Warning: Permanently added '10.128.0.168' (ECDSA) to the list of known hosts. [ 39.863433] random: sshd: uninitialized urandom read (32 bytes read) 2019/11/05 18:24:57 fuzzer started [ 40.058191] audit: type=1400 audit(1572978297.516:36): avc: denied { map } for pid=6882 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.777797] random: cc1: uninitialized urandom read (8 bytes read) 2019/11/05 18:24:59 dialing manager at 10.128.0.105:45337 2019/11/05 18:24:59 syscalls: 2529 2019/11/05 18:24:59 code coverage: enabled 2019/11/05 18:24:59 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/11/05 18:24:59 extra coverage: extra coverage is not supported by the kernel 2019/11/05 18:24:59 setuid sandbox: enabled 2019/11/05 18:24:59 namespace sandbox: enabled 2019/11/05 18:24:59 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/05 18:24:59 fault injection: enabled 2019/11/05 18:24:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/05 18:24:59 net packet injection: enabled 2019/11/05 18:24:59 net device setup: enabled 2019/11/05 18:24:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/05 18:24:59 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 42.595041] random: crng init done 18:25:42 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv(r0, 0x0, 0x0, 0x6c00) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') readv(r1, &(0x7f0000000100)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x151) readv(r1, &(0x7f0000000580), 0x3c1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) 18:25:42 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) getsockopt$netlink(0xffffffffffffff9c, 0x10e, 0x7, &(0x7f0000002200)=""/4096, &(0x7f0000000000)=0x1000) 18:25:42 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x1000000, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={[], [], @empty}, @in=@loopback}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x2], [], @multicast2}}}]}, 0xa0}}, 0x0) 18:25:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") socket$alg(0x26, 0x5, 0x0) unshare(0x6c060000) socket$packet(0x11, 0x0, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000140)=0x54) 18:25:42 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fd, 0xfffffffc, 0x0, 0x5}, 0x10) sendmmsg(r0, &(0x7f000000a780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000005ac0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) [ 85.149608] audit: type=1400 audit(1572978342.606:37): avc: denied { map } for pid=6882 comm="syz-fuzzer" path="/root/syzkaller-shm602797501" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 85.210276] audit: type=1400 audit(1572978342.626:38): avc: denied { map } for pid=6901 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13760 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 85.570920] IPVS: ftp: loaded support on port[0] = 21 [ 86.388501] chnl_net:caif_netlink_parms(): no params data found [ 86.396710] IPVS: ftp: loaded support on port[0] = 21 [ 86.429169] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.435912] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.442963] device bridge_slave_0 entered promiscuous mode [ 86.449709] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.456351] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.463617] device bridge_slave_1 entered promiscuous mode [ 86.485857] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 86.498347] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 86.519803] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 86.527203] team0: Port device team_slave_0 added [ 86.534621] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 86.541707] team0: Port device team_slave_1 added [ 86.548665] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 86.556047] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 86.564910] IPVS: ftp: loaded support on port[0] = 21 [ 86.622255] device hsr_slave_0 entered promiscuous mode [ 86.660405] device hsr_slave_1 entered promiscuous mode [ 86.732271] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 86.739347] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 86.798911] chnl_net:caif_netlink_parms(): no params data found [ 86.836958] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.844054] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.851029] device bridge_slave_0 entered promiscuous mode [ 86.858473] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.865068] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.872166] device bridge_slave_1 entered promiscuous mode [ 86.879962] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.886412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.893291] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.899627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.933124] IPVS: ftp: loaded support on port[0] = 21 [ 86.947359] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 86.956373] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 86.994158] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 87.001471] team0: Port device team_slave_0 added [ 87.006494] chnl_net:caif_netlink_parms(): no params data found [ 87.023135] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 87.032109] team0: Port device team_slave_1 added [ 87.039427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 87.053813] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 87.122004] device hsr_slave_0 entered promiscuous mode [ 87.170397] device hsr_slave_1 entered promiscuous mode [ 87.223067] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 87.238451] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 87.258167] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.265227] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.272533] device bridge_slave_0 entered promiscuous mode [ 87.279702] IPVS: ftp: loaded support on port[0] = 21 [ 87.299166] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.306125] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.313394] device bridge_slave_1 entered promiscuous mode [ 87.333043] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.339419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.346093] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.352459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.370548] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 87.387069] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 87.409892] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 87.418040] team0: Port device team_slave_0 added [ 87.455926] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 87.463207] team0: Port device team_slave_1 added [ 87.470338] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 87.479349] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 87.489711] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.506845] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.515076] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.521801] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.602026] device hsr_slave_0 entered promiscuous mode [ 87.640345] device hsr_slave_1 entered promiscuous mode [ 87.704093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.719079] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 87.726028] chnl_net:caif_netlink_parms(): no params data found [ 87.743791] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.754111] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 87.761116] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 87.761764] IPVS: ftp: loaded support on port[0] = 21 [ 87.792681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.800440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.809848] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 87.816373] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.829658] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 87.896560] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 87.903923] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.910560] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.917378] device bridge_slave_0 entered promiscuous mode [ 87.924146] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.930544] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.937619] device bridge_slave_1 entered promiscuous mode [ 87.957757] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 87.968990] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 87.978394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.986200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.993900] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.000281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.008704] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 88.018670] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 88.028989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 88.053867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.062379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.070196] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.076547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.083520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.091315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.113551] chnl_net:caif_netlink_parms(): no params data found [ 88.122679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 88.139928] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 88.148607] team0: Port device team_slave_0 added [ 88.158188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.176359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.184327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.192117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.207230] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 88.214664] team0: Port device team_slave_1 added [ 88.221039] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 88.229366] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.245864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.255358] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 88.263071] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 88.322146] device hsr_slave_0 entered promiscuous mode [ 88.360366] device hsr_slave_1 entered promiscuous mode [ 88.421817] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.429466] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.436280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.444394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.452023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.458827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.467767] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 88.476580] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.488338] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.495046] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.503242] device bridge_slave_0 entered promiscuous mode [ 88.509625] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 88.517473] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 88.524717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.533722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.541298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.548082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.557022] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 