97d425b5235b0ec2b6fb0e6ccf1f4b129e94b9761133254ef112f99f35012c7907b137f1ffb777b91d54f9ac5c5410d1233f0cecc03d1a4986c4cc5bc22e17a65bc4632bb9b7122148ab88b3dea47197522df470ff74d4a91e0eaee342831941c01a78681c5203c6fd1791842c9ff0b630fdab20155ba4acd874589b8b48622a83012151369095431b4e17f8b89ed3365b79f16362e9133a18c1db68fc0cd558789c5b1ceff98824aec52e9d4690e8acc1c3117c502b96e591af047f765c81ff24187529c22ed8cd57b831011393b7e15785006c94573757229aaf0a5c6f5a9b3f19d45f8e66603937b12b6fb4fed48ff4696a9efc2756be7af3820233558f0288b43b0110cc54e8ac34579dccbb3be176236d7b5aee419d8bd5b4c714e0b1b5f78343d5a3e61c8de21e0ae5492a836f24411f5a164fb0b052dea2e77ee43adef2eca2f70d77b5afde71c1e05dc439b8cdc218cb09b3d688a66d421f17e9a0997667cd1e5b09221dd510fee0489af74799aadac8b4cda07e357c16158d6a425520cfef22c5c2b4109e20768150059266d15e3bd27acf341a920d4d9c80a9fb1c4869e7a82f9011f22208f4c16f2645006389380246dfff12b45da2d9bc03eb8524433e03916c12cab716b3477dcf38224596969c1e340fd4e54fc23b500464639bc2609e22cb7a0d8f9e1fc0b88ae4de2ff8e129c961e571bf4941f2f4ac415770ed67fcdceb1530510b8fcba8e6d7d0876d2049a4a612f1ba5d62f902b5a4d44cc58a4db54f4be47f8bbae4e39bf6a514cb7e50c7ff9f04bad4e2e58a6441bf124b4d8f20aa94ece8b0a3ccf5ed578089fafc855c8a8d96862d59b47b222fd18ce3773c2608769d83a4ca012e52fc4f3e2fedde4170482320deb033f175140f08c19cda702c76cdd33f2862799e3b65843dbcaf5fd01c3ad55a7c38bf67bbee2b3479e5998cf07cc62ac12c40f2314d4a3ceae71d04392ff0c0fc47447868051aebf144645aa6fc3a55e1cf69bcba1c72cf73435f3608eb3f0fb23e8fdff9cb3366e7dd3ca3871b230d388ada233acfdd8d35d38735f592df5af71bdd9dd36d7a8b15c11351868436ddd69883ed49132a9259c81873d0b6df658af6183ae60be90c86e2688d636ab9eb6e769ccaa6fc594d321e94eca66e8f2e9617544e3725bee92b0cc72838d6c5d644a7d46ee436187cda49a677590fd07ab2e72274efd034b4fc0d51a17339daedbb267fb713a5f4ea6ed22a67a60273386beef1e018f3c2720581b46e0e2a312bc4095e74d43840182ba32a30dcd9ac86269756b47d3e423734ba27058ffabc973ac9fcf91079a0440f73a97015a6ea1839d915e18ba7b5074b35e04f121e30ffb144e24bc001bff5a4a61204c8ec68407b6f39bc01eaec61e239160356a70ba59102342236cb197f4952ac60ce19187099c934d54f7329c5255563993817abd42c5632129e36f6a29d6ca112744ad1e9a7929c7f626d665895fb242b3e97dd92acf8b5505d2b928fa8a526686248ba8c26ce8b012e32bec9eb54ea1efa25fcaeef4e92492c672e9002f46eac99e82007d9495425c665238069b724cba7ba1b60366bce0a45773d54fea0a364a32d974dd6cdec148b507b8f281411665c158e2e2d5f8ae8952dbf30d2cd815372b90f24014e6da033f6839da74c5dbf1db58a50431c74ae34f7294ecc8144a4ac0618065bb5fc2cca9d6d2780258c100da94bb429683c1220b9d792d59ca6386232ece123b2b9f64ac8d35cd024d298d29c1b90b2f50d6511961899014219224e2bf187ee4079e00061ff9364e2efacdd9443d9aceabb661289b014ac42699cb938e8981b70deaa17a912e7f6f1b7480eae90