loop5: p2 size 100663296 extends beyond EOD, truncated [ 1572.143979][T21215] loop5: p3 start 9 is beyond EOD, truncated [ 1572.145124][T21215] loop5: p4 size 2 extends beyond EOD, truncated [ 1572.150045][T21215] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1572.166208][T21215] loop5: p6 start 9 is beyond EOD, truncated [ 1572.170050][T21232] FAT-fs (loop4): bogus number of reserved sectors [ 1572.171733][T21232] FAT-fs (loop4): Can't find a valid FAT filesystem 11:48:56 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020985ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1572.195271][T21252] ISOFS: Unable to identify CD-ROM format. [ 1572.270897][T21262] loop5: detected capacity change from 0 to 1 [ 1572.316193][T21262] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1572.317286][T21262] loop5: partition table partially beyond EOD, truncated [ 1572.319595][T21262] loop5: p1 start 10 is beyond EOD, truncated [ 1572.320750][T21262] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1572.324451][T21262] loop5: p3 start 9 is beyond EOD, truncated [ 1572.325660][T21262] loop5: p4 size 2 extends beyond EOD, truncated [ 1572.328381][T21262] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1572.330527][T21262] loop5: p6 start 9 is beyond EOD, truncated [ 1572.394727][T21262] loop5: detected capacity change from 0 to 1 [ 1572.425805][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1572.426961][T32589] loop5: partition table partially beyond EOD, truncated [ 1572.428376][T32589] loop5: p1 start 10 is beyond EOD, truncated [ 1572.430044][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1572.431678][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1572.433103][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1572.435008][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1572.437006][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1572.439311][T21262] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1572.440318][T21262] loop5: partition table partially beyond EOD, truncated [ 1572.441710][T21262] loop5: p1 start 10 is beyond EOD, truncated [ 1572.442680][T21262] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1572.444731][T21262] loop5: p3 start 9 is beyond EOD, truncated [ 1572.445883][T21262] loop5: p4 size 2 extends beyond EOD, truncated [ 1572.447812][T21262] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1572.449533][T21262] loop5: p6 start 9 is beyond EOD, truncated [ 1572.546836][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1572.548591][T32589] loop5: partition table partially beyond EOD, truncated [ 1572.550151][T32589] loop5: p1 start 10 is beyond EOD, truncated [ 1572.551674][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1572.553374][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1572.554745][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1572.556855][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1572.558946][T32589] loop5: p6 start 9 is beyond EOD, truncated 11:48:56 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020a85ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:48:56 executing program 4: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='gid=', @ANYRESOCT=0x0]) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace_dev_match', 0x0, 0x0) preadv(r0, &(0x7f0000001840)=[{&(0x7f0000000200)=""/251, 0xfb}], 0x1, 0x0, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x10501, 0x2) 11:48:56 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfffffe00, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:48:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:48:56 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000240), 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r2) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffffffff268, 0x80000001}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) listen(r2, 0x4e0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="7738adce079b1ec8c76d570c4f8e4401ac9fc70ff3ef6f0e57302c3fa4cb0b34b1a0655169bd56e4804f0806e492e5ec6dc8061a9d6e3183dc6d42fb327510788b", @ANYRESHEX=r5, @ANYBLOB='\x00']) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x22101) 11:48:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1572.855906][T21312] loop5: detected capacity change from 0 to 1 11:48:56 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xffffff7f, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1572.913344][T21312] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1572.914819][T21312] loop5: partition table partially beyond EOD, truncated [ 1572.920073][T21312] loop5: p1 start 10 is beyond EOD, truncated [ 1572.921466][T21312] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1572.930955][T21312] loop5: p3 start 9 is beyond EOD, truncated [ 1572.932422][T21312] loop5: p4 size 2 extends beyond EOD, truncated [ 1572.934882][T21313] ISOFS: Unable to identify CD-ROM format. [ 1572.939249][T21312] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1572.953696][T21312] loop5: p6 start 9 is beyond EOD, truncated [ 1572.976964][T21338] 9pnet: Insufficient options for proto=fd [ 1573.011340][T21313] ISOFS: Unable to identify CD-ROM format. [ 1573.025285][T21339] ISOFS: Unable to identify CD-ROM format. [ 1573.047950][T21312] loop5: detected capacity change from 0 to 1 11:48:57 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xffffff8c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1573.067254][T21346] 9pnet: Insufficient options for proto=fd 11:48:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:48:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) fcntl$setsig(r3, 0xa, 0x32) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003bc0)="240000001200078a1dfffd946f610500070003047d5b00007700000042113ceace75b0ff", 0x24}], 0x1}, 0x0) 11:48:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x7]}, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x4, 0xff, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x281) sendfile(r2, r3, 0x0, 0x1c500) pipe(&(0x7f0000000100)) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) [ 1573.095970][T21312] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1573.098678][T21312] loop5: partition table partially beyond EOD, truncated [ 1573.100696][T21312] loop5: p1 start 10 is beyond EOD, truncated [ 1573.102277][T21312] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1573.110664][T21312] loop5: p3 start 9 is beyond EOD, truncated [ 1573.112534][T21312] loop5: p4 size 2 extends beyond EOD, truncated [ 1573.114280][T21312] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1573.118477][T21312] loop5: p6 start 9 is beyond EOD, truncated 11:48:57 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020f85ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:48:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:48:57 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xffffff97, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:48:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:48:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], 0x0, &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1573.245069][T21387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 11:48:57 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xffffffda, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:48:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], 0x0, &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1573.298562][T21392] loop5: detected capacity change from 0 to 1 11:48:57 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfffffff6, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1573.334293][T21392] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1573.335616][T21392] loop5: partition table partially beyond EOD, truncated [ 1573.337324][T21392] loop5: p1 start 10 is beyond EOD, truncated [ 1573.338516][T21392] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1573.340353][T21392] loop5: p3 start 9 is beyond EOD, truncated [ 1573.341470][T21392] loop5: p4 size 2 extends beyond EOD, truncated [ 1573.343355][T21392] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1573.345038][T21392] loop5: p6 start 9 is beyond EOD, truncated 11:48:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], 0x0, &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:48:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) [ 1573.419769][T21392] loop5: detected capacity change from 0 to 1 [ 1573.456264][T21392] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1573.457497][T21392] loop5: partition table partially beyond EOD, truncated [ 1573.458839][T21392] loop5: p1 start 10 is beyond EOD, truncated [ 1573.459867][T21392] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1573.461659][T21392] loop5: p3 start 9 is beyond EOD, truncated [ 1573.462676][T21392] loop5: p4 size 2 extends beyond EOD, truncated [ 1573.465120][T21392] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1573.467775][T21392] loop5: p6 start 9 is beyond EOD, truncated 11:48:58 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace_dev_match', 0x0, 