88.564490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.572151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.579934] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.586791] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.593758] device bridge_slave_1 entered promiscuous mode [ 88.614026] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 88.625769] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 88.632096] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.639529] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 88.646523] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.656780] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 88.670465] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 88.676466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.689261] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 88.707463] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 88.717653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.725551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.733396] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.739733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.746657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.754886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.762487] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.768830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.777423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 88.786193] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 88.793367] team0: Port device team_slave_0 added [ 88.798906] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 88.806203] team0: Port device team_slave_1 added [ 88.832792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.839977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.848126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.855905] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.862324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.872082] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 88.885713] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 88.894250] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 88.902050] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 88.925634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.933764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.941584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.949124] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.955526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.963362] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 88.972144] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 88.979626] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 88.986520] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 89.004155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.012137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.018769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.027539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 89.040932] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 89.056043] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 89.065257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 89.073337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.081182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.088577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.096564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.104239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.111888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.119504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.129208] chnl_net:caif_netlink_parms(): no params data found [ 89.203357] device hsr_slave_0 entered promiscuous mode [ 89.240417] device hsr_slave_1 entered promiscuous mode [ 89.283318] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 89.293807] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 89.303456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.318645] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 89.327811] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 89.336880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.344797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.352897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.362313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.369609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.382243] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 89.402835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 89.410702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.418700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.426537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.434123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.451765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 89.463534] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 89.469537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.478595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.486457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.494519] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.501371] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.508186] device bridge_slave_0 entered promiscuous mode [ 89.516468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 89.531745] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 89.538977] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 89.552845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.561063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.568396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.575763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.583037] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.589371] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.601831] device bridge_slave_1 entered promiscuous mode [ 89.609005] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 89.617165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.635636] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 89.644921] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 89.672243] 8021q: adding VLAN 0 to HW filter on device batadv0 18:25:47 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x6c}, {0x6}]}) [ 89.682474] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 89.705859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.712885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.739187] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 89.759147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.770196] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 89.778778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.794736] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.841530] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.849701] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 89.857695] team0: Port device team_slave_0 added [ 89.870901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.877708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.886575] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 89.892956] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.900412] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 89.910449] team0: Port device team_slave_1 added [ 89.923134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 89.933249] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 89.945973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.953735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.961893] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.968258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.975901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:25:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 89.993574] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 90.006616] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 90.028683] 8021q: adding VLAN 0 to HW filter on device bond0 18:25:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 90.040600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.048383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.064068] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.070476] bridge0: port 2(bridge_slave_1) entered forwarding state 18:25:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 90.090006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 90.108650] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 90.117906] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.130673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.138419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 18:25:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@utf8='utf8=1'}]}) 18:25:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 90.183336] device hsr_slave_0 entered promiscuous mode [ 90.210807] device hsr_slave_1 entered promiscuous mode [ 90.249421] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 90.258148] IPVS: ftp: loaded support on port[0] = 21 [ 90.272074] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 90.282167] FAT-fs (loop5): bogus number of reserved sectors [ 90.288065] FAT-fs (loop5): Can't find a valid FAT filesystem [ 90.295014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.309834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.323818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 90.334990] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.343924] FAT-fs (loop5): bogus number of reserved sectors [ 90.349753] FAT-fs (loop5): Can't find a valid FAT filesystem [ 90.354852] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 90.377217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.385100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.398130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.406162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.417186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.426203] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 90.442219] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 90.448302] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.477437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.485571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.495382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 90.506895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 90.514211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.521788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.529071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.537021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.544626] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.551005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.565609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.579672] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 90.590993] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 90.602107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.612572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.620429] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.626786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.635898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 