c3b9114f468be53cd9abe5213d166d978fc13cd8bf2b90927a5cd558ad739545f316f0e1c5c10bcff49d629adfa1d980f3baccec65a696e234612645f530d0c5f6905d269d48e0f77d48822b0582871f96565e96a4063e83c447673e16df5d18f5b463888310e4adadadccf0c7d4eb34243581adb20e4416ea4da9e5ba2a389f43cbe5ad51e65c636de75dc3b6befe304d377581648e79bc254c1e32b7ee76e3d33ccb7d0fd2cf87cbf9aa9d222270e1b7931b585505f33bdd249a0ab462935ea0fa82378e3e9ad0ff0ffa55af627f12322809a98aa363cd4d533847991cfac33c51db498a69b0b60f070e530543c7bc8db2b2cc471dd780fb4a8c817bbafa28a9dcfdbc9eabc7aec79e08f6702476ff1c22e2cd513178472f12b1f887d422033891f55f1f7a451febdd094626c69c05efbc4bc62148fac0e549f0fbc2e74dadad49fcdf7aac9d397f910238ba3012ca6d992ccc890aaf499d687cbd599d5019bc9f1bbef3dfa8be2c796dcfa05f99e93fc44f64b6c5cfae890287ebfaedc18a2372d7caca192ce429deac568fa24a40788d101b63c709ecdd250c197b70ca5e76a8f57fd6ebcbdebad5ff72d5e575b4baa118d008604e4ebfd01b10f937b09f0f171df3ed72c5340eaaa5ed7d7d61b76fff58226b84b238784b5da97364eccf654eacb7ee81dca299de97ecf3af34f11ef25e081427c6d83634832e50ae9f7bd5e5fed4fd00e57a5697f0b4e3bea7eb5c5c86f407577f247efc6091d91c4007a2013057eee74a0158613bd436a3d5a9f1890be56f7179d874cebca623cb0a75a2ca77a1e8baf90f6d37b39da4fbdfe5c91e2896f723cf853071485a4768c0d6738ee873587e4788e58299a9c3c734dfeaf967cada8462131b01c21b4335a58cf030a60525b285c43bfb9d578dc47ec544e05f4d71510b61554024a187606840d0c5a3bd5454be87356f4011ac028050b4c53fa986057f90161214165232fe7b792e29abe0ed1dfbec7cd0d2e5d47bd4d480b4d0023199af71a8905017b61cb583559cba08c7f8201fc60f1458719539f6ead00136583df1fea8115fcb7a83083dda7f6ddad3af82d1e0c1b540d180470ee14e43eaf03cc29ee0a2a517871d58d5ee84153292387e2469521ff4483e722fbbaabafb42b4976480b8c4f13177120bdcc2865f103778ef8311c1e9eb7788286596bebfb03bf449f9c92f58af2489b2c6dab732cec287133967c88ebe67dd09565c39a4c0b566aba77b117de5da6d61d04887451fa45de01457f8d1ef3b85393c06d74e10737b0e3ce7603edb721c0f31bfc9ea0e9a8b025778eed19a2ac5ea0d923cc8039e5befa21ca9aefc1c4cefd07423792ec3ac0983e1b465ec1c3e3fc882e061b09ba6fe6458dbc0b76eaf47ac5b7ee93f15b38e2e0f200252068532a361007112a4c5452bef8a9522c01be2fc6aa6fd0236e8d7fe2af735413f4db956ba77ce29125f62ecf1baed01709f6e2cd52bc6a0244b7d34de1012894e7d483e10ff99f4dab0c98202d584e11793c0dc63993cc7f54e760c7dac642622860459d4d6be25f86dbd72a1726079574d7e174a93cfa53a928c3aaebcddf08a80d649bad21eb1e3418383db40d4ceb609ee49be3b20fed21dc7d78bb1c5539fcbf67dc5a7f8bef8191cacca7bb3ec54ee5fb0ddef82371fd0a2c1da9c6c1ec13b3a37d8b6eda993cafc4ab1c047a2709e54c280faab0f9c83de895bd070d3dc073657ab4eb7eb41deaddbaf24ea1b690c6ee5ddb892f774c7929bbbe6903f7ca38fa6e9ccdff4906af3a2cf86806aa2e74ae650c5552f99da24953d8b8d158384d12295e0ac6c924cfaec047d2a33bcb87bd2f2ab64ec150edc33