0x0) preadv(r5, &(0x7f0000001840)=[{&(0x7f0000000200)=""/251, 0xfb}], 0x1, 0x0, 0x0) openat(r5, &(0x7f0000000080)='./file0\x00', 0x100, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x1434, 0xd27a, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup3(r4, r3, 0x0) 11:48:58 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfffffffd, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:48:58 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="021085ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:48:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 11:48:58 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020a85ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:48:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 11:48:58 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020a85ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:48:58 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfffffffe, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1574.122358][T21445] loop5: detected capacity change from 0 to 1 11:48:58 executing program 3 (fault-call:5 fault-nth:0): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1574.152901][T21445] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1574.154091][T21445] loop5: partition table partially beyond EOD, truncated [ 1574.157869][T21445] loop5: p1 start 10 is beyond EOD, truncated [ 1574.159590][T21445] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1574.161719][T21445] loop5: p3 start 9 is beyond EOD, truncated [ 1574.163484][T21445] loop5: p4 size 2 extends beyond EOD, truncated [ 1574.178682][T21445] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1574.181527][T21445] loop5: p6 start 9 is beyond EOD, truncated [ 1574.247940][T21472] FAULT_INJECTION: forcing a failure. [ 1574.247940][T21472] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.252948][T21472] CPU: 0 PID: 21472 Comm: syz-executor.3 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1574.256281][T21472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1574.259640][T21472] Call Trace: [ 1574.260499][T21472] dump_stack+0x137/0x19d [ 1574.262230][T21472] should_fail+0x23c/0x250 [ 1574.262975][T21472] ? __se_sys_mount+0x4e/0x2e0 [ 1574.263936][T21472] __should_failslab+0x81/0x90 [ 1574.266000][T21472] should_failslab+0x5/0x20 [ 1574.267881][T21472] __kmalloc_track_caller+0x64/0x340 [ 1574.269888][T21472] ? strnlen_user+0x137/0x1c0 [ 1574.271138][T21472] strndup_user+0x73/0x120 [ 1574.272485][T21472] __se_sys_mount+0x4e/0x2e0 [ 1574.273757][T21472] ? fput+0x2d/0x130 [ 1574.275095][T21472] ? ksys_write+0x157/0x180 [ 1574.276089][T21472] __x64_sys_mount+0x63/0x70 [ 1574.277989][T21472] do_syscall_64+0x4a/0x90 [ 1574.279423][T21472] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1574.281010][T21472] RIP: 0033:0x4665d9 [ 1574.282094][T21472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1574.286744][T21472] RSP: 002b:00007f2c73c76188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1574.288815][T21472] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1574.290553][T21472] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000020000180 [ 1574.292256][T21472] RBP: 00007f2c73c761d0 R08: 0000000000000000 R09: 0000000000000000 11:48:58 executing program 4: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000003010300fcff00000008004942834000de1150b16370f20b9f925ab56c91eef881102a6f75148047ff070000af966a00000000"], 0x1c}, 0x1, 0x0, 0x0, 0xd16694220c4c9e2e}, 0x4000000) perf_event_open(&(0x7f00000001c0)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/dns_resolver', 0x10800, 0x8) gettid() r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) 11:48:58 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:48:58 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020a85ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1574.294621][T21472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1574.298944][T21472] R13: 00007ffeba04c8cf R14: 00007f2c73c76300 R15: 0000000000022000 11:48:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:48:58 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="021d85ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:48:58 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1574.386871][T21485] PM: suspend entry (deep) [ 1574.401976][T21485] Filesystems sync: 0.014 seconds [ 1574.403094][T21485] Freezing user space processes ... (elapsed 0.002 seconds) done. [ 1574.407169][T21485] OOM killer disabled. [ 1574.407903][T21485] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 1574.410383][T21485] printk: Suspending console(s) (use no_console_suspend to debug) 11:48:59 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x161742, 0xa0) accept4(r0, 0x0, &(0x7f0000000080), 0x80800) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB='./file0/file0'], &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x1001000, 0x0) clone(0x500a4000, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) [ 1574.486036][T21485] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1575.228281][T21485] ACPI: Preparing to enter system sleep state S3 [ 1575.228414][T21485] PM: Saving platform NVS memory [ 1575.228417][T21485] Disabling non-boot CPUs ... [ 1575.232148][T21485] smpboot: CPU 1 is now offline [ 1575.235937][T21485] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 1575.235999][T21485] ACPI: Low-level resume complete [ 1575.236093][T21485] PM: Restoring platform NVS memory [ 1575.236101][T21485] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 1575.247115][T21485] Enabling non-boot CPUs ... [ 1575.247268][T21485] x86: Booting SMP configuration: [ 1575.247332][T21485] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1575.247521][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 1575.248495][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 1575.249954][T21485] CPU1 is up [ 1575.250180][T21485] ACPI: Waking up from system sleep state S3 [ 1575.676320][T21485] OOM killer enabled. [ 1575.677040][T21485] Restarting tasks ... [ 1575.683252][T32589] synth uevent: /devices/virtual/block/loop5: failed to send uevent [ 1575.685610][T32589] block loop5: uevent: failed to send synthetic uevent [ 1575.695381][T21495] ISOFS: Unable to identify CD-ROM format. [ 1575.696950][T21485] done. [ 1575.697560][T21485] PM: Possible incorrect RTC due to pm_trace, please use 'ntpdate' or 'rdate' to reset it. [ 1575.699857][T21485] PM: suspend exit [ 1575.701862][T21492] loop5: detected capacity change from 0 to 1 11:48:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='\n/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1575.714091][T21502] PM: suspend entry (deep) [ 1575.731760][T21502] Filesystems sync: 0.016 seconds [ 1575.736298][T21502] Freezing user space processes ... [ 1575.749728][T21492] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1575.752075][T21492] loop5: partition table partially beyond EOD, truncated [ 1575.753545][T21492] loop5: p1 start 10 is beyond EOD, truncated [ 1575.754484][T21492] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1575.755870][T21492] loop5: p3 start 9 is beyond EOD, truncated [ 1575.756820][T21492] loop5: p4 size 2 extends beyond EOD, truncated [ 1575.758903][T21492] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1575.760604][T21492] loop5: p6 start 9 is beyond EOD, truncated [ 1575.764265][T21502] (elapsed 0.027 seconds) done. [ 1575.765162][T21502] OOM killer disabled. [ 1575.765759][T21502] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 1575.768509][T21502] printk: Suspending console(s) (use no_console_suspend to debug) 11:49:01 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x100000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1575.959523][T21502] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1576.716994][T21502] ACPI: Preparing to enter system sleep state S3 [ 1576.717118][T21502] PM: Saving platform NVS memory [ 1576.717122][T21502] Disabling non-boot CPUs ... [ 1576.720992][T21502] smpboot: CPU 1 is now offline [ 1576.724331][T21502] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 1576.724457][T21502] ACPI: Low-level resume complete [ 1576.724542][T21502] PM: Restoring platform NVS memory [ 1576.724550][T21502] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 1576.735568][T21502] Enabling non-boot CPUs ... [ 1576.735792][T21502] x86: Booting SMP configuration: [ 1576.735796][T21502] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1576.736031][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 1576.737003][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 1576.738541][T21502] CPU1 is up [ 1576.738790][T21502] ACPI: Waking up from system sleep state S3 [ 1577.190973][T21502] OOM killer enabled. 