90.654154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.668911] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 90.686181] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 90.700860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.708115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.721649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 90.728844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.740135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.748748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 90.769376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.776295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.786709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.796647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 90.806004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.818134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.827002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.841066] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.849115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 90.861051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.869181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.879524] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.893444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 90.909911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.918362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.928407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.936584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.948926] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 90.955259] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.963198] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 90.969229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.988358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 91.009242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.019618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.029556] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.035991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.048488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 91.058039] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 91.070749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.078242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.091476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.099278] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.105883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.118240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 91.126977] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 91.139619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.148362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 18:25:48 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 91.162221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.171421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 91.189327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.205676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.215238] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 91.227341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.235716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.257373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.265592] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 91.275226] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 91.284224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.292346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.299793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.307765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.326798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 91.335533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.344895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.355397] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 91.362148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.383022] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 91.395698] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 91.406255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.413709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.424648] 8021q: adding VLAN 0 to HW filter on device batadv0 18:25:49 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) perf_event_open(&(0x7f0000000a00)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x46) 18:25:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x1000000, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={[], [], @empty}, @in=@loopback}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}]}, 0xa0}}, 0x0) [ 91.547072] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 91.594637] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 18:25:49 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x7, 0x80000) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x40000000000000}}, 0x0) 18:25:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:49 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x2, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@loopback}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x4], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 18:25:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:49 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) perf_event_open(&(0x7f0000000a00)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x46) 18:25:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 91.913524] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 18:25:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:49 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:25:49 executing program 0: inotify_init() r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendfile(r0, r1, 0x0, 0x80000001) 18:25:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 92.011760] ldm_validate_privheads(): Disk read failed. [ 92.047087] loop5: p2 < > 18:25:49 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x7, 0x80000) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x40000000000000}}, 0x0) 18:25:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 92.056749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=7069 comm=syz-executor.0 [ 92.067495] loop5: partition table partially beyond EOD, [ 92.104528] truncated 18:25:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 92.136569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=7084 comm=syz-executor.0 [ 92.149998] loop5: p2 size 2 extends beyond EOD, [ 92.157468] truncated 18:25:49 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x7, 0x80000) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x40000000000000}}, 0x0) 18:25:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:49 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x7, 0x80000) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x40000000000000}}, 0x0) 18:25:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) 18:25:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:49 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000000010ffffffff0000000000"], 0x60) 18:25:49 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:50 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x77359400}, {0x40000000000000}}, 0x0) 18:25:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x151) readv(r0, &(0x7f0000000580), 0x3c1) 18:25:50 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 92.576754] SELinux: failed to load policy 18:25:50 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x77359400}, {0x40000000000000}}, 0x0) 18:25:50 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000000010ffffffff0000000000"], 0x60) [ 92.661422] ldm_validate_privheads(): Disk read failed. [ 92.667103] loop5: p2 < > [ 92.692627] loop5: partition table partially beyond EOD, truncated [ 92.726659] loop5: p2 size 2 extends beyond EOD, truncated [ 92.743242] SELinux: failed to load policy 18:25:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000500)=""/276) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:50 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:50 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000002c0)=']\x9dL\x00', 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:25:50 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x77359400}, {0x40000000000000}}, 0x0) 18:25:50 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000000010ffffffff0000000000"], 0x60) 18:25:50 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 92.906125] SELinux: failed to load policy 18:25:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000500)=""/276) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:50 executing program 4: r0 = timerfd_create(0x7, 0x80000) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x40000000000000}}, 0x0) 18:25:50 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000000010ffffffff0000000000"], 0x60) 18:25:50 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000002c0)=']\x9dL\x00', 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:25:50 executing program 4: r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x40000000000000}}, 0x0) [ 93.069495] SELinux: failed to load policy [ 93.090679] ldm_validate_privheads(): Disk read failed. [ 93.103168] loop5: p2 < > [ 93.151702] loop5: partition table partially beyond EOD, truncated [ 93.167792] loop5: p2 size 2 extends beyond EOD, truncated 18:25:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:50 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000500)=""/276) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:50 executing program 4: r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x40000000000000}}, 0x0) 18:25:50 executing program 3: write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000000010ffffffff0000000000"], 0x60) 18:25:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:50 executing program 3: write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000000010ffffffff0000000000"], 0x60) 18:25:50 executing program 4: r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x40000000000000}}, 0x0) 18:25:50 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:50 executing program 3: write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000000010ffffffff0000000000"], 0x60) [ 93.437847] ldm_validate_privheads(): Disk read failed. [ 93.451802] loop5: p2 < > [ 93.468426] loop5: partition table partially beyond EOD, truncated [ 93.525130] loop5: p2 size 2 extends beyond EOD, truncated 18:25:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r0, r1) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:51 executing program 4: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x40000000000000}}, 0x0) 18:25:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:51 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000000010ffffffff0000000000"], 0x60) 18:25:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:51 executing program 4: timerfd_create(0x7, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x77359400}, {0x40000000000000}}, 0x0) 18:25:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:51 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000000010ffffffff0000000000"], 0x60) 18:25:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:51 