cfd79f68d6452012fce75d505f95f40d94e5d63f3ed1d2e4e829c79214ea86d8966b472a1b1e7e90eda9f17ac9e3e6875c3916f73e606083b7afaa6db8ca4e7f27f243f0c0663ebc6b25840c77c9832eefc633eb49606f6a6efd74573007aad593cf890340e5c59904a97dd596469e70ac7ce34c659b98b90424c83037d7ac2e6ea4572b647d53e66f9dafce3b69ca6be1233b909883f204ff1b75b030b7046413307ebf8f89f4a10c35bb6066482b59aac9b64b414de77edee06e5c3921f305c4810425a0a23875cd1bc90662830479fbfac2025b8be54f60d3db6a7f92c27c819120bb208cf4ed2328c8f38b798c313edc87a952736555461f1f70089bd0dc907a594671fc70fec3646bf0831363351f808efe082df17b91e6167303ddc3f32d9747dcb4717533f5593c6c675a0666532b8e17360e0ad937daac285391e2117e918a4644e7b72afb85d8cccd1bb7403a14f3b4802e8313e821c5a857e50e514f025f8268919e706a08e24f07f989bdbb18b0a0a701b23922317163241c431c1d10a315c279f56d9fb24ab09de54a4d90df2dbe78e2949e8a3f42da50b7947928cf13c6117ecdbce71dcd58f1b43adfa4e80f34b96dc3a2dc3d349d7e3e1fb71b702d560737bbad26d7af567555debd71786d5903f05316555f52e8e71544df065819834d85b3bdf65e7d6f357bed843cd933a149855f75d7de2865775a02d811bfb053a098cb00940e0a514eb66770018a85c252d0d24ea7565be0c825af1f1bafcffb9197c4eb4861daa6ee07809389bdf1eab40f57d5f94a88c6468bef43f1d041019c0720a0c9e4473e755e7de68ea8c546feb0cab9c65061edcba95f7717c97dda09a0418ffb4582254e4be2933725318e543b7676aa219b07298ec22018f232cbbf15a29fd313ac4b571aa3af453417d18632fdad1d4a2ff38aec64624fe4cffe14b79effb40e4bba93d3e6844f5cba6d2680e93caa5b650d50ac99ce9f3dfb401a8ef6c85c5a02dad41caecc23febc82f1aff0bfc1ff07d72e11743d61d8a3d1d667e6c2b4051d8e42b18135f241e8a2073f9aa2c97c0ebe1639dff0b4bb88b32b4e266bbb933e9eada2a3ada1d7fb01918817a9e1026a438341bc3bf115a026649b56af6a706cce73ccafab19edb21b7786d735cf13cc5a49b0741234ba692277a8ec7afec23e044fc2cd2e207979a374f15c76cfd95", 0x1000}], 0x3, &(0x7f0000001dc0)=[{0x108, 0x1, 0x7, "e1e3250f5013ede6f0796b785f80b2bd37601b88603124f103a7f01e5ffd97f7bcfd69df2513ff5155ba70978d9c9feea7a7f4c0fdd392c2230df8a6cc93d5de922e606fd0f322c9e773399402ca7cb772189b6939fa23535869eef22feb50153459caa7d06ea5a44e74fee9251dcb82909ddbd36e71728cbdcd7148efce70d80720cafa5cc786f151c8f972cb47af660f1f6ef7e45e73aaa0516080a20d4ec71b096c4f062510984e8b3e04220fef0f298e030bcdccd59bf2dcf2e02395d253e718058ef9951ff3db46e7eb426c7b1abfecd5943d3c8abb6032360ffa13b44dd843c8301c63734b0eb685bb2b7d72ec4492727b55e429ae"}, {0x60, 0x102, 0x8, "a3aa30641c64c98e6ba421815be66e47a13191aa05dfa1ed792591dcce6643550b8a69d83a5d8ce3c69c5e547af78c6589cd48e4073f6e59ca8a57ffa6ac8ceb1bdb16e5b2fbadb0616791d9"}, {0xa8, 0x110, 0x4, "467f51da2f06e37b6bca3aef4ef82356c6ac82d335e753bab84d093d40bc90a73472a1b9db7f47c8b4cb61914419ab67e0ff4b89ab1ea842aca91f02a9230daaf09dc8dabd4436aba7f3db183423c6b7a06bf733e8b1a0186cd259425ad0c2fa8b2d4040ac117c74d4cabcb04d97b898dbdda421fa22a0cf72d896787011d9f61065830551c0d8a65b10c5bac0564feadf7fbd57"}], 