11:49:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="132f66696c6530"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:01 executing program 4: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000003010300fcff00000008004942834000de1150b16370f20b9f925ab56c91eef881102a6f75148047ff070000af966a00000000"], 0x1c}, 0x1, 0x0, 0x0, 0xd16694220c4c9e2e}, 0x4000000) perf_event_open(&(0x7f00000001c0)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/dns_resolver', 0x10800, 0x8) gettid() r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) 11:49:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='\"/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1577.191582][T21502] Restarting tasks ... done. [ 1577.220878][T21502] PM: Possible incorrect RTC due to pm_trace, please use 'ntpdate' or 'rdate' to reset it. [ 1577.230349][T21502] PM: suspend exit 11:49:01 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xedc000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1577.295760][T21535] PM: suspend entry (deep) [ 1577.302676][T21535] Filesystems sync: 0.006 seconds [ 1577.305106][T21535] Freezing user space processes ... (elapsed 0.007 seconds) done. [ 1577.314189][T21535] OOM killer disabled. [ 1577.314748][T21535] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 1577.317558][T21535] printk: Suspending console(s) (use no_console_suspend to debug) [ 1577.483399][T21535] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1578.233815][T21535] ACPI: Preparing to enter system sleep state S3 [ 1578.233909][T21535] PM: Saving platform NVS memory [ 1578.233913][T21535] Disabling non-boot CPUs ... [ 1578.237733][T21535] smpboot: CPU 1 is now offline [ 1578.241314][T21535] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 1578.241405][T21535] ACPI: Low-level resume complete [ 1578.241492][T21535] PM: Restoring platform NVS memory [ 1578.241500][T21535] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 1578.253112][T21535] Enabling non-boot CPUs ... [ 1578.253234][T21535] x86: Booting SMP configuration: [ 1578.253295][T21535] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1578.253458][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 1578.254413][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 1578.256066][T21535] CPU1 is up [ 1578.256423][T21535] ACPI: Waking up from system sleep state S3 [ 1578.776163][T21535] OOM killer enabled. 11:49:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='$/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a8000000000905040000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000209ce02e78196ff2000c00028005000100840000009ef9b614000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000"/178], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x77, 0xa0000}, 0x20) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000051d00)={0x9, [], 0x2e, "53ea84e1d6dd06"}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 11:49:02 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x5480, 0x0) syz_mount_image$tmpfs(&(0x7f0000001e40), &(0x7f0000001e80)='./file0\x00', 0x0, 0x0, 0x0, 0x1000021, 0xfffffffffffffffc) 11:49:02 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="022585ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1578.780259][T21535] Restarting tasks ... [ 1578.784641][T32589] synth uevent: /devices/virtual/block/loop5: failed to send uevent [ 1578.797480][T32589] block loop5: uevent: failed to send synthetic uevent [ 1578.814355][T21535] done. [ 1578.821735][T21535] PM: Possible incorrect RTC due to pm_trace, please use 'ntpdate' or 'rdate' to reset it. 11:49:02 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='%/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='&/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:02 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r2 = dup2(r1, r1) sendfile(r2, r2, 0x0, 0x80000000) 11:49:02 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x20}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 1578.847521][T21535] PM: suspend exit [ 1578.862693][T21556] loop5: detected capacity change from 0 to 1 11:49:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x54}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/printk', 0x101300, 0x146) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:02 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfeffff00000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1578.902288][T21556] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1578.907706][T21556] loop5: partition table partially beyond EOD, truncated [ 1578.924708][T21556] loop5: p1 start 10 is beyond EOD, truncated [ 1578.930871][T21556] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1578.931047][T21577] new mount options do not match the existing superblock, will be ignored 11:49:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='(/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='*/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:02 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) gettid() syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f00000001c0)="ea3f697e40662b2c5a6e76dd5b7d5c4517fa3b768f00"/33, 0x21, 0x800000}, {0x0, 0x0, 0x80600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=ascii,shortname=mixed', @ANYRESOCT]) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', '+{,^\x00'}, &(0x7f00000000c0)='--*+^(^&.@\x00', 0xb, 0x0) [ 1578.947898][T21556] loop5: p3 start 9 is beyond EOD, truncated [ 1578.953971][T21556] loop5: p4 size 2 extends beyond EOD, truncated [ 1578.967097][T21556] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="14007c3d8bc938da0000001100010087ab9b9c099e970f0000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1579.004377][T21556] loop5: p6 start 9 is beyond EOD, truncated [ 1579.009803][T21605] loop4: detected capacity change from 0 to 32768 [ 1579.023628][T21605] FAT-fs (loop4): Unrecognized mount option "shortname=mixed01777777777777777777777" or missing value [ 1579.113454][T21605] loop4: detected capacity change from 0 to 32768 [ 1579.128780][T21556] loop5: detected capacity change from 0 to 1 [ 1579.174518][T21556] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1579.179770][T21556] loop5: partition table partially beyond EOD, truncated [ 1579.186856][T21556] loop5: p1 start 10 is beyond EOD, truncated [ 1579.192962][T21556] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1579.200580][T21556] loop5: p3 start 9 is beyond EOD, truncated [ 1579.206715][T21556] loop5: p4 size 2 extends beyond EOD, truncated [ 1579.213519][T21556] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1579.221081][T21556] loop5: p6 start 9 is beyond EOD, truncated 11:49:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB=',/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:03 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x100000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:03 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="022885ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:03 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x50, r2, 0x400000) fadvise64(r2, 0x9, 0xff, 0x4) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0xcf2, 0x6, 0x5, 0x8, "3361ad7d0b65358622247ee9d8dc7d61598925"}) 11:49:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c9030343bb3b1008c140000001000010000000000000000000000000a1473a57c3d8bc938da000000110001000000c9ff000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) preadv(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000200)=""/251, 0xfb}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x4044000) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:03 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f00007b9000/0x2000)=nil, 0x2000, 0x2, 0x8010, r0, 0xb0c65000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d6c6f63616cef7221746976652c08000000"]) 11:49:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='-/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:03 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r0, 0x11, 0x0, 0x1b2ec479) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x20406a, &(0x7f0000000140)={[{@huge_within_size}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_never}, {@huge_advise}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_lt={'uid<', r4}}, {@subj_user={'subj_user', 0x3d, '!.