executing program 4: timerfd_create(0x7, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x77359400}, {0x40000000000000}}, 0x0) [ 93.870978] ldm_validate_privheads(): Disk read failed. [ 93.879941] loop5: p2 < > [ 93.899603] loop5: partition table partially beyond EOD, truncated [ 93.943865] loop5: p2 size 2 extends beyond EOD, truncated 18:25:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:51 executing program 4: timerfd_create(0x7, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x77359400}, {0x40000000000000}}, 0x0) 18:25:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r0, r1) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:51 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000000010ffffffff0000000000"], 0x60) 18:25:51 executing program 3: openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000000010ffffffff0000000000"], 0x60) 18:25:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:51 executing program 4: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, 0x0, 0x0) 18:25:51 executing program 3: openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000000010ffffffff0000000000"], 0x60) 18:25:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:51 executing program 4: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, 0x0, 0x0) 18:25:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 94.291440] ldm_validate_privheads(): Disk read failed. [ 94.313908] loop5: p2 < > [ 94.323818] loop5: partition table partially beyond EOD, truncated [ 94.359866] loop5: p2 size 2 extends beyond EOD, truncated 18:25:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r0, r1) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:51 executing program 3: openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000000010ffffffff0000000000"], 0x60) 18:25:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:51 executing program 4: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, 0x0, 0x0) 18:25:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:52 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 18:25:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) 18:25:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) [ 94.603864] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) 18:25:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 94.674692] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 94.695576] CPU: 1 PID: 7361 Comm: syz-executor.3 Not tainted 4.14.151 #0 [ 94.702545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.702578] Call Trace: [ 94.702596] dump_stack+0x138/0x197 [ 94.702613] warn_alloc.cold+0x96/0x1af [ 94.702624] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 94.702638] ? lock_downgrade+0x740/0x740 [ 94.702653] ? avc_has_perm+0x2df/0x4b0 [ 94.702666] __vmalloc_node_range+0x3c3/0x6a0 [ 94.702678] ? trace_hardirqs_on+0x10/0x10 [ 94.735146] vmalloc+0x46/0x50 [ 94.735160] ? sel_write_load+0x1a0/0x1050 [ 94.747046] sel_write_load+0x1a0/0x1050 [ 94.747060] ? save_trace+0x290/0x290 [ 94.747074] ? sel_read_bool+0x240/0x240 [ 94.755350] ? trace_hardirqs_on+0x10/0x10 [ 94.755361] ? save_trace+0x290/0x290 [ 94.755383] __vfs_write+0x105/0x6b0 [ 94.763201] ? __lock_is_held+0xb6/0x140 [ 94.763210] ? sel_read_bool+0x240/0x240 [ 94.763219] ? kernel_read+0x120/0x120 [ 94.763228] ? __lock_is_held+0xb6/0x140 [ 94.763238] ? check_preemption_disabled+0x3c/0x250 [ 94.763253] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 94.763270] ? rcu_read_lock_sched_held+0x110/0x130 [ 94.763280] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 94.763288] ? __sb_start_write+0x153/0x2f0 [ 94.763300] vfs_write+0x198/0x500 [ 94.775785] SyS_write+0xfd/0x230 [ 94.775798] ? SyS_read+0x230/0x230 [ 94.783887] ? do_syscall_64+0x53/0x640 [ 94.783897] ? SyS_read+0x230/0x230 [ 94.783906] do_syscall_64+0x1e8/0x640 [ 94.783914] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 94.783930] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 94.783939] RIP: 0033:0x45a219 [ 94.783944] RSP: 002b:00007f14aa4c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.783953] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 94.783957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 94.783962] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 94.783968] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14aa4c86d4 [ 94.783973] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff [ 94.921149] ldm_validate_privheads(): Disk read failed. [ 94.926852] loop5: p2 < > [ 94.927668] Mem-Info: [ 94.929798] loop5: partition table partially beyond EOD, truncated [ 94.936671] active_anon:67203 inactive_anon:195 isolated_anon:0 [ 94.936671] active_file:8023 inactive_file:10783 isolated_file:0 [ 94.936671] unevictable:0 dirty:634 writeback:0 unstable:0 [ 94.936671] slab_reclaimable:10356 slab_unreclaimable:92974 [ 94.936671] mapped:59030 shmem:243 pagetables:874 bounce:0 [ 94.936671] free:1344654 free_pcp:322 free_cma:0 [ 94.974612] loop5: p2 size 2 extends beyond EOD, truncated 18:25:52 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0800a1695e1dcfe87b1071") openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x7f, 0x3, 0x9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x3c) 18:25:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) [ 94.995217] Node 0 active_anon:266548kB inactive_anon:780kB active_file:31956kB inactive_file:43132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236124kB dirty:2536kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 120832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 18:25:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 95.159013] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 95.196429] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.267251] lowmem_reserve[]: 0 2580 2580 2580 [ 95.272061] Node 0 DMA32 free:1576104kB min:36468kB low:45584kB high:54700kB active_anon:266732kB inactive_anon:768kB active_file:31952kB inactive_file:43204kB unevictable:0kB writepending:2612kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:7136kB pagetables:3376kB bounce:0kB free_pcp:824kB local_pcp:404kB free_cma:0kB [ 95.303812] lowmem_reserve[]: 0 0 0 0 [ 95.307656] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.333228] lowmem_reserve[]: 0 0 0 0 [ 95.337053] Node 1 Normal free:3785320kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.340852] ldm_validate_privheads(): Disk read failed. [ 95.365575] lowmem_reserve[]: 0 0 0 0 [ 95.373915] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 95.383644] loop5: p2 < > [ 95.387686] Node 0 [ 95.390757] loop5: partition table partially beyond EOD, truncated [ 95.394239] DMA32: 4478*4kB (UME) 448*8kB (UME) 302*16kB (UME) 166*32kB (ME) 79*64kB (UME) 15*128kB (UME) 11*256kB (ME) 13*512kB (ME) 7*1024kB (UME) 3*2048kB (UME) 370*4096kB (M) = 1576920kB [ 95.417623] loop5: p2 size 2 extends beyond EOD, truncated [ 95.420916] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 95.437692] Node 1 Normal: 50*4kB (UE) 350*8kB (UME) 269*16kB (UM) 55*32kB (UME) 12*64kB (UME) 8*128kB (UE) 4*256kB (UM) 4*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785320kB [ 95.459392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.469425] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 95.483446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.493780] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 95.505952] 19070 total pagecache pages [ 95.513468] 0 pages in swap cache 18:25:53 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 18:25:53 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 18:25:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:53 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) [ 95.517109] Swap cache stats: add 0, delete 0, find 0/0 [ 95.528059] Free swap = 0kB [ 95.535580] Total swap = 0kB [ 95.538621] 1965979 pages RAM [ 95.541982] 0 pages HighMem/MovableOnly [ 95.545960] 333229 pages reserved [ 95.549412] 0 pages cma reserved 18:25:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:53 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6c48a3", 0x14, 0x33, 0x0, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 18:25:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 95.662712] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 95.729288] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 95.759090] CPU: 0 PID: 7415 Comm: syz-executor.3 Not tainted 4.14.151 #0 [ 95.766074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.766080] Call Trace: 18:25:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 95.766098] dump_stack+0x138/0x197 [ 95.766115] warn_alloc.cold+0x96/0x1af [ 95.766125] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 95.766143] ? lock_downgrade+0x740/0x740 [ 95.766161] ? avc_has_perm+0x2df/0x4b0 [ 95.766177] __vmalloc_node_range+0x3c3/0x6a0 [ 95.766190] ? trace_hardirqs_on+0x10/0x10 [ 95.766203] vmalloc+0x46/0x50 [ 95.766213] ? sel_write_load+0x1a0/0x1050 [ 95.766223] sel_write_load+0x1a0/0x1050 [ 95.766232] ? save_trace+0x290/0x290 [ 95.766246] ? sel_read_bool+0x240/0x240 [ 95.766258] ? trace_hardirqs_on+0x10/0x10 [ 95.766266] ? save_trace+0x290/0x290 [ 95.766279] __vfs_write+0x105/0x6b0 [ 95.766286] ? __lock_is_held+0xb6/0x140 [ 95.766293] ? sel_read_bool+0x240/0x240 [ 95.766302] ? kernel_read+0x120/0x120 [ 95.803380] ? __lock_is_held+0xb6/0x140 [ 95.810784] ? check_preemption_disabled+0x3c/0x250 [ 95.810801] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 95.810813] ? rcu_read_lock_sched_held+0x110/0x130 [ 95.810822] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 95.810832] ? __sb_start_write+0x153/0x2f0 18:25:53 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 18:25:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 95.810843] vfs_write+0x198/0x500 [ 95.810855] SyS_write+0xfd/0x230 [ 95.838691] ? SyS_read+0x230/0x230 [ 95.838704] ? do_syscall_64+0x53/0x640 [ 95.838715] ? SyS_read+0x230/0x230 [ 95.838726] do_syscall_64+0x1e8/0x640 [ 95.838737] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 95.870618] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 95.870628] RIP: 0033:0x45a219 [ 95.870634] RSP: 002b:00007f14aa4c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 18:25:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 95.870644] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 95.870648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 95.870653] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 95.870658] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14aa4c86d4 [ 95.870664] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff [ 95.936525] syz-executor.3: 18:25:53 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 95.982368] vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 95.992577] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 95.998069] CPU: 1 PID: 7438 Comm: syz-executor.3 Not tainted 4.14.151 #0 [ 96.004986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.004991] Call Trace: [ 96.005004] dump_stack+0x138/0x197 [ 96.005019] warn_alloc.cold+0x96/0x1af [ 96.005027] ? zone_watermark_ok_safe+0x2b0/0x2b0 18:25:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 96.005039] ? lock_downgrade+0x740/0x740 [ 96.005055] ? avc_has_perm+0x2df/0x4b0 [ 96.005070] __vmalloc_node_range+0x3c3/0x6a0 [ 