0x210}}, {{&(0x7f0000002000)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x7, 0x4}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002080)="801f03cb6c8e27e9243e9e302ef0dbdf4c27dc752491d2eed6eb528d7413886e5ca5b67d7c0f309eff502a57801aaf2570195da83276ed17ed1c2ae4af45cdca75b6e94706f402da6dc612aa2230197f7a96980a2c", 0x55}, {&(0x7f0000002100)="8dd120546aa99d50164cdc0db2f7b15ae1c41adc87539a2173e927feb6cae1d1cdde10b7212d2e503f0ee561a4092e567b6dee70a88c5f64d6dbcf75d8a5171d80fd3b710d18f0f6cbedf51e2a32caa539fca9c3425d151257771f218e5d271e38c6d571367929b0ff75106f8916655d78940d11b09d2a22c02476654d2694f06bfba8f03dd2f33ff6032abf09d84e4c0127e8c6c907aa183300f03b40ff5f", 0x9f}, {&(0x7f00000021c0)="d9ea51e836cfa452b10bd4cc65c85e1d0cbca98449292a1b12e0be4cb1bcbc7826b736bdea71ff3f02225d10d33e69f1aa3e630851c4f81705e8b38c0944524c286e20b1371299bc28142deda16a89d961bc572b9ab2f323a3c754d797c6da8dce5f4dcd617d9cde602675d1c656fa733f67f69b3b4855f5edc987d8888d2947086fe711bc735bd0750bc55229364bc46b7541ef7612587f7d3f2c2e612efc27fada8c83a24416d1887fd64036f05bf242d5bf4b4256e2603374", 0xba}, {&(0x7f0000002280)="d188b56874fd32ab0e36ae3dcca362930f72f37e227b73b9e641a6a9831143f1e5a44148d87341e143ce270575b0d7d1b399ada85210407c164da1f3c887e4959282accedca1e13ccddfeba05c3373e81005ea27ac44944206919fdddf4b147977", 0x61}, {&(0x7f0000002300)="d67859d1e1e1c2f7f085e047d45d8bebff4eae2dfb4bf54f68a5626294170f4cbb041dc8a814e2f684a60b0ffc023231c19dcb45f0751852f057e65daf4eb87fd939b4801bd2f7ef10557cc0bc0578bdfd5029acada5785484b847bf9d424d00b37b7e0997ed0c736ad9b77687dd549f898a97372d8cb878a881b36a165376a91bba0eb9ebc942c783332e08cef40fd11d0ba5031ddbaedbb424abdfc4c27b47ac7e5c9c58a2be6de56b215e4395a392efc798531ef75dadf396843361ee82aaa050aac4f9f527084e8d40996d5293b2f165d2a6b71f9d9cdd1ac8f452b1d41eb56b0037480343c01dfa5189cf8f2c6f1139", 0xf2}, {&(0x7f0000002400)="44ff0c2fb95b9221d7da5c5e256e45427ca20f67f5b072f10b52e5a274a37b91065727451619d0b2d0057c28d242ee24ff76b45941f3ae63bbffd616c3ae36fba8041e3683056fe1b7db1d83aad49ae942272326bcbcaebbcc5a74285d82ddaa36e4d7ad5d07387c342c30f3ba3a9aabeca89ab2948b86288eed8b64bccd4302aef3f527f7e2fcc8d406c3c03ac1aad1e9b5cda6", 0x94}], 0x6, &(0x7f0000002540)=[{0x20, 0x104, 0x18000, "1b5acbf5e25bc36f1eea"}, {0x18, 0x0, 0x0, "da37"}], 0x38}}, {{&(0x7f0000002580)=@isdn={0x22, 0x1, 0x3, 0xc1, 0x6}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002600)="46c0bb7f2659f7eb8fc6bd1d797266347cee6e96944d6d3e740817bd89a71d731d51b85045f3a9de01ad5719a837b730215b221285f7a06d43e5c5294281cbaf914d6a041455fdd7d1df5486e9262620abe7961732542b58e455e74ab90bcdd81ce8cd695f78578c684e593cc5f23e3b3ed6", 