$]-)&)(-\x1d'}}, {@smackfsdef}, {@euid_gt}]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$eventfd(r0, &(0x7f0000000000), 0x8) sendfile(r0, r1, 0x0, 0x11f08) 11:49:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='//file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:03 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x200000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1579.314033][T21647] tmpfs: Bad value for 'mpol' 11:49:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a55a3d8bc938da0000001100010000000000000000000000000a7994342a672a4482d777e081000000c1193f6b10b9554d01dad7e3357d2a5a3d9e8279556acb8a7ea875e2c9ec71d7ff0bcfeaccd64ee904dc4657123b8992734aa2d06e458b933a3535d66619566d9c01da7a7bd48ec4616e8ca1beb9cb6a96b1b948230e6b85293e431c9f3f349c3a1d32c6084a59876cfa20a2d1671dc839445e6a99891f2d4432e92388144259a1f9e6beb3a64343c243ed71a1"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a800000000090500000000000000dd000000000000000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffff01008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r6 = openat$cgroup_ro(r5, &(0x7f0000000180)='pids.events\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f00000001c0)={0x0, 0x10000, 0x1, 0x1, 0x1, [0x10001, 0xfffff763, 0x4, 0x2]}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='0/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:03 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x300000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='2/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1579.374717][T21673] loop5: detected capacity change from 0 to 1 [ 1579.446276][T21673] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1579.451551][T21673] loop5: partition table partially beyond EOD, truncated [ 1579.461488][T21673] loop5: p1 start 10 is beyond EOD, truncated [ 1579.467849][T21673] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1579.486477][T21673] loop5: p3 start 9 is beyond EOD, truncated [ 1579.492539][T21673] loop5: p4 size 2 extends beyond EOD, truncated [ 1579.504451][T21673] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1579.511984][T21673] loop5: p6 start 9 is beyond EOD, truncated [ 1579.573387][T21673] loop5: detected capacity change from 0 to 1 [ 1579.620002][T21673] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1579.625320][T21673] loop5: partition table partially beyond EOD, truncated [ 1579.633839][T21673] loop5: p1 start 10 is beyond EOD, truncated [ 1579.639947][T21673] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1579.647543][T21673] loop5: p3 start 9 is beyond EOD, truncated [ 1579.653591][T21673] loop5: p4 size 2 extends beyond EOD, truncated [ 1579.660357][T21673] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:03 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="022c85ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1579.667891][T21673] loop5: p6 start 9 is beyond EOD, truncated [ 1579.776214][T21735] loop5: detected capacity change from 0 to 1 [ 1579.820558][T21735] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1579.825824][T21735] loop5: partition table partially beyond EOD, truncated [ 1579.833099][T21735] loop5: p1 start 10 is beyond EOD, truncated [ 1579.839437][T21735] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1579.847088][T21735] loop5: p3 start 9 is beyond EOD, truncated [ 1579.853217][T21735] loop5: p4 size 2 extends beyond EOD, truncated [ 1579.860171][T21735] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1579.868185][T21735] loop5: p6 start 9 is beyond EOD, truncated [ 1579.902631][T21735] loop5: detected capacity change from 0 to 1 [ 1579.941196][T21735] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1579.946839][T21735] loop5: partition table partially beyond EOD, truncated [ 1579.954559][T21735] loop5: p1 start 10 is beyond EOD, truncated [ 1579.960897][T21735] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1579.968688][T21735] loop5: p3 start 9 is beyond EOD, truncated [ 1579.974721][T21735] loop5: p4 size 2 extends beyond EOD, truncated [ 1579.981512][T21735] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1579.989030][T21735] loop5: p6 start 9 is beyond EOD, truncated 11:49:04 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0xae0, 0x20200) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)}, {&(0x7f0000000140)=""/84, 0x54}, {&(0x7f0000000300)=""/255, 0xff}, {&(0x7f0000000400)=""/148, 0x94}, {&(0x7f0000000240)=""/72, 0x48}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/209, 0xd1}], 0x7, 0x2, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) fchown(r0, 0xee01, r3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="2000000000020000190000006001000008000000000000000000000004000000000002000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@commit={'commit', 0x3d, 0x2000000}}]}) 11:49:04 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x400000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='4/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da00000011000000000a2c0a63e39c4e822dfd6418256ed5de42027ea812c775bd3bcf4e59349f482acd6d39081f675fdd079e4f7c4398a0c129723a3dcdaf29eab1439c35d120b6a385"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x90}, 0x40090c1) perf_event_open(&(0x7f00000000c0)={0x2, 0xb1, 0xf7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_dev$sg(&(0x7f0000000180), 0x2, 0x400000) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:04 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000001700)='./file0\x00') r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/110, 0x18) r1 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3, 0x6, &(0x7f0000001540)=[{&(0x7f0000000240)="a61f20fcd70add723f5f0df0f8c041ebe47bf097e91d1c5990b92457fb52258bfe1fc35d20e53b8b20d4086ede5fa2904fee7f54035bcfe7d63eacaf515b9513d4752ab4b76ccb1b1a9fba3d69075024d54ffc01074bfa0b227bf9", 0x5b, 0x100000001}, {&(0x7f00000002c0)="b9831789b18ad6979b581c129e714cf5b0d831095d795798f0c5d74bfbfb569592accedc3265f36cd0c0346fe965b3cf67d1853f23e440ee043fbf5c47f78a5312498b87eadaa34babbd768f03e9a9f9e54e782f8ae0d2035fe9eaf3c2182fd9027c8df626b1db4bb6a6e9bb897ddf3d71c5748ebabef3a1b99060870b59f7bba94d8fddcc572faa017b9483c754930c4640966ecee2e05cfb231785d7cc27bf7d", 0xa1, 0x4}, {&(0x7f00000001c0)="338e65da1ec33beb0f1229306606b26e3e3f1907bede75a1a9f663f9bad8694f8cf5c91abde60fb06a637fea92b1f42ef1a4", 0x32, 0x8}, {&(0x7f0000000380)="88b4f9f34ac3422c8362a7a069c110711f4498c8e8cfd7ce0baa20c06bbb2ad3be9ed93c07814776f763c1e0bde6033a95bfbc50625262807bf164ab7b9e5f8f5c79845aef725c2d06284e52345cd7997549f114ecd49b4292551ca892037ee242a13ce715590561f8927f78d0fad7a32bef5ac1fe441bf55fb80ca989c6ea348cae06c1f4c3c7a5c1535fe8fe66912c0d6859f64e3d2db717b659198ee9c46d52322616dfc12bcce7ffb4cb63918b13f7b51d3694349ac179623844689737c41f0f35c56bede35c6f30c8c86dcd14ea0cff269309c84808ae846ad5fc", 0xdd, 0x20}, {&(0x7f0000000480)="7c97b854bdd4eee48e9cc635", 0xc, 0xe0}, {&(0x7f0000000540)="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", 0x1000, 0x1}], 0xc0, &(0x7f0000001600)={[{@block={'block', 0x3d, 0x600}}, {@check_relaxed}, {@unhide}, {@cruft}, {@cruft}, {@map_acorn}, {@nojoliet}, {@map_normal}, {@overriderock}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, 'configfs\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@permit_directio}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@audit}]}) getdents64(r1, &(0x7f0000000500)=""/15, 0xf) 11:49:04 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="026485ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='6/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:04 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x104) unlink(&(0x7f0000000580)='./bus\x00') openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x6000) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x2, 0x1000, 0xfd, &(0x7f0000000240)="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", 0x0, 0x0, &(0x7f00000001c0)}) rmdir(&(0x7f0000000140)='./bus\x00') io_setup(0x1, &(0x7f0000000080)=0x0) ftruncate(r1, 0x81fd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x280000e, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x55, 0xd9f, 0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}]) 11:49:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[{&(0x7f00000002c0)="296b71bebd32dd63524a8c2fbe7526ac52e3448cd805c502c9cce84497b8b97d8ae71a5db743b3c7ee5f4fa062844ad3b692435cd0af57e69ca4f33e7a605f7d8fbc1aabd3592549596ed0f473aed5de3961126ecf431994e8855bd32ef97ca04bb8fa96e2024bf4129df99e5df59c621f4f4e847e2a1a3bf8f595dbc0f50f525ff80851259f9778196add229ad5a507969c8b2d3efc0b93381ea18ee856bb82a7577d3b5e833f0c3f6bdd14b4184ebbe5663744597286edce394bfd89a1720b0fa39ad68c4622307dbbf085dfbf37b736c4021eea6a767a15e030ee33f42f26c516a49d1c52edbc74d3f71bbb5680a9ca36b2feb8e8d07f8d", 0xf9, 0x2}, {&(0x7f0000001f00)="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", 0x1000, 0xa1}], 0x20, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000001c0)=0x3) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x402002, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1580.214131][T21772] loop5: detected capacity change from 0 to 1 [ 1580.230024][T21767] loop4: detected capacity change from 0 to 264192 11:49:04 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x500000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='8/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:04 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000006d64253c6300020000000000000000"], &(0x7f0000000100), 0x0) 11:49:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB=':/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1580.271675][T21772] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1580.277778][T21772] loop5: partition table partially beyond EOD, truncated [ 1580.304690][T21772] loop5: p1 start 10 is beyond EOD, truncated [ 1580.310892][T21772] loop5: p2 size 100663296 extends beyond EOD, truncated 11:49:04 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x600000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x14, &(0x7f0000000040)="35e4be1a", 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/214, 0xd6}], 0x1, 0xd9f, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) fcntl$setsig(r2, 0xa, 