96.005081] ? trace_hardirqs_on+0x10/0x10 [ 96.005093] vmalloc+0x46/0x50 [ 96.005103] ? sel_write_load+0x1a0/0x1050 [ 96.005114] sel_write_load+0x1a0/0x1050 [ 96.005124] ? save_trace+0x290/0x290 [ 96.005140] ? sel_read_bool+0x240/0x240 [ 96.005150] ? trace_hardirqs_on+0x10/0x10 [ 96.005161] ? save_trace+0x290/0x290 [ 96.005175] __vfs_write+0x105/0x6b0 [ 96.005183] ? __lock_is_held+0xb6/0x140 [ 96.005192] ? sel_read_bool+0x240/0x240 [ 96.005201] ? kernel_read+0x120/0x120 [ 96.005210] ? __lock_is_held+0xb6/0x140 [ 96.005220] ? check_preemption_disabled+0x3c/0x250 [ 96.005233] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 96.005244] ? rcu_read_lock_sched_held+0x110/0x130 [ 96.005253] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 96.005261] ? __sb_start_write+0x153/0x2f0 [ 96.005272] vfs_write+0x198/0x500 [ 96.005284] SyS_write+0xfd/0x230 [ 96.005294] ? SyS_read+0x230/0x230 [ 96.005304] ? do_syscall_64+0x53/0x640 [ 96.005314] ? SyS_read+0x230/0x230 [ 96.005325] do_syscall_64+0x1e8/0x640 [ 96.005332] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 96.005346] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 96.016218] ldm_validate_privheads(): Disk read failed. [ 96.017307] RIP: 0033:0x45a219 [ 96.033319] loop5: p2 < > [ 96.034689] RSP: 002b:00007f14aa4c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.034702] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 96.034707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 96.034714] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 96.034720] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14aa4c86d4 [ 96.034726] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff [ 96.056881] warn_alloc_show_mem: 1 callbacks suppressed [ 96.056884] Mem-Info: [ 96.076267] active_anon:67680 inactive_anon:193 isolated_anon:0 [ 96.076267] active_file:8023 inactive_file:10807 isolated_file:0 [ 96.076267] unevictable:0 dirty:659 writeback:0 unstable:0 [ 96.076267] slab_reclaimable:10500 slab_unreclaimable:94914 [ 96.076267] mapped:59050 shmem:241 pagetables:958 bounce:0 [ 96.076267] free:1342032 free_pcp:187 free_cma:0 [ 96.104483] Node 0 active_anon:270820kB inactive_anon:776kB active_file:31964kB inactive_file:43284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236148kB dirty:2700kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 139264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 96.106791] loop5: partition table partially beyond EOD, [ 96.116290] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 96.129377] Node 0 [ 96.131851] truncated [ 96.136556] DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 96.147382] lowmem_reserve[]: [ 96.153665] 0 [ 96.167416] 2580 [ 96.180320] 2580 [ 96.199527] 2580 [ 96.216416] loop5: p2 size 2 extends beyond EOD, [ 96.218328] Node 0 [ 96.285246] DMA32 free:1566880kB min:36468kB low:45584kB high:54700kB active_anon:270820kB inactive_anon:776kB active_file:31964kB inactive_file:43284kB unevictable:0kB writepending:2700kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:7264kB pagetables:3660kB bounce:0kB free_pcp:1316kB local_pcp:644kB free_cma:0kB [ 96.317012] lowmem_reserve[]: [ 96.356608] 0 [ 96.395631] 0 0 0 [ 96.398686] truncated [ 96.399188] Node 0 [ 96.403627] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 96.429562] lowmem_reserve[]: 0 0 0 0 [ 96.438219] Node 1 Normal free:3785320kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 18:25:54 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 96.495578] lowmem_reserve[]: 0 0 0 0 [ 96.499533] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 96.523994] Node 0 DMA32: 4786*4kB (UME) 379*8kB (ME) 274*16kB (ME) 168*32kB (UME) 78*64kB (ME) 14*128kB (ME) 11*256kB (ME) 14*512kB (UME) 7*1024kB (UME) 3*2048kB (UME) 368*4096kB (M) = 1569344kB 18:25:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:54 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:25:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:54 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 96.557919] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 96.573807] Node 1 Normal: 50*4kB (UE) 350*8kB (UME) 269*16kB (UM) 55*32kB (UME) 12*64kB (UME) 8*128kB (UE) 4*256kB (UM) 4*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785320kB [ 96.599759] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.611850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 96.645294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.669779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 96.713870] 19090 total pagecache pages [ 96.726978] 0 pages in swap cache [ 96.737476] Swap cache stats: add 0, delete 0, find 0/0 [ 96.753640] Free swap = 0kB [ 96.756773] Total swap = 0kB [ 96.759977] 1965979 pages RAM 18:25:54 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[], 0x0) 18:25:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:54 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:25:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:54 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) [ 96.765416] 0 pages HighMem/MovableOnly [ 96.769396] 333229 pages reserved [ 96.773521] 0 pages cma reserved [ 96.798729] ldm_validate_privheads(): Disk read failed. [ 96.804414] loop5: p2 < > [ 96.810754] loop5: partition table partially beyond EOD, truncated [ 96.826239] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 96.852289] loop5: p2 size 2 extends beyond EOD, truncated [ 96.906498] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 96.923927] CPU: 0 PID: 7487 Comm: syz-executor.3 Not tainted 4.14.151 #0 [ 96.930909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.940271] Call Trace: [ 96.942858] dump_stack+0x138/0x197 [ 96.946547] warn_alloc.cold+0x96/0x1af [ 96.950705] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 96.955535] ? lock_downgrade+0x740/0x740 [ 96.959672] ? avc_has_perm+0x2df/0x4b0 [ 96.963648] __vmalloc_node_range+0x3c3/0x6a0 [ 96.968196] ? trace_hardirqs_on+0x10/0x10 [ 96.972428] vmalloc+0x46/0x50 [ 96.975612] ? sel_write_load+0x1a0/0x1050 [ 96.979966] sel_write_load+0x1a0/0x1050 [ 96.984017] ? save_trace+0x290/0x290 [ 96.987821] ? sel_read_bool+0x240/0x240 [ 96.991917] ? trace_hardirqs_on+0x10/0x10 [ 96.996143] ? save_trace+0x290/0x290 [ 96.999930] __vfs_write+0x105/0x6b0 [ 97.003711] ? __lock_is_held+0xb6/0x140 [ 97.007758] ? sel_read_bool+0x240/0x240 [ 97.011815] ? kernel_read+0x120/0x120 [ 97.015690] ? __lock_is_held+0xb6/0x140 [ 97.019740] ? check_preemption_disabled+0x3c/0x250 [ 97.024747] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 97.030207] ? rcu_read_lock_sched_held+0x110/0x130 [ 97.035207] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 97.039982] ? __sb_start_write+0x153/0x2f0 [ 97.044304] vfs_write+0x198/0x500 [ 97.047841] SyS_write+0xfd/0x230 [ 97.051279] ? SyS_read+0x230/0x230 [ 97.054888] ? do_syscall_64+0x53/0x640 [ 97.058842] ? SyS_read+0x230/0x230 [ 97.062452] do_syscall_64+0x1e8/0x640 [ 97.066584] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 97.071425] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 97.076598] RIP: 0033:0x45a219 [ 97.079767] RSP: 002b:00007f14aa4c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.087979] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 97.095233] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 97.102485] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 97.109737] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14aa4c86d4 [ 97.117006] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff [ 97.126697] Mem-Info: [ 97.129145] active_anon:66632 inactive_anon:194 isolated_anon:0 [ 97.129145] active_file:8028 inactive_file:10838 isolated_file:0 [ 97.129145] unevictable:0 dirty:695 writeback:0 unstable:0 [ 97.129145] slab_reclaimable:10636 slab_unreclaimable:96477 [ 97.129145] mapped:59004 shmem:243 pagetables:850 bounce:0 [ 97.129145] free:1341503 free_pcp:310 free_cma:0 [ 97.129161] Node 0 active_anon:266528kB inactive_anon:776kB active_file:31972kB inactive_file:43352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236016kB dirty:2780kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 135168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 97.129192] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 97.196607] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 97.248957] lowmem_reserve[]: 0 2580 2580 2580 [ 97.254246] Node 0 DMA32 free:1565184kB min:36468kB low:45584kB high:54700kB active_anon:266528kB inactive_anon:776kB active_file:31968kB inactive_file:43364kB unevictable:0kB writepending:2792kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:7104kB pagetables:3400kB bounce:0kB free_pcp:1464kB local_pcp:732kB free_cma:0kB [ 97.284437] lowmem_reserve[]: 0 0 0 0 18:25:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:54 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:25:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:54 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:54 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 97.288263] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 97.313700] lowmem_reserve[]: 0 0 0 0 [ 97.317539] Node 1 Normal free:3785320kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 18:25:54 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 97.404943] lowmem_reserve[]: 0 0 0 0 [ 97.418394] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB [ 97.436748] (M) = 15908kB [ 97.444062] Node 0 DMA32: 5213*4kB (UME) 381*8kB (UME) 249*16kB (ME) 165*32kB (UME) 79*64kB (UME) 15*128kB (UME) 11*256kB (ME) 14*512kB (UME) 6*1024kB (ME) 1*2048kB (E) 365*4096kB (M) = 1553356kB [ 97.482447] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 97.493946] ldm_validate_privheads(): Disk read failed. [ 97.504634] loop5: p2 < > [ 97.508201] loop5: partition table partially beyond EOD, truncated [ 97.524765] loop5: p2 size 2 extends beyond EOD, truncated [ 97.530555] Node 1 Normal: 50*4kB (UE) 350*8kB (UME) 269*16kB (UM) 55*32kB (UME) 12*64kB (UME) 8*128kB (UE) 4*256kB (UM) 4*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785320kB [ 97.556314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.575159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 97.584144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.594236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 18:25:55 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[], 0x0) 18:25:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:55 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:55 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 18:25:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) [ 97.603341] 19120 total pagecache pages [ 97.607321] 0 pages in swap cache [ 97.607328] Swap cache stats: add 0, delete 0, find 0/0 [ 97.607332] Free swap = 0kB [ 97.607336] Total swap = 0kB [ 97.607342] 1965979 pages RAM [ 97.607345] 0 pages HighMem/MovableOnly [ 97.607352] 333229 pages reserved [ 97.607355] 0 pages cma reserved 18:25:55 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 18:25:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:55 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 97.713259] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) 18:25:55 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 97.790557] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 97.825776] CPU: 1 PID: 7530 