0x72}, {&(0x7f0000002680)="8adc77f7ff7b16e7496152aa6c1674cb", 0x10}], 0x2, &(0x7f0000002700)=[{0x40, 0x4, 0x80, "d45d8da4dc95081f2b7ea1e736e6a03c113f14f6209d38dba89081857557e5a5779b3206dffefb06c8608b7fb220"}, {0x80, 0x3a, 0x6, "8e6cb4c67094a4ff7d5f981b87fb5b18c0bf489619c91750bf8d984587442737b55ebc525093fec2fa61ad337b8cdb2a269d1139b198686715ea25b0d70ef5cf74b1fa48b2865f40f69a6285bd63a6656a78e47725f26c655c421efc157bcb8ca0273b9d06fad8161d2351809fb7b517"}, {0xc0, 0x29, 0xb35, "5886bef54e8196d84aadf174b3614454e9aae445902b8b0d06e855e8e7a0113a7e3e7e2ec28da0965c7f8610388dc7a6155d809b152feb94c015f3791bad3c8dee4f273cadcf5d3057cf9888fc20ad273f457461a691fec06a179573eb765e56ac9b8448fdc0900b355c55955233c35adc9c0ef26c3eb8811e5c04dcfba1a1e897d9188a72342669f5470e6361e13aae9ec62199ecef9271a7797cacdb67d098bc278b0c7afae3410571b1035419"}, {0x108, 0x3a, 0x7, "e9f144a9fc50939eea615fbb0b9b4d350dab0d43a4c8c229cfba07bcf5c2f3695c516658681927158454e50816212d41b6e22c21d74c7dafcae8e0e08f558a600bda1700072955c891e9ec1246f32aef62bc23f044d4b17eaa85143eb351bc1425f1a2d0dbe9361823b998424897ae05c9063859618072e85c2f70e5b93e9436b63294afda2b0dfeeddffbf414d742e1a30a681740a1444cff0e8c24e3197df5b833e4b6c4599370cd45fb79487975e46d90d344c7b625f311b14b1accd1289b90d428b9f46a667886e96cb9cf6868bd568667b816b3766179a25f0f52f2164e7d9e97142d3e5df80f1b1b5351ded54dd93a7f"}, {0xe0, 0x103, 0x9, "e24282f1174b3abca6f2db431df7a1573aa3fd8f1bf824a7f7565bff75e111dbf5d7f35a9a9ee0af50385195848077509ac171c9f46cee53c331e7d5cdebfed12e72edcf4f27b466fe84330d873a31748d1785c2b80e938de3547c66a2239eaaae5b40da876dfafe3aa42630a4cdc7c51291b2af88765f33814fa0910831be34b4fd0a47e8034dd52d0d120f97cc76df9154b15a07b233678f43f466f476ffb19cc7b743d8d01770c7603a9a80a5656e910af1a91978399f6f3ed901f8d0097f30cf5dcb0ea10ec206"}, {0xe0, 0x11, 0x2f9, "ce52ea028eb5d5007ae45be1d904c2f4a666dab20f49ff8f67228a9e4a9d4cbe5473b2be9ea01adbbd687349395098d6f00226254fcb3e6e662637d8d424daa51658b5e44781d678bfb43e7ff930bde0bb810fe1cd349b4a0723043a543bd44d7e7671d23d8416f21ec9176e4c30c405aa7a4f3e62d0b02d0443e07541e96e95ca98b11fa539868f2ffa81007706610ae320823eddc55e2e3af8e368ece7cb11c2c16373e03760c38ab97ced0315e0de785b97d4f5761048e062f6b3ec7409da9a52dcd8faf0785ccb69f25f8c7107"}], 0x448}}], 0x6, 0x4004000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000200)={r6}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000002d00)={r6, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7fff, 0x6}, &(0x7f0000002dc0)=0x90) [ 706.732704] kauditd_printk_skb: 13 callbacks suppressed [ 706.732715] audit: type=1800 