0x2a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000040), 0x9) 11:49:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB=' p2 p3 p4 < p5 p6 > [ 1580.557188][T32589] loop5: partition table partially beyond EOD, truncated [ 1580.565189][T32589] loop5: p1 start 10 is beyond EOD, truncated [ 1580.571375][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1580.578917][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1580.585436][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1580.592233][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1580.599674][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1580.607540][T21772] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1580.612835][T21772] loop5: partition table partially beyond EOD, truncated [ 1580.620233][T21772] loop5: p1 start 10 is beyond EOD, truncated [ 1580.626580][T21772] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1580.634251][T21772] loop5: p3 start 9 is beyond EOD, truncated [ 1580.640243][T21772] loop5: p4 size 2 extends beyond EOD, truncated 11:49:04 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="0201050000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:04 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="7a962800"], &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='minix\x00', 0x8, &(0x7f00000003c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00') setxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x1cc00, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0, &(0x7f0000000440)={0x5, 0x4, 0x0, {r0}}, 0x20) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x200000, 0x2) getsockname$unix(r1, &(0x7f0000000140)=@abs, &(0x7f0000000280)=0x6e) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0), 0x2, 0x0) llistxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 11:49:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='>/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:04 executing program 2: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) sendto$inet(r0, 0x0, 0x0, 0x20048010, 0x0, 0x0) 11:49:04 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x700000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a73a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x480240, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4004040) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 11:49:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='B/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1580.647546][T21772] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1580.655367][T21772] loop5: p6 start 9 is beyond EOD, truncated 11:49:04 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x800000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1580.697775][ T25] audit: type=1400 audit(1622202544.676:1135): avc: denied { relabelto } for pid=21861 comm="syz-executor.4" name="file0" dev="sda1" ino=14450 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 1580.723870][T21876] PM: suspend entry (deep) 11:49:04 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000240)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x380000e, 0x100010, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000600)='./file1\x00') preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getrusage(0x1, &(0x7f00000004c0)) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0400050900000000666174000404090a0200027400f801", 0x33}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$FITRIM(r3, 0x40047211, &(0x7f0000000100)) io_cancel(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000580)="328d597edd3dbc261fbdbcf0ed3305be8331b6ac2d56dc4fe6890cdc68a2d9da04f24d403f4aee0066e7f1e235b312a56709013faa8dd623b0082525", 0x3c, 0x6, 0x0, 0x1, r0}, &(0x7f0000000840)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mbind(&(0x7f000079b000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000480)=0x9, 0xc0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="f80000001600738b0000000000000000fe8000000000000000000000000000aa7f000001b3770970000000000000000400"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ff1c00000000000000000200000000010000000033"], 0xf8}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0xf1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000900)) 11:49:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='D/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:04 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1580.726551][ T25] audit: type=1400 audit(1622202544.676:1136): avc: denied { setattr } for pid=21861 comm="syz-executor.4" name="file0" dev="sda1" ino=14450 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 1580.761525][T21876] Filesystems sync: 0.032 seconds [ 1580.782394][T21876] Freezing user space processes ... [ 1580.782861][ T25] audit: type=1400 audit(1622202544.676:1137): avc: denied { mounton } for pid=21861 comm="syz-executor.4" path="/root/syzkaller-testdir055656947/syzkaller.zT2fbM/401/file0" dev="sda1" ino=14450 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 1580.792667][T21876] (elapsed 0.010 seconds) done. [ 1580.818240][ T25] audit: type=1400 audit(1622202544.676:1138): avc: denied { relabelfrom } for pid=21861 comm="syz-executor.4" name="file0" dev="sda1" ino=14450 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 1580.823082][T21876] OOM killer disabled. [ 1580.823087][T21876] Freezing remaining freezable tasks ... [ 1580.848776][ T25] audit: type=1400 audit(1622202544.716:1139): avc: denied { rmdir } for pid=32737 comm="syz-executor.4" name="file0" dev="sda1" ino=14450 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 1580.890291][T21876] (elapsed 0.037 seconds) done. [ 1580.895211][T21876] printk: Suspending console(s) (use no_console_suspend to debug) [ 1580.952335][T21876] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1581.706539][T21876] ACPI: Preparing to enter system sleep state S3 [ 1581.706654][T21876] PM: Saving platform NVS memory [ 1581.706658][T21876] Disabling non-boot CPUs ... [ 1581.710749][T21876] smpboot: CPU 1 is now offline [ 1581.714626][T21876] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 1581.714754][T21876] ACPI: Low-level resume complete [ 1581.714835][T21876] PM: Restoring platform NVS memory [ 1581.714844][T21876] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 1581.726383][T21876] Enabling non-boot CPUs ... [ 1581.726601][T21876] x86: Booting SMP configuration: [ 1581.726604][T21876] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1581.726824][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 1581.727885][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 1581.729292][T21876] CPU1 is up [ 1581.729509][T21876] ACPI: Waking up from system sleep state S3 [ 1582.192463][T21876] OOM killer enabled. [ 1582.193187][T21876] Restarting tasks ... [ 1582.210239][T32589] synth uevent: /devices/virtual/block/loop0: failed to send uevent [ 1582.212522][T21890] loop4: detected capacity change from 0 to 264192 [ 1582.212961][T32589] block loop0: uevent: failed to send synthetic uevent [ 1582.214679][T21876] done. [ 1582.222097][T21876] PM: Possible incorrect RTC due to pm_trace, please use 'ntpdate' or 'rdate' to reset it. 11:49:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000200000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000020000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a3000000004a9a90200008000060000075dcc65000000000000000100840000001492c0bc7b0ba014cb7e24e2000180080001006401010028000200ffffffff0c000290050001008800000006000340000400000c000280050001003a0000000900010073797a3000"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1582.223779][T21876] PM: suspend exit [ 1582.232226][T21904] loop5: detected capacity change from 0 to 1 [ 1582.248744][T21904] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1582.249919][T21904] loop5: partition table partially beyond EOD, truncated [ 1582.251213][T21904] loop5: p1 start 10 is beyond EOD, truncated [ 1582.252442][T21904] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1582.254553][T21904] loop5: p3 start 9 is beyond EOD, truncated [ 1582.255559][T21904] loop5: p4 size 2 extends beyond EOD, truncated [ 1582.258157][T21904] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1582.261428][T21904] loop5: p6 start 9 is beyond EOD, truncated [ 1582.301710][T21904] loop5: detected capacity change from 0 to 1 11:49:06 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='F/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:06 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa00000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='nonumtail']) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r2) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x200500, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x110, r3, 0xb9716000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000040)={{r0}, 0x3f, 0x2, 0x8be}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) 11:49:06 executing program 2: r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x560a, &(0x7f0000000100)) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x101, 0x6, 