Comm: syz-executor.3 Not tainted 4.14.151 #0 18:25:55 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 97.832746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.842111] Call Trace: [ 97.844713] dump_stack+0x138/0x197 [ 97.848355] warn_alloc.cold+0x96/0x1af [ 97.852343] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 97.857198] ? lock_downgrade+0x740/0x740 [ 97.861363] ? avc_has_perm+0x2df/0x4b0 [ 97.865359] __vmalloc_node_range+0x3c3/0x6a0 [ 97.869875] ? trace_hardirqs_on+0x10/0x10 [ 97.874122] vmalloc+0x46/0x50 [ 97.877328] ? sel_write_load+0x1a0/0x1050 [ 97.881571] sel_write_load+0x1a0/0x1050 [ 97.885645] ? save_trace+0x290/0x290 [ 97.889452] ? sel_read_bool+0x240/0x240 [ 97.893519] ? trace_hardirqs_on+0x10/0x10 [ 97.897757] ? save_trace+0x290/0x290 [ 97.901572] __vfs_write+0x105/0x6b0 [ 97.901581] ? __lock_is_held+0xb6/0x140 [ 97.901592] ? sel_read_bool+0x240/0x240 [ 97.901601] ? kernel_read+0x120/0x120 [ 97.901609] ? __lock_is_held+0xb6/0x140 [ 97.901620] ? check_preemption_disabled+0x3c/0x250 [ 97.901633] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 97.901645] ? rcu_read_lock_sched_held+0x110/0x130 [ 97.901653] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 97.901661] ? __sb_start_write+0x153/0x2f0 [ 97.901672] vfs_write+0x198/0x500 [ 97.901683] SyS_write+0xfd/0x230 [ 97.901693] ? SyS_read+0x230/0x230 [ 97.953514] ? do_syscall_64+0x53/0x640 [ 97.961091] ? SyS_read+0x230/0x230 [ 97.961101] do_syscall_64+0x1e8/0x640 [ 97.961111] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 97.961130] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 97.961138] RIP: 0033:0x45a219 [ 97.961142] RSP: 002b:00007f14aa4c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 18:25:55 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[], 0x0) 18:25:55 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 18:25:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 97.961151] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 97.961156] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 97.961161] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 97.961167] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14aa4c86d4 [ 97.961172] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff [ 98.007100] syz-executor.3: [ 98.025570] vmalloc: allocation failure: 0 bytes 18:25:55 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 98.035278] , mode:0x14000c0(GFP_KERNEL), nodemask= [ 98.048461] (null) [ 98.065405] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 98.080803] ldm_validate_privheads(): Disk read failed. [ 98.087932] loop5: p2 < > [ 98.088324] CPU: 1 PID: 7556 Comm: syz-executor.3 Not tainted 4.14.151 #0 [ 98.097793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.097798] Call Trace: [ 98.097812] dump_stack+0x138/0x197 [ 98.097827] warn_alloc.cold+0x96/0x1af [ 98.109730] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 98.109746] ? lock_downgrade+0x740/0x740 [ 98.113432] loop5: partition table partially beyond EOD, [ 98.117316] ? avc_has_perm+0x2df/0x4b0 [ 98.117333] __vmalloc_node_range+0x3c3/0x6a0 [ 98.126541] ? trace_hardirqs_on+0x10/0x10 [ 98.126556] vmalloc+0x46/0x50 [ 98.136032] ? sel_write_load+0x1a0/0x1050 [ 98.136041] sel_write_load+0x1a0/0x1050 [ 98.136051] ? save_trace+0x290/0x290 [ 98.140584] truncated [ 98.144746] ? sel_read_bool+0x240/0x240 [ 98.144761] ? trace_hardirqs_on+0x10/0x10 [ 98.152157] ? save_trace+0x290/0x290 [ 98.152172] __vfs_write+0x105/0x6b0 [ 98.152180] ? __lock_is_held+0xb6/0x140 [ 98.152190] ? sel_read_bool+0x240/0x240 [ 98.152199] ? kernel_read+0x120/0x120 [ 98.152206] ? __lock_is_held+0xb6/0x140 [ 98.152215] ? check_preemption_disabled+0x3c/0x250 [ 98.152229] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 98.160054] ? rcu_read_lock_sched_held+0x110/0x130 [ 98.160064] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 98.160073] ? __sb_start_write+0x153/0x2f0 [ 98.160084] vfs_write+0x198/0x500 [ 98.160096] SyS_write+0xfd/0x230 [ 98.160110] ? SyS_read+0x230/0x230 [ 98.160119] ? do_syscall_64+0x53/0x640 [ 98.160129] ? SyS_read+0x230/0x230 [ 98.160138] do_syscall_64+0x1e8/0x640 [ 98.160147] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 98.160163] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 98.160170] RIP: 0033:0x45a219 [ 98.160176] RSP: 002b:00007f14aa4c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.160185] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 98.160189] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 98.160194] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 98.160201] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14aa4c86d4 [ 98.160206] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff [ 98.175738] warn_alloc_show_mem: 1 callbacks suppressed [ 98.175741] Mem-Info: [ 98.191954] active_anon:67170 inactive_anon:195 isolated_anon:0 [ 98.191954] active_file:8028 inactive_file:10861 isolated_file:0 [ 98.191954] unevictable:0 dirty:719 writeback:0 unstable:0 [ 98.191954] slab_reclaimable:10790 slab_unreclaimable:98071 [ 98.191954] mapped:59001 shmem:243 pagetables:869 bounce:0 [ 98.191954] free:1339171 free_pcp:238 free_cma:0 [ 98.199922] Node 0 active_anon:268680kB inactive_anon:780kB active_file:31972kB inactive_file:43444kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236004kB dirty:2876kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 137216kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 98.223042] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 98.223048] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.223068] lowmem_reserve[]: 0 2580 2580 2580 [ 98.223087] Node 0 DMA32 free:1557432kB min:36468kB low:45584kB high:54700kB active_anon:266516kB inactive_anon:780kB active_file:31972kB inactive_file:43444kB unevictable:0kB writepending:2876kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:7104kB pagetables:3476kB bounce:0kB free_pcp:1380kB local_pcp:692kB free_cma:0kB [ 98.223115] lowmem_reserve[]: 0 0 0 0 [ 98.223133] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.223154] lowmem_reserve[]: 0 0 0 0 [ 98.230398] loop5: p2 size 2 extends beyond EOD, [ 98.237868] truncated [ 98.242235] Node 1 [ 98.263522] Normal free:3785320kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.278021] lowmem_reserve[]: [ 98.300252] 0 [ 98.342494] 0 [ 98.396684] 0 [ 98.457408] 0 [ 98.499290] Node 0 [ 98.527063] DMA: [ 98.535619] 1*4kB [ 98.539433] (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 98.584763] Node 0 DMA32: 5677*4kB (UM) 379*8kB (ME) 247*16kB (ME) 147*32kB (UME) 78*64kB (ME) 14*128kB (ME) 12*256kB (UME) 14*512kB (UME) 7*1024kB (UME) 3*2048kB (UME) 364*4096kB (M) = 1555676kB [ 98.606209] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 98.617333] Node 1 Normal: 50*4kB (UE) 350*8kB (UME) 269*16kB (UM) 55*32kB (UME) 12*64kB (UME) 8*128kB (UE) 4*256kB (UM) 4*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785320kB [ 98.638113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 18:25:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:56 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:25:56 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) [ 98.647620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 98.656312] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.673133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 18:25:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:56 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 98.698485] 19131 total pagecache pages [ 98.712646] 0 pages in swap cache [ 98.717452] Swap cache stats: add 0, delete 0, find 0/0 [ 98.730049] Free swap = 0kB [ 98.733631] Total swap = 0kB [ 98.739407] 1965979 pages RAM [ 98.750209] 0 pages HighMem/MovableOnly [ 98.771483] 333229 pages reserved [ 98.805635] 0 pages cma reserved 18:25:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:56 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) 18:25:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:56 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:25:56 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:56 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x0, 0x73) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 98.950558] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 98.960705] ldm_validate_privheads(): Disk read failed. [ 98.960856] loop5: p2 < > [ 98.960880] loop5: partition table partially beyond EOD, [ 98.977173] syz-executor.3 cpuset= [ 98.978163] truncated [ 98.984454] syz3 [ 98.998796] loop5: p2 size 2 extends beyond EOD, truncated [ 99.006951] mems_allowed=0-1 [ 99.014230] CPU: 0 PID: 7608 Comm: syz-executor.3 Not tainted 4.14.151 #0 [ 99.021169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.021174] Call Trace: [ 99.021191] dump_stack+0x138/0x197 [ 99.021207] warn_alloc.cold+0x96/0x1af [ 99.021216] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 99.021229] ? lock_downgrade+0x740/0x740 [ 99.021245] ? avc_has_perm+0x2df/0x4b0 [ 99.021262] __vmalloc_node_range+0x3c3/0x6a0 [ 99.021275] ? trace_hardirqs_on+0x10/0x10 [ 99.021287] vmalloc+0x46/0x50 [ 99.021296] ? sel_write_load+0x1a0/0x1050 [ 99.021305] sel_write_load+0x1a0/0x1050 [ 99.021314] ? save_trace+0x290/0x290 [ 99.021331] ? sel_read_bool+0x240/0x240 [ 99.021341] ? trace_hardirqs_on+0x10/0x10 [ 99.021350] ? save_trace+0x290/0x290 [ 99.021363] __vfs_write+0x105/0x6b0 [ 99.040949] ? __lock_is_held+0xb6/0x140 [ 99.040960] ? sel_read_bool+0x240/0x240 [ 99.040972] ? kernel_read+0x120/0x120 [ 99.105605] ? __lock_is_held+0xb6/0x140 [ 99.109646] ? check_preemption_disabled+0x3c/0x250 [ 99.114652] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 99.120080] ? rcu_read_lock_sched_held+0x110/0x130 [ 99.125074] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 99.129813] ? __sb_start_write+0x153/0x2f0 [ 99.134115] vfs_write+0x198/0x500 [ 99.137644] SyS_write+0xfd/0x230 [ 99.141076] ? SyS_read+0x230/0x230 [ 99.144679] ? do_syscall_64+0x53/0x640 [ 99.148630] ? SyS_read+0x230/0x230 [ 99.152236] do_syscall_64+0x1e8/0x640 [ 99.156098] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 99.160935] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 99.166535] RIP: 0033:0x45a219 [ 99.169701] RSP: 002b:00007f14aa4c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 99.177388] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 99.184636] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 99.191885] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 99.199133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14aa4c86d4 [ 99.206380] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff [ 99.219116] Mem-Info: [ 99.225334] active_anon:66635 inactive_anon:194 isolated_anon:0 [ 99.225334] active_file:8029 inactive_file:10884 isolated_file:0 [ 99.225334] unevictable:0 dirty:742 writeback:0 unstable:0 [ 99.225334] slab_reclaimable:10897 slab_unreclaimable:99895 18:25:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:56 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x0, 0x73) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 99.225334] mapped:59004 shmem:244 pagetables:856 bounce:0 [ 99.225334] free:1337771 free_pcp:261 free_cma:0 [ 99.263206] Node 0 active_anon:266436kB inactive_anon:780kB active_file:31976kB inactive_file:43540kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235916kB