audit(1588501152.487:940): pid=3221 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16561 res=0 10:19:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 706.779138] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 706.820891] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 706.828908] PGD 91170067 P4D 91170067 PUD a133d067 PMD 0 [ 706.834478] Oops: 0002 [#1] PREEMPT SMP KASAN [ 706.838983] CPU: 0 PID: 3221 Comm: syz-executor.3 Not tainted 4.19.120-syzkaller #0 [ 706.846809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 706.856186] RIP: 0010:get_block+0x76c/0x1300 [ 706.860605] Code: 00 00 49 8b bc 24 28 01 00 00 b9 08 00 00 00 e8 7a 40 bc ff 31 d2 be 74 01 00 00 48 c7 c7 20 4b 9c 87 49 89 c4 e8 14 43 4e ff 49 0f ba 2c 24 02 40 0f 92 c6 31 ff 40 88 74 24 78 e8 0d f1 6e [ 706.879598] RSP: 0018:ffff88804fbe7788 EFLAGS: 00010246 [ 706.884975] RAX: 0000000000000007 RBX: ffff88804fbe7888 RCX: 1ffffffff1238a88 [ 706.892250] RDX: 0000000000000000 RSI: ffffffff88d929a0 RDI: ffff8880a4a4e664 [ 706.899613] RBP: ffff88804fbe7920 R08: ffff8880a4a4e640 R09: fffff940001a337f [ 706.906938] R10: fffff940001a337e R11: ffffea0000d19bf7 R12: 0000000000000000 [ 706.914216] R13: dffffc0000000000 R14: ffff88804fbe784c R15: 0000000000000c98 [ 706.921531] FS: 00007f5c88e5a700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 706.929769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 706.935647] CR2: 0000000000000000 CR3: 00000000959d4000 CR4: 00000000001426f0 [ 706.942905] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 706.950165] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 706.957428] Call Trace: [ 706.960023] ? block_to_path.isra.0+0x300/0x300 [ 706.964696] ? create_page_buffers+0x380/0x380 [ 706.969275] ? d_absolute_path+0x137/0x160 [ 706.973564] ? match_held_lock+0x188/0x4f0 [ 706.977793] ? do_raw_spin_lock+0xcb/0x240 [ 706.982032] ? create_empty_buffers+0x52e/0x830 [ 706.986700] ? __add_to_page_cache_locked+0x5b7/0xc50 [ 706.991882] ? do_raw_spin_unlock+0x171/0x260 [ 706.996390] minix_get_block+0xe5/0x110 [ 707.000381] __block_write_begin_int+0x480/0x17a0 [ 707.005215] ? minix_rename+0x8c0/0x8c0 [ 707.009183] ? __breadahead_gfp+0xf0/0xf0 [ 707.013336] ? pagecache_get_page+0x1b3/0xb20 [ 707.017828] ? wait_for_stable_page+0x124/0x3b0 [ 707.022933] ? minix_rename+0x8c0/0x8c0 [ 707.026905] block_write_begin+0x58/0x2e0 [ 707.031057] minix_write_begin+0x35/0xe0 [ 707.035199] generic_perform_write+0x1f8/0x4d0 [ 707.039792] ? __mnt_drop_write+0x50/0x80 [ 707.043949] ? page_endio+0x950/0x950 [ 707.047757] ? current_time+0x140/0x140 [ 707.051725] ? lock_acquire+0x170/0x400 [ 