0x5, 0x2}) 11:49:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) r1 = gettid() tkill(r1, 0x34) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001", @ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="570ff8cf70226fc2305f4b72454ade3ec605fdd656f74478439cb98a1060fcdfab61049c85bb7c57655ac38cf77001460f3ef7632c9005b800", @ANYRESDEC=r1, @ANYRES16], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1582.328823][T21904] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1582.330036][T21904] loop5: partition table partially beyond EOD, truncated [ 1582.331571][T21904] loop5: p1 start 10 is beyond EOD, truncated [ 1582.332851][T21904] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1582.334805][T21904] loop5: p3 start 9 is beyond EOD, truncated [ 1582.335868][T21904] loop5: p4 size 2 extends beyond EOD, truncated [ 1582.337460][T21904] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1582.339516][T21904] loop5: p6 start 9 is beyond EOD, truncated [ 1582.341980][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1582.343005][T32589] loop5: partition table partially beyond EOD, truncated [ 1582.344547][T32589] loop5: p1 start 10 is beyond EOD, truncated [ 1582.345652][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1582.347550][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1582.349845][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1582.351469][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1582.352739][T32589] loop5: p6 start 9 is beyond EOD, truncated 11:49:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='H/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a6dcdcea6af397e1685fa31b8f0c744421b06e327142e375a6c5ec9778a2be89c845e76132ce166e919f893d481fba566c59b8553cdf3cc61515f42a54a6ab9d862338ed3e8d3fa55c4303cde9354a8f9c25f09b2e0f9f77d14d2a10ea521dbee428632eb9266e23230d3b89279e5a99297b9a571b73b148c6b1e95976b3305ab21702ae0f604a20aa939e37e610ec06113f8372534e8e2b07d2ebf5c2f70f14abcd422e1cb0c4ee5177a154005b0a296b4d7d80d5475c99b"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) r7 = syz_open_dev$vcsa(&(0x7f0000000180), 0x9, 0x111080) dup2(r1, r7) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1582.380036][T21954] loop4: detected capacity change from 0 to 6 [ 1582.383485][T21954] FAT-fs (loop4): Directory bread(block 6) failed 11:49:06 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="0201050000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:06 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb00000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:06 executing program 4: newfstatat(0xffffffffffffff9c, &(0x7f0000003e00)='./file0\x00', &(0x7f0000003e40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) rmdir(&(0x7f0000000000)='./file0\x00') setreuid(r0, 0x0) setreuid(0x0, 0xee00) setreuid(r0, r0) 11:49:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='J/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1582.445628][T21974] loop5: detected capacity change from 0 to 1 [ 1582.469076][T21974] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1582.470191][T21974] loop5: partition table partially beyond EOD, truncated [ 1582.471363][T21974] loop5: p1 start 10 is beyond EOD, truncated [ 1582.472353][T21974] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1582.474523][T21974] loop5: p3 start 9 is beyond EOD, truncated [ 1582.475435][T21974] loop5: p4 size 2 extends beyond EOD, truncated [ 1582.476995][T21974] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1582.486636][T21974] loop5: p6 start 9 is beyond EOD, truncated 11:49:06 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="0201630000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:06 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="0201050000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:06 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc00000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='L/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x148) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x971a}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x10000}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x832b9c669d194003}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r7, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 11:49:06 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='N/file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:06 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="0201050000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1582.571561][T22015] loop4: detected capacity change from 0 to 1 11:49:06 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xd00000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x2, 0x80000000, 0x401, 0x9, 0x1, 0xff, 0xfffffe00}, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r4 = gettid() tkill(r4, 0x34) r5 = gettid() tkill(r5, 0x34) write$P9_RREADDIR(r3, &(0x7f0000000100)=ANY=[], 0x2504c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 11:49:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="fe2f66696c6530"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x64400, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"0c3224d20821a7eeb396edb7fa043ccd", 0x0, 0x0, {0x4, 0x6e7e5f77}, {0x401, 0x1b}, 0x8, [0x20, 0x1, 0x81b, 0x0, 0x5247, 0x4, 0x20, 0x3e23, 0x6, 0xfff, 0x6, 0x7, 0x0, 0x1, 0x4]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000480)={{}, r6, 0x6, @inherit={0x50, &(0x7f0000000180)={0x0, 0x1, 0x5, 0x2, {0x9, 0x8a6c, 0x2, 0x7, 0x3}, [0x3ef3]}}, @name="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"}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1582.594666][T22027] loop5: detected capacity change from 0 to 1 [ 1582.601581][T22015] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1582.602483][T22015] loop4: partition table partially beyond EOD, truncated [ 1582.603839][T22015] loop4: p1 start 10 is beyond EOD, truncated [ 1582.604859][T22015] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1582.608701][T22015] loop4: p3 start 9 is beyond EOD, truncated [ 1582.609933][T22015] loop4: p4 size 2 extends beyond EOD, truncated [ 1582.618225][T22027] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 1582.618351][T22027] loop5: p1 start 10 is beyond EOD, [ 1582.632749][T22015] loop4: p5 size 100663296 extends beyond EOD, [ 1582.633402][T22027] truncated [ 1582.634391][T22015] truncated [ 1582.635437][T22027] loop5: p2 size 100663296 extends beyond EOD, [ 1582.636260][T22015] loop4: p6 start 9 is beyond EOD, [ 1582.636407][T22027] truncated [ 1582.639214][T22015] truncated [ 1582.663462][T22027] loop5: p3 start 9 is beyond EOD, truncated [ 1582.665011][T22027] loop5: p4 size 2 extends beyond EOD, truncated [ 1582.666716][T22027] loop5: p5 start 10 is beyond EOD, truncated [ 1582.667869][T22027] loop5: p6 size 100663296 extends beyond EOD, truncated [ 1582.669859][T22027] loop5: p7 start 9 is beyond EOD, truncated [ 1582.671478][T22027] loop5: p8 start 10 is beyond EOD, truncated [ 1582.672573][T22027] loop5: p9 size 100663296 extends beyond EOD, truncated [ 1582.674223][T22027] loop5: p10 start 9 is beyond EOD, truncated [ 1582.675627][T22027] loop5: p11 start 10 is beyond EOD, truncated [ 1582.676823][T22027] loop5: p12 size 100663296 extends beyond EOD, truncated [ 1582.678684][T22027] loop5: p13 start 9 is beyond EOD, truncated [ 1582.679700][T22027] loop5: p14 start 10 is beyond EOD, truncated [ 1582.681108][T22027] loop5: p15 size 100663296 extends beyond EOD, truncated [ 1582.683673][T22027] loop5: p16 start 9 is beyond EOD, truncated [ 1582.685206][T22027] loop5: p17 start 10 is beyond EOD, truncated [ 1582.686982][T22027] loop5: p18 size 100663296 extends beyond EOD, truncated [ 1582.699203][T22027] loop5: p19 start 9 is beyond EOD, truncated [ 1582.700995][T22027] loop5: p20 start 10 is beyond EOD, truncated [ 1582.702427][T22027] loop5: p21 size 100663296 extends beyond EOD, truncated [ 1582.705256][T22027] loop5: p22 start 9 is beyond EOD, truncated [ 1582.707383][T22027] loop5: p23 start 10 is beyond EOD, truncated [ 1582.708935][T22027] loop5: p24 size 100663296 extends beyond EOD, truncated [ 1582.711902][T22027] loop5: p25 start 9 is beyond EOD, truncated [ 1582.713655][T22027] loop5: p26 start 10 is beyond EOD, truncated [ 1582.715453][T22027] loop5: p27 size 100663296 extends beyond EOD, truncated [ 1582.799369][T22027] loop5: p28 start 9 is beyond EOD, truncated [ 1582.800605][T22027] loop5: p29 start 10 is beyond EOD, truncated [ 1582.801483][T22027] loop5: p30 size 100663296 extends beyond EOD, truncated [ 1582.803095][T22027] loop5: p31 start 9 is beyond EOD, truncated [ 1582.803982][T22027] loop5: p32 start 10 is beyond EOD, truncated [ 1582.804995][T22027] loop5: p33 size 100663296 extends beyond EOD, truncated [ 1582.806588][T22027] loop5: p34 start 9 is beyond EOD, truncated [ 1582.809972][T22027] loop5: p35 start 10 is beyond EOD, truncated [ 1582.812342][T22027] loop5: p36 size 100663296 extends beyond EOD, truncated [ 1582.816896][T22027] loop5: p37 start 9 is beyond EOD, truncated [ 1582.818682][T22027] loop5: p38 start 10 is beyond