dirty:2972kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 135168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 99.300399] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 18:25:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:25:56 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 99.383920] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.462153] lowmem_reserve[]: 0 2580 2580 2580 [ 99.473598] Node 0 DMA32 free:1547944kB min:36468kB low:45584kB high:54700kB active_anon:266452kB inactive_anon:780kB active_file:31976kB inactive_file:43540kB unevictable:0kB writepending:2972kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:7168kB pagetables:3400kB bounce:0kB free_pcp:1080kB local_pcp:656kB free_cma:0kB [ 99.539641] lowmem_reserve[]: 0 0 0 0 [ 99.544169] ldm_validate_privheads(): Disk read failed. [ 99.549843] loop5: p2 < > [ 99.553956] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.556975] loop5: partition table partially beyond EOD, [ 99.579534] lowmem_reserve[]: [ 99.583313] truncated [ 99.585465] 0 [ 99.590866] 0 0 0 [ 99.590881] Node 1 Normal free:3785320kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.594879] lowmem_reserve[]: 0 0 0 0 [ 99.626862] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 99.628381] loop5: p2 size 2 extends beyond EOD, [ 99.640874] Node 0 [ 99.644521] truncated [ 99.645785] DMA32: [ 99.650787] 6178*4kB (UME) 406*8kB (UME) 249*16kB (UME) 133*32kB (UME) 78*64kB (ME) 14*128kB (ME) 11*256kB (ME) 14*512kB (UME) 7*1024kB (UME) 2*2048kB (ME) 362*4096kB (M) = 1546984kB [ 99.669664] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 99.681774] Node 1 Normal: 50*4kB (UE) 350*8kB (UME) 269*16kB (UM) 55*32kB (UME) 12*64kB (UME) 8*128kB (UE) 4*256kB (UM) 4*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785320kB [ 99.699417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.708372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 99.717280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.726396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 99.735389] 19156 total pagecache pages 18:25:57 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) 18:25:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:57 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x0, 0x73) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:25:57 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 99.739362] 0 pages in swap cache [ 99.743122] Swap cache stats: add 0, delete 0, find 0/0 [ 99.748476] Free swap = 0kB [ 99.748480] Total swap = 0kB [ 99.748486] 1965979 pages RAM [ 99.748490] 0 pages HighMem/MovableOnly [ 99.748494] 333229 pages reserved [ 99.748498] 0 pages cma reserved 18:25:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) 18:25:57 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 99.800757] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) 18:25:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:57 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 18:25:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) [ 99.866575] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 99.918490] CPU: 1 PID: 7659 Comm: syz-executor.3 Not tainted 4.14.151 #0 [ 99.925447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.925451] Call Trace: [ 99.925468] dump_stack+0x138/0x197 [ 99.925484] warn_alloc.cold+0x96/0x1af [ 99.925495] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 99.925508] ? lock_downgrade+0x740/0x740 [ 99.925524] ? avc_has_perm+0x2df/0x4b0 [ 99.937572] __vmalloc_node_range+0x3c3/0x6a0 [ 99.945143] ? trace_hardirqs_on+0x10/0x10 [ 99.966766] vmalloc+0x46/0x50 [ 99.969976] ? sel_write_load+0x1a0/0x1050 [ 99.974220] sel_write_load+0x1a0/0x1050 [ 99.978282] ? save_trace+0x290/0x290 [ 99.982084] ? sel_read_bool+0x240/0x240 [ 99.986146] ? trace_hardirqs_on+0x10/0x10 [ 99.990385] ? save_trace+0x290/0x290 [ 99.990401] __vfs_write+0x105/0x6b0 [ 99.990409] ? __lock_is_held+0xb6/0x140 [ 99.990419] ? sel_read_bool+0x240/0x240 [ 99.990429] ? kernel_read+0x120/0x120 [ 99.990437] ? __lock_is_held+0xb6/0x140 [ 99.990447] ? check_preemption_disabled+0x3c/0x250 [ 99.990461] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 99.997942] ? rcu_read_lock_sched_held+0x110/0x130 [ 99.997958] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 99.997967] ? __sb_start_write+0x153/0x2f0 [ 99.997979] vfs_write+0x198/0x500 [ 100.038515] SyS_write+0xfd/0x230 [ 100.045482] ? SyS_read+0x230/0x230 [ 100.049113] ? do_syscall_64+0x53/0x640 [ 100.049125] ? SyS_read+0x230/0x230 [ 100.049137] do_syscall_64+0x1e8/0x640 [ 100.049144] ? trace_hardirqs_off_thunk+0x1a/0x1c 18:25:57 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:57 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 18:25:57 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) 18:25:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) 18:25:57 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 100.049160] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 100.056721] RIP: 0033:0x45a219 [ 100.056727] RSP: 002b:00007f14aa4c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.056739] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 100.056745] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 100.056750] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 100.056759] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14aa4c86d4 [ 100.065453] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff 18:25:57 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 100.153082] ldm_validate_privheads(): Disk read failed. [ 100.158673] loop5: p2 < > [ 100.161857] loop5: partition table partially beyond EOD, truncated [ 100.168607] loop5: p2 size 2 extends beyond EOD, truncated 18:25:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) [ 100.200702] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) 18:25:57 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 18:25:57 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 100.247694] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 100.264425] CPU: 0 PID: 7693 Comm: syz-executor.3 Not tainted 4.14.151 #0 [ 100.271409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.280774] Call Trace: [ 100.283374] dump_stack+0x138/0x197 [ 100.287021] warn_alloc.cold+0x96/0x1af [ 100.291003] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 100.295851] ? lock_downgrade+0x740/0x740 [ 100.295870] ? avc_has_perm+0x2df/0x4b0 [ 100.295885] __vmalloc_node_range+0x3c3/0x6a0 [ 100.295896] ? trace_hardirqs_on+0x10/0x10 [ 100.312702] vmalloc+0x46/0x50 [ 100.312716] ? sel_write_load+0x1a0/0x1050 [ 100.312727] sel_write_load+0x1a0/0x1050 [ 100.312742] ? save_trace+0x290/0x290 [ 100.327992] ? sel_read_bool+0x240/0x240 [ 100.332070] ? trace_hardirqs_on+0x10/0x10 [ 100.336314] ? save_trace+0x290/0x290 [ 100.340118] __vfs_write+0x105/0x6b0 [ 100.343831] ? __lock_is_held+0xb6/0x140 [ 100.347891] ? sel_read_bool+0x240/0x240 [ 100.347902] ? kernel_read+0x120/0x120 [ 100.347913] ? __lock_is_held+0xb6/0x140 [ 100.355829] ? check_preemption_disabled+0x3c/0x250 [ 100.355846] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 100.355856] ? rcu_read_lock_sched_held+0x110/0x130 [ 100.355867] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 100.380119] ? __sb_start_write+0x153/0x2f0 [ 100.384455] vfs_write+0x198/0x500 [ 100.388003] SyS_write+0xfd/0x230 [ 100.391460] ? SyS_read+0x230/0x230 [ 100.395086] ? do_syscall_64+0x53/0x640 [ 100.399060] ? SyS_read+0x230/0x230 [ 100.402695] do_syscall_64+0x1e8/0x640 [ 100.406582] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 100.411433] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 100.416619] RIP: 0033:0x45a219 [ 100.419802] RSP: 002b:00007f14aa4c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.427501] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 100.434863] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 100.442122] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 100.450240] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14aa4c86d4 [ 100.457490] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff [ 100.468939] warn_alloc_show_mem: 1 callbacks suppressed [ 100.468942] Mem-Info: [ 100.477120] active_anon:67181 inactive_anon:195 isolated_anon:0 [ 100.477120] active_file:8029 inactive_file:10907 isolated_file:0 [ 100.477120] unevictable:0 dirty:766 writeback:0 unstable:0 [ 100.477120] slab_reclaimable:11067 slab_unreclaimable:102196 [ 100.477120] mapped:59045 shmem:243 pagetables:877 bounce:0 [ 100.477120] free:1334404 free_pcp:329 free_cma:0 [ 100.477391] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) [ 100.510879] Node 0 active_anon:268724kB inactive_anon:780kB active_file:31976kB inactive_file:43628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236180kB dirty:3064kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 137216kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 100.510896] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 18:25:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) [ 100.510901] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 100.510921] lowmem_reserve[]: 0 [ 100.527733] print_req_error: I/O error, dev loop5, sector 0 [ 100.546693] 2580 [ 100.604414] 2580 [ 100.612931] 2580 [ 100.618999] Node 0 DMA32 free:1537588kB min:36468kB low:45584kB high:54700kB active_anon:268724kB inactive_anon:780kB active_file:31976kB inactive_file:43628kB unevictable:0kB writepending:3064kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:7136kB pagetables:3508kB bounce:0kB free_pcp:1372kB local_pcp:680kB free_cma:0kB [ 100.661243] print_req_error: I/O error, dev loop5, sector 0 [ 100.668191] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 100.676085] print_req_error: I/O error, dev loop5, sector 0 [ 100.681931] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 100.689348] print_req_error: I/O error, dev loop5, sector 0 [ 100.695164] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 100.704286] print_req_error: I/O error, dev loop5, sector 0 [ 100.709244] lowmem_reserve[]: [ 100.710070] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 100.713321] print_req_error: I/O error, dev loop5, sector 0 [ 100.724567] 0 [ 100.726371] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 100.726646] print_req_error: I/O error, dev loop5, sector 0 [ 100.730808] 0 [ 100.735570] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 100.750537] print_req_error: I/O error, dev loop5, sector 0 [ 100.756264] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 100.763761] print_req_error: I/O error, dev loop5, sector 0 [ 100.769476] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 100.769610] print_req_error: I/O error, dev loop5, sector 0 [ 100.779174] 0 [ 100.782584] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 100.782745] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 100.799285] 0 [ 100.805893] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 100.831386] lowmem_reserve[]: 0 0 0 0 [ 100.835217] Node 1 Normal free:3785320kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 100.863824] lowmem_reserve[]: 0 0 0 0 [ 100.867669] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB [ 100.867714] (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 100.883093] Node 0 DMA32: 6470*4kB (UME) 379*8kB (UM) 