707.055703] __generic_file_write_iter+0x24c/0x610 [ 707.060633] generic_file_write_iter+0x37f/0x729 [ 707.065381] __vfs_write+0x512/0x760 [ 707.069147] ? kernel_read+0x110/0x110 [ 707.073053] ? __lock_is_held+0xad/0x140 [ 707.077138] ? rcu_read_lock_sched_held+0x10a/0x130 [ 707.082165] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 707.086937] vfs_write+0x206/0x550 [ 707.090490] ksys_write+0x12b/0x2a0 [ 707.094120] ? __ia32_sys_read+0xb0/0xb0 [ 707.098186] ? __ia32_sys_clock_settime+0x260/0x260 [ 707.103205] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 707.107966] ? trace_hardirqs_off_caller+0x55/0x210 [ 707.112974] ? do_syscall_64+0x21/0x620 [ 707.116949] do_syscall_64+0xf9/0x620 [ 707.120752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 707.126016] RIP: 0033:0x45c829 [ 707.129198] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 707.148521] RSP: 002b:00007f5c88e59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 707.156212] RAX: ffffffffffffffda RBX: 000000000050bac0 RCX: 000000000045c829 [ 707.163469] RDX: 0000000008800000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 707.170738] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 707.178003] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 707.185376] R13: 0000000000000cbe R14: 00000000004d8310 R15: 00007f5c88e5a6d4 [ 707.192674] Modules linked in: [ 707.195868] CR2: 0000000000000000 [ 707.231976] ---[ end trace 9bfa114ce5b20207 ]--- [ 707.243764] RIP: 0010:get_block+0x76c/0x1300 [ 707.249559] Code: 00 00 49 8b bc 24 28 01 00 00 b9 08 00 00 00 e8 7a 40 bc ff 31 d2 be 74 01 00 00 48 c7 c7 20 4b 9c 87 49 89 c4 e8 14 43 4e ff 49 0f ba 2c 24 02 40 0f 92 c6 31 ff 40 88 74 24 78 e8 0d f1 6e [ 707.269066] RSP: 0018:ffff88804fbe7788 EFLAGS: 00010246 [ 707.274665] RAX: 0000000000000007 RBX: ffff88804fbe7888 RCX: 1ffffffff1238a88 [ 707.282183] RDX: 0000000000000000 RSI: ffffffff88d929a0 RDI: ffff8880a4a4e664 [ 707.289744] RBP: ffff88804fbe7920 R08: ffff8880a4a4e640 R09: fffff940001a337f [ 707.303389] R10: fffff940001a337e R11: ffffea0000d19bf7 R12: 0000000000000000 [ 707.315678] R13: dffffc0000000000 R14: ffff88804fbe784c R15: 0000000000000c98 [ 707.328682] FS: 00007f5c88e5a700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 707.338950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 707.357851] CR2: 000055cc8f99f230 CR3: 00000000959d4000 CR4: 00000000001406f0 [ 707.387375] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 707.412582] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 707.428096] Kernel panic - not syncing: Fatal exception [ 707.434697] Kernel Offset: disabled [ 707.438326] Rebooting in 86400 seconds..