EOD, truncated [ 1582.820288][T22027] loop5: p39 size 100663296 extends beyond EOD, truncated [ 1582.823210][T22027] loop5: p40 start 9 is beyond EOD, truncated [ 1582.824613][T22027] loop5: p41 start 10 is beyond EOD, truncated [ 1582.825851][T22027] loop5: p42 size 100663296 extends beyond EOD, truncated [ 1582.827606][T22027] loop5: p43 start 9 is beyond EOD, truncated [ 1582.829357][T22027] loop5: p44 start 10 is beyond EOD, truncated [ 1582.831267][T22027] loop5: p45 size 100663296 extends beyond EOD, truncated [ 1582.835085][T22027] loop5: p46 start 9 is beyond EOD, truncated [ 1582.836845][T22027] loop5: p47 start 10 is beyond EOD, truncated [ 1582.838816][T22027] loop5: p48 size 100663296 extends beyond EOD, truncated [ 1582.842453][T22027] loop5: p49 start 9 is beyond EOD, truncated [ 1582.844661][T22027] loop5: p50 start 10 is beyond EOD, truncated [ 1582.846234][T22027] loop5: p51 size 100663296 extends beyond EOD, truncated [ 1582.848554][T22027] loop5: p52 start 9 is beyond EOD, truncated [ 1582.849892][T22027] loop5: p53 start 10 is beyond EOD, truncated [ 1582.851340][T22027] loop5: p54 size 100663296 extends beyond EOD, truncated [ 1582.854711][T22027] loop5: p55 start 9 is beyond EOD, truncated [ 1582.856087][T22027] loop5: p56 start 10 is beyond EOD, truncated [ 1582.858487][T22027] loop5: p57 size 100663296 extends beyond EOD, truncated [ 1582.862178][T22027] loop5: p58 start 9 is beyond EOD, truncated [ 1582.863817][T22027] loop5: p59 start 10 is beyond EOD, truncated [ 1582.865851][T22027] loop5: p60 size 100663296 extends beyond EOD, truncated [ 1582.868039][T22027] loop5: p61 start 9 is beyond EOD, truncated [ 1582.869662][T22027] loop5: p62 start 10 is beyond EOD, truncated [ 1582.871372][T22027] loop5: p63 size 100663296 extends beyond EOD, truncated [ 1582.875541][T22027] loop5: p64 start 9 is beyond EOD, truncated [ 1582.877006][T22027] loop5: p65 start 10 is beyond EOD, truncated [ 1582.879031][T22027] loop5: p66 size 100663296 extends beyond EOD, truncated [ 1582.882307][T22027] loop5: p67 start 9 is beyond EOD, truncated [ 1582.883270][T22027] loop5: p68 start 10 is beyond EOD, truncated [ 1582.884647][T22027] loop5: p69 size 100663296 extends beyond EOD, truncated [ 1582.887478][T22027] loop5: p70 start 9 is beyond EOD, truncated [ 1582.889264][T22027] loop5: p71 start 10 is beyond EOD, truncated [ 1582.891713][T22027] loop5: p72 size 100663296 extends beyond EOD, truncated [ 1582.895990][T22027] loop5: p73 start 9 is beyond EOD, truncated [ 1582.897928][T22027] loop5: p74 start 10 is beyond EOD, truncated [ 1582.899511][T22027] loop5: p75 size 100663296 extends beyond EOD, truncated [ 1582.903102][T22027] loop5: p76 start 9 is beyond EOD, truncated [ 1582.904774][T22027] loop5: p77 start 10 is beyond EOD, truncated [ 1582.906810][T22027] loop5: p78 size 100663296 extends beyond EOD, truncated [ 1582.909717][T22027] loop5: p79 start 9 is beyond EOD, truncated [ 1582.911600][T22027] loop5: p80 start 10 is beyond EOD, truncated [ 1582.913234][T22027] loop5: p81 size 100663296 extends beyond EOD, truncated [ 1582.915229][T22027] loop5: p82 start 9 is beyond EOD, truncated [ 1582.918261][T22027] loop5: p83 start 10 is beyond EOD, truncated [ 1582.919828][T22027] loop5: p84 size 100663296 extends beyond EOD, truncated [ 1582.922410][T22027] loop5: p85 start 9 is beyond EOD, truncated [ 1582.923872][T22027] loop5: p86 start 10 is beyond EOD, truncated [ 1582.925379][T22027] loop5: p87 size 100663296 extends beyond EOD, truncated [ 1582.927089][T22027] loop5: p88 start 9 is beyond EOD, truncated [ 1582.928732][T22027] loop5: p89 start 10 is beyond EOD, truncated [ 1582.930317][T22027] loop5: p90 size 100663296 extends beyond EOD, truncated [ 1582.932627][T22027] loop5: p91 start 9 is beyond EOD, truncated [ 1582.934008][T22027] loop5: p92 start 10 is beyond EOD, truncated [ 1582.935232][T22027] loop5: p93 size 100663296 extends beyond EOD, truncated [ 1582.936918][T22027] loop5: p94 start 9 is beyond EOD, truncated [ 1582.942160][T22027] loop5: p95 start 10 is beyond EOD, truncated [ 1582.944684][T22027] loop5: p96 size 100663296 extends beyond EOD, truncated [ 1582.947405][T22027] loop5: p97 start 9 is beyond EOD, truncated [ 1582.949133][T22027] loop5: p98 start 10 is beyond EOD, truncated [ 1582.950919][T22027] loop5: p99 size 100663296 extends beyond EOD, truncated [ 1582.952535][T22027] loop5: p100 start 9 is beyond EOD, truncated [ 1582.953920][T22027] loop5: p101 start 10 is beyond EOD, truncated [ 1582.955303][T22027] loop5: p102 size 100663296 extends beyond EOD, truncated [ 1582.957290][T22027] loop5: p103 start 9 is beyond EOD, truncated [ 1582.958386][T22027] loop5: p104 start 10 is beyond EOD, truncated [ 1582.959898][T22027] loop5: p105 size 100663296 extends beyond EOD, truncated [ 1582.962296][T22027] loop5: p106 start 9 is beyond EOD, truncated [ 1582.964031][T22027] loop5: p107 start 10 is beyond EOD, truncated [ 1582.965026][T22027] loop5: p108 size 100663296 extends beyond EOD, truncated [ 1582.966417][T22027] loop5: p109 start 9 is beyond EOD, truncated [ 1582.967591][T22027] loop5: p110 start 10 is beyond EOD, truncated [ 1582.968579][T22027] loop5: p111 size 100663296 extends beyond EOD, truncated [ 1582.971148][T22027] loop5: p112 start 9 is beyond EOD, truncated [ 1582.972498][T22027] loop5: p113 start 10 is beyond EOD, truncated [ 1582.974303][T22027] loop5: p114 size 100663296 extends beyond EOD, truncated [ 1582.977042][T22027] loop5: p115 start 9 is beyond EOD, truncated [ 1582.978922][T22027] loop5: p116 start 10 is beyond EOD, truncated [ 1582.980583][T22027] loop5: p117 size 100663296 extends beyond EOD, truncated [ 1582.983285][T22027] loop5: p118 start 9 is beyond EOD, truncated [ 1582.985409][T22027] loop5: p119 start 10 is beyond EOD, truncated [ 1582.986769][T22027] loop5: p120 size 100663296 extends beyond EOD, truncated [ 1582.988499][T22027] loop5: p121 start 9 is beyond EOD, truncated [ 1582.989546][T22027] loop5: p122 start 10 is beyond EOD, truncated [ 1582.990881][T22027] loop5: p123 size 100663296 extends beyond EOD, truncated [ 1582.992671][T22027] loop5: p124 start 9 is beyond EOD, truncated [ 1582.993610][T22027] loop5: p125 start 10 is beyond EOD, truncated [ 1582.995111][T22027] loop5: p126 size 100663296 extends beyond EOD, truncated [ 1582.996845][T22027] loop5: p127 start 9 is beyond EOD, truncated [ 1582.997871][T22027] loop5: p128 start 10 is beyond EOD, truncated [ 1582.998803][T22027] loop5: p129 size 100663296 extends beyond EOD, truncated [ 1583.001706][T22027] loop5: p130 start 9 is beyond EOD, truncated [ 1583.003638][T22027] loop5: p131 start 10 is beyond EOD, truncated [ 1583.006724][T22027] loop5: p132 size 100663296 extends beyond EOD, truncated [ 1583.010714][T22027] loop5: p133 start 9 is beyond EOD, truncated [ 1583.012723][T22027] loop5: p134 start 10 is beyond EOD, truncated [ 1583.014005][T22027] loop5: p135 size 100663296 extends beyond EOD, truncated [ 1583.015544][T22027] loop5: p136 start 9 is beyond EOD, truncated [ 1583.017021][T22027] loop5: p137 start 10 is beyond EOD, truncated [ 1583.018487][T22027] loop5: p138 size 100663296 extends beyond EOD, truncated [ 1583.021071][T22027] loop5: p139 start 9 is beyond EOD, truncated [ 1583.022343][T22027] loop5: p140 start 10 is beyond EOD, truncated [ 1583.023594][T22027] loop5: p141 size 100663296 extends beyond EOD, truncated [ 1583.025081][T22027] loop5: p142 start 9 is beyond EOD, truncated [ 1583.026261][T22027] loop5: p143 start 10 is beyond EOD, truncated [ 1583.027317][T22027] loop5: p144 size 100663296 extends beyond EOD, truncated [ 1583.029100][T22027] loop5: p145 start 9 is beyond EOD, truncated [ 1583.030099][T22027] loop5: p146 start 10 is beyond EOD, truncated [ 1583.031291][T22027] loop5: p147 size 100663296 extends beyond EOD, truncated [ 1583.032997][T22027] loop5: p148 start 9 is beyond EOD, truncated [ 1583.033988][T22027] loop5: p149 start 10 is beyond EOD, truncated [ 1583.034978][T22027] loop5: p150 size 100663296 extends beyond EOD, truncated [ 1583.036442][T22027] loop5: p151 start 9 is beyond EOD, truncated [ 1583.037705][T22027] loop5: p152 start 10 is beyond EOD, truncated [ 1583.038727][T22027] loop5: p153 size 100663296 extends beyond EOD, truncated [ 1583.041023][T22027] loop5: p154 start 9 is beyond EOD, truncated [ 1583.042508][T22027] loop5: p155 start 10 is beyond EOD, truncated [ 1583.043726][T22027] loop5: p156 size 100663296 extends beyond EOD, truncated [ 1583.045124][T22027] loop5: p157 start 9 is beyond EOD, truncated [ 1583.046072][T22027] loop5: p158 start 10 is beyond EOD, truncated [ 1583.046908][T22027] loop5: p159 size 100663296 extends beyond EOD, truncated [ 1583.048304][T22027] loop5: p160 start 9 is beyond EOD, truncated [ 1583.049189][T22027] loop5: p161 start 10 is beyond EOD, truncated [ 1583.050175][T22027] loop5: p162 size 100663296 extends beyond EOD, truncated [ 1583.052099][T22027] loop5: p163 start 9 is beyond EOD, truncated [ 1583.052973][T22027] loop5: p164 start 10 is beyond EOD, truncated [ 1583.054034][T22027] loop5: p165 size 100663296 