247*16kB (UM) 130*32kB (UM) 69*64kB (ME) 14*128kB (ME) 11*256kB (ME) 14*512kB (UME) 7*1024kB (UME) 3*2048kB (ME) 359*4096kB (M) = 1536992kB [ 100.900905] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 100.916102] Node 1 Normal: 50*4kB (UE) 350*8kB (UME) 269*16kB (UM) 55*32kB (UME) 12*64kB (UME) 8*128kB [ 100.926044] (UE) 4*256kB (UM) 4*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785320kB [ 100.935411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 100.936203] ldm_validate_privheads(): Disk read failed. [ 100.944549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 100.954195] loop5: p2 < > [ 100.958566] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 100.961524] loop5: partition table partially beyond EOD, truncated [ 100.962013] loop5: p2 size 2 extends beyond EOD, truncated [ 100.971435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 100.971440] 19184 total pagecache pages [ 100.971453] 0 pages in swap cache [ 100.971468] Swap cache stats: add 0, delete 0, find 0/0 [ 100.971472] Free swap = 0kB [ 100.971476] Total swap = 0kB 18:25:58 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 18:25:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) 18:25:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:58 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c1100000000000900000700000000"], 0x30) [ 100.971481] 1965979 pages RAM [ 100.971484] 0 pages HighMem/MovableOnly [ 100.971488] 333229 pages reserved [ 100.971491] 0 pages cma reserved 18:25:58 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:58 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 101.080505] SELinux: failed to load policy 18:25:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:58 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c1100000000000900000700000000"], 0x30) 18:25:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) [ 101.156663] SELinux: failed to load policy 18:25:58 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:25:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:58 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c1100000000000900000700000000"], 0x30) 18:25:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) 18:25:58 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 101.322034] SELinux: failed to load policy 18:25:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) [ 101.370597] ldm_validate_privheads(): Disk read failed. [ 101.376311] loop5: p2 < > [ 101.389988] loop5: partition table partially beyond EOD, truncated [ 101.428468] loop5: p2 size 2 extends beyond EOD, truncated 18:25:59 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) 18:25:59 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a5800"/72], 0x48) 18:25:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:59 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:25:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) [ 101.552878] SELinux: failed to load policy 18:25:59 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 18:25:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) 18:25:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:59 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a5800"/72], 0x48) 18:25:59 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 101.696287] SELinux: failed to load policy [ 101.783953] ldm_validate_privheads(): Disk read failed. [ 101.794108] loop5: p2 < > [ 101.804373] loop5: partition table partially beyond EOD, truncated [ 101.820731] loop5: p2 size 2 extends beyond EOD, truncated 18:25:59 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) 18:25:59 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a5800"/72], 0x48) 18:25:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:59 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 18:25:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) 18:25:59 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x8) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) [ 101.897664] SELinux: failed to load policy 18:25:59 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000"], 0x54) 18:25:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 18:25:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) [ 102.026866] SELinux: failed to load policy [ 102.100616] ldm_validate_privheads(): Disk read failed. [ 102.106390] loop5: p2 < > [ 102.121736] loop5: partition table partially beyond EOD, truncated [ 102.163989] loop5: p2 size 2 extends beyond EOD, truncated 18:25:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff52004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) 18:25:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) select(0x6, &(0x7f0000000100), 0x0, &(0x7f0000000200)={0x53}, 0x0) 18:25:59 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000"], 0x54) 18:25:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) 18:25:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 18:25:59 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x1000}) r2 = socket$inet6(0xa, 0x800, 0x20) ioctl(r0, 0x8910, &(0x7f0000000080)="15") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001f40)='./cgroup.net/syz1\'\xde\x96\xd4\x86z>I_B\xd2\xad\x1b\x0fY\x82\xd2\xafI\xd40\xc9\b!E|\xa9\x15\xe1\xbdW\xe4\xb5\xfc\xbd\xe7\xe2\xb0R\x9a\xfdp\xc6s\xf0\x04\xce=r\xeb+\xd1c\xe5\xe8\x13~\xf4\x93\x8eg\xeb}^\xfe\'\xa6T\xd2\xf7)\x98v\x9b\x19W\x9c\xd6\xe0\x94\xc5xs+C\xefE\xd4!\xef\xe2%_\xf6\xccx\xe2iqo,\x86?\x85\xfb\xb4!`@9N\x11\t\xe7\xf7wO,V\xc9\xaf_E3\xc43\xb1NX\x91,\x18\xdf\xad\xb1YB*?\xd5]P\xce\xdfL\x18\xe5\xfc\xd2#i>\xc5\x04\xd2|\x01Spp\x96PL\xd5)\xd3\x0ex\x93\xa1\x85\xd37\xad\x10\x04\xde\a[\xcc\xbd\x83u\x90\xc3\xb5\x9a$A\x159\x05<\x98K\x04\xa68\x8c\xdfa\x03\xfae2\xf2\x81\x84}\x8a\xacM\x10\xe0\x7fs N\x01eRU\xc1\xc5\xbf\x13\x14\x10\xff\x1d\xa9\xf0=\xeb\x109l\x91\x13\xd9\'\xb3\x0e\xf2\xb4\xae\xdbR\xd4L\xa5\xe6\xa1+\x9a\xbd\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xdf\x9c\xbaU\x84\xc8v,\x1e\x916\xbf\x83\xa6\x91K<\xab\xbe\r\x80\xabQ\xc5n|b\xbbJ\xf9\x85z\xa2B\x16i\xb7\\ j2%@[\x87\xaa^-0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:59 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000"], 0x54) 18:25:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000500)=""/276) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x6}], 0x1000000000000006, 0x0) [ 102.343229] audit: type=1400 audit(1572978359.806:39): avc: denied { create } for pid=7873 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 102.365645] SELinux: failed to load policy 18:25:59 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000000010ffffff"], 0x5a) [ 102.446453] audit: type=1400 audit(1572978359.906:40): avc: denied { accept } for pid=7873 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 102.459009] SELinux: failed to load policy [ 102.480644] ldm_validate_privheads(): Disk read failed. [ 102.485496] BUG: unable to handle kernel NULL pointer dereference at (null) [ 102.487061] loop5: p2 < > [ 102.494029] IP: (null) [ 102.494037] PGD 7d7f5067 P4D 7d7f5067 PUD 911bb067 PMD 0 [ 102.494057] Oops: 0010 [#1] PREEMPT SMP KASAN [ 102.494063] Modules linked in: [ 102.494076] CPU: 1 PID: 7875 Comm: syz-executor.1 Not tainted 4.14.151 #0 [ 102.494081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 102.494086] task: ffff888063f7e480 task.stack: ffff888063f80000 [ 102.494089] RIP: 0010: (null) [ 102.494093] RSP: 0018:ffff888063f87d48 EFLAGS: 00010246 18:25:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 18:25:59 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000fc3a010000000000000000000010ffffff"], 0x5a) [ 102.494100] RAX: dffffc0000000000 RBX: ffffffff88151060 RCX: ffffc90008430000 [ 102.494104] RDX: 1ffffffff102a223 RSI: 0000000000000000 RDI: ffff88806e074000 [ 102.494108] RBP: ffff888063f87d68 R08: 0000000000000001 R09: ffff888063f7ed20 [ 102.494117] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88806e074000 [ 102.509052] loop5: partition table partially beyond EOD, [ 102.510693] R13: ffff88806e07400e R14: 000000000000001c R15: 0000000000000002 [ 102.510703] FS: 00007feabe625700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 102.510708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.510713] CR2: 0000000000000000 CR3: 00000000a4e31000 CR4: 00000000001406e0 [ 102.510721] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.510726] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.510733] Call Trace: [ 102.517676] truncated [ 102.520842] inet_autobind+0xae/0x180 [ 102.520852] inet_dgram_connect+0x136/0x1e0 [ 102.520862] SYSC_connect+0x1f6/0x2d0 [ 102.520873] ? SYSC_bind+0x220/0x220 [ 102.535726] kobject: 'loop5' (ffff8880a4b172a0): kobject_uevent_env [ 102.536298] ? nsecs_to_jiffies+0x30/0x30 [ 102.536309] ? SyS_clock_gettime+0xf8/0x180 [ 102.545014] kobject: 'loop5' (ffff8880a4b172a0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 102.545562] SyS_connect+0x24/0x30 [ 102.556278] loop5: p2 size 2 extends beyond EOD, [ 102.560087] ? SyS_accept+0x30/0x30 [ 102.560100] do_syscall_64+0x1e8/0x640 [ 102.560107] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 102.560118] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 102.560128] RIP: 0033:0x45a219 [ 102.567449] truncated [ 102.574652] RSP: 002b:00007feabe624c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 102.574662] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 102.574666] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000006 [ 102.574670] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 102.574675] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feabe6256d4 [ 102.574680] R13: 00000000004c09aa R14: 00000000004d3358 R15: 00000000ffffffff [ 102.574689] Code: Bad RIP value. [ 102.580766] kobject: 'loop5p2' (ffff88806d8e3358): kobject_add_internal: parent: 'loop5', set: 'devices' [ 102.587515] RIP: (null) RSP: ffff888063f87d48 [ 102.587518] CR2: 0000000000000000 [ 102.588433] kobject: 'loop0' (ffff8880a49856e0): kobject_uevent_env [ 102.615170] kobject: 'loop5p2' (ffff88806d8e3358): kobject_uevent_env [ 102.616639] kobject: 'ppp0' (ffff88806d85eaf0): kobject_cleanup, parent (null) [ 102.636753] kobject: 'loop5p2' (ffff88806d8e3358): kobject_uevent_env: uevent_suppress caused the event to drop! [ 102.639024] kobject: 'ppp0' (ffff88806d85eaf0): calling ktype release [ 102.646113] kobject: 'holders' (ffff888093b2b200): kobject_add_internal: parent: 'loop5p2', set: '' [ 102.651330] audit: type=1400 audit(1572978360.066:41): avc: denied { create } for pid=7873 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 102.655396] kobject: 'loop5p2' (ffff88806d8e3358): kobject_uevent_env [ 102.659588] kobject: 'ppp0': free name [ 102.671136] kobject: 'loop5p2' (ffff88806d8e3358): fill_kobj_path: path = '/devices/virtual/block/loop5/loop5p2' [ 102.672672] audit: type=1400 audit(1572978360.066:42): avc: denied { write } for pid=7873 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 102.678342] ---[ end trace 6bf6fa4ef5f4079b ]--- [ 102.684620] kobject: 'loop0' (ffff8880a49856e0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 102.687208] Kernel panic - not syncing: Fatal exception [ 102.690151] audit: type=1400 audit(1572978360.066:43): avc: denied { read } for pid=7873 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 102.696429] Kernel Offset: disabled [ 102.932900] Rebooting in 86400 seconds..