extends beyond EOD, truncated [ 1583.055644][T22027] loop5: p166 start 9 is beyond EOD, truncated [ 1583.056518][T22027] loop5: p167 start 10 is beyond EOD, truncated [ 1583.057509][T22027] loop5: p168 size 100663296 extends beyond EOD, truncated [ 1583.058968][T22027] loop5: p169 start 9 is beyond EOD, truncated [ 1583.060157][T22027] loop5: p170 start 10 is beyond EOD, truncated [ 1583.061276][T22027] loop5: p171 size 100663296 extends beyond EOD, truncated [ 1583.062693][T22027] loop5: p172 start 9 is beyond EOD, truncated [ 1583.063591][T22027] loop5: p173 start 10 is beyond EOD, truncated [ 1583.064582][T22027] loop5: p174 size 100663296 extends beyond EOD, truncated [ 1583.066967][T22027] loop5: p175 start 9 is beyond EOD, truncated [ 1583.068002][T22027] loop5: p176 start 10 is beyond EOD, truncated [ 1583.069025][T22027] loop5: p177 size 100663296 extends beyond EOD, truncated [ 1583.071394][T22027] loop5: p178 start 9 is beyond EOD, truncated [ 1583.073035][T22027] loop5: p179 start 10 is beyond EOD, truncated [ 1583.074180][T22027] loop5: p180 size 100663296 extends beyond EOD, truncated [ 1583.075952][T22027] loop5: p181 start 9 is beyond EOD, truncated [ 1583.077091][T22027] loop5: p182 start 10 is beyond EOD, truncated [ 1583.078020][T22027] loop5: p183 size 100663296 extends beyond EOD, truncated [ 1583.080707][T22027] loop5: p184 start 9 is beyond EOD, truncated [ 1583.081942][T22027] loop5: p185 start 10 is beyond EOD, truncated [ 1583.083061][T22027] loop5: p186 size 100663296 extends beyond EOD, truncated [ 1583.084590][T22027] loop5: p187 start 9 is beyond EOD, truncated [ 1583.086014][T22027] loop5: p188 start 10 is beyond EOD, truncated [ 1583.086946][T22027] loop5: p189 size 100663296 extends beyond EOD, truncated [ 1583.088512][T22027] loop5: p190 start 9 is beyond EOD, truncated [ 1583.089423][T22027] loop5: p191 start 10 is beyond EOD, truncated [ 1583.090527][T22027] loop5: p192 size 100663296 extends beyond EOD, truncated [ 1583.092368][T22027] loop5: p193 start 9 is beyond EOD, truncated [ 1583.093360][T22027] loop5: p194 start 10 is beyond EOD, truncated [ 1583.094244][T22027] loop5: p195 size 100663296 extends beyond EOD, truncated [ 1583.095564][T22027] loop5: p196 start 9 is beyond EOD, truncated [ 1583.096605][T22027] loop5: p197 start 10 is beyond EOD, truncated [ 1583.097769][T22027] loop5: p198 size 100663296 extends beyond EOD, truncated [ 1583.099478][T22027] loop5: p199 start 9 is beyond EOD, truncated [ 1583.100603][T22027] loop5: p200 start 10 is beyond EOD, truncated [ 1583.101628][T22027] loop5: p201 size 100663296 extends beyond EOD, truncated [ 1583.103371][T22027] loop5: p202 start 9 is beyond EOD, truncated [ 1583.104706][T22027] loop5: p203 start 10 is beyond EOD, truncated [ 1583.105696][T22027] loop5: p204 size 100663296 extends beyond EOD, truncated [ 1583.107069][T22027] loop5: p205 start 9 is beyond EOD, truncated [ 1583.108040][T22027] loop5: p206 start 10 is beyond EOD, truncated [ 1583.109185][T22027] loop5: p207 size 100663296 extends beyond EOD, truncated [ 1583.111490][T22027] loop5: p208 start 9 is beyond EOD, truncated [ 1583.112517][T22027] loop5: p209 start 10 is beyond EOD, truncated [ 1583.113378][T22027] loop5: p210 size 100663296 extends beyond EOD, truncated [ 1583.115087][T22027] loop5: p211 start 9 is beyond EOD, truncated [ 1583.116777][T22027] loop5: p212 start 10 is beyond EOD, truncated [ 1583.117866][T22027] loop5: p213 size 100663296 extends beyond EOD, truncated [ 1583.119814][T22027] loop5: p214 start 9 is beyond EOD, truncated [ 1583.120970][T22027] loop5: p215 start 10 is beyond EOD, truncated [ 1583.122271][T22027] loop5: p216 size 100663296 extends beyond EOD, truncated [ 1583.124164][T22027] loop5: p217 start 9 is beyond EOD, truncated [ 1583.125079][T22027] loop5: p218 start 10 is beyond EOD, truncated [ 1583.126059][T22027] loop5: p219 size 100663296 extends beyond EOD, truncated [ 1583.127679][T22027] loop5: p220 start 9 is beyond EOD, truncated [ 1583.128910][T22027] loop5: p221 start 10 is beyond EOD, truncated [ 1583.130005][T22027] loop5: p222 size 100663296 extends beyond EOD, truncated [ 1583.131491][T22027] loop5: p223 start 9 is beyond EOD, truncated [ 1583.132465][T22027] loop5: p224 start 10 is beyond EOD, truncated [ 1583.133474][T22027] loop5: p225 size 100663296 extends beyond EOD, truncated [ 1583.134834][T22027] loop5: p226 start 9 is beyond EOD, truncated [ 1583.135786][T22027] loop5: p227 start 10 is beyond EOD, truncated [ 1583.136759][T22027] loop5: p228 size 100663296 extends beyond EOD, truncated [ 1583.138155][T22027] loop5: p229 start 9 is beyond EOD, truncated [ 1583.139082][T22027] loop5: p230 start 10 is beyond EOD, truncated [ 1583.140461][T22027] loop5: p231 size 100663296 extends beyond EOD, truncated [ 1583.142781][T22027] loop5: p232 start 9 is beyond EOD, truncated [ 1583.143926][T22027] loop5: p233 start 10 is beyond EOD, truncated [ 1583.145224][T22027] loop5: p234 size 100663296 extends beyond EOD, truncated [ 1583.146705][T22027] loop5: p235 start 9 is beyond EOD, truncated [ 1583.147628][T22027] loop5: p236 start 10 is beyond EOD, truncated [ 1583.148720][T22027] loop5: p237 size 100663296 extends beyond EOD, truncated [ 1583.151139][T22027] loop5: p238 start 9 is beyond EOD, truncated [ 1583.152418][T22027] loop5: p239 start 10 is beyond EOD, truncated [ 1583.153801][T22027] loop5: p240 size 100663296 extends beyond EOD, truncated [ 1583.155536][T22027] loop5: p241 start 9 is beyond EOD, truncated [ 1583.157174][T22027] loop5: p242 start 10 is beyond EOD, truncated [ 1583.158096][T22027] loop5: p243 size 100663296 extends beyond EOD, truncated [ 1583.159439][T22027] loop5: p244 start 9 is beyond EOD, truncated [ 1583.160609][T22027] loop5: p245 start 10 is beyond EOD, truncated [ 1583.161602][T22027] loop5: p246 size 100663296 extends beyond EOD, truncated [ 1583.163025][T22027] loop5: p247 start 9 is beyond EOD, truncated [ 1583.163909][T22027] loop5: p248 start 10 is beyond EOD, truncated [ 1583.164868][T22027] loop5: p249 size 100663296 extends beyond EOD, truncated [ 1583.166435][T22027] loop5: p250 start 9 is beyond EOD, truncated [ 1583.167322][T22027] loop5: p251 start 10 is beyond EOD, truncated [ 1583.168291][T22027] loop5: p252 size 100663296 extends beyond EOD, truncated [ 1583.171114][T22027] loop5: p253 start 9 is beyond EOD, truncated [ 1583.172026][T22027] loop5: p254 start 10 is beyond EOD, truncated [ 1583.172950][T22027] loop5: p255 size 100663296 extends beyond EOD, truncated [ 1583.205854][T32589] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 1583.206019][T32589] loop5: p1 start 10 is beyond EOD, truncated [ 1583.221824][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1583.223337][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1583.224323][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1583.225572][T32589] loop5: p5 start 10 is beyond EOD, truncated [ 1583.226644][T32589] loop5: p6 size 100663296 extends beyond EOD, truncated [ 1583.228021][T32589] loop5: p7 start 9 is beyond EOD, truncated [ 1583.229218][T32589] loop5: p8 start 10 is beyond EOD, truncated [ 1583.230446][T32589] loop5: p9 size 100663296 extends beyond EOD, truncated [ 1583.232357][T32589] loop5: p10 start 9 is beyond EOD, truncated [ 1583.233486][T32589] loop5: p11 start 10 is beyond EOD, truncated [ 1583.234561][T32589] loop5: p12 size 100663296 extends beyond EOD, truncated [ 1583.236059][T32589] loop5: p13 start 9 is beyond EOD, truncated [ 1583.237004][T32589] loop5: p14 start 10 is beyond EOD, truncated [ 1583.237859][T32589] loop5: p15 size 100663296 extends beyond EOD, truncated [ 1583.239162][T32589] loop5: p16 start 9 is beyond EOD, truncated [ 1583.240268][T32589] loop5: p17 start 10 is beyond EOD, truncated [ 1583.241329][T32589] loop5: p18 size 100663296 extends beyond EOD, truncated [ 1583.242841][T32589] loop5: p19 start 9 is beyond EOD, truncated [ 1583.243761][T32589] loop5: p20 start 10 is beyond EOD, truncated [ 1583.244707][T32589] loop5: p21 size 100663296 extends beyond EOD, truncated [ 1583.246013][T32589] loop5: p22 start 9 is beyond EOD, truncated [ 1583.246859][T32589] loop5: p23 start 10 is beyond EOD, truncated [ 1583.247953][T32589] loop5: p24 size 100663296 extends beyond EOD, truncated [ 1583.249352][T32589] loop5: p25 start 9 is beyond EOD, truncated [ 1583.250534][T32589] loop5: p26 start 10 is beyond EOD, truncated [ 1583.251505][T32589] loop5: p27 size 100663296 extends beyond EOD, truncated [ 1583.253042][T32589] loop5: p28 start 9 is beyond EOD, truncated [ 1583.255113][T32589] loop5: p29 start 10 is beyond EOD, truncated [ 1583.256885][T32589] loop5: p30 size 100663296 extends beyond EOD, truncated [ 1583.258734][T32589] loop5: p31 start 9 is beyond EOD, truncated [ 1583.260730][T32589] loop5: p32 start 10 is beyond EOD, truncated [ 1583.262313][T32589] loop5: p33 size 100663296 extends beyond EOD, truncated [ 1583.264441][T32589] loop5: p34 start 9 is beyond EOD, truncated [ 1583.265605][T32589] loop5: p35 start 10 is beyond EOD, truncated [ 1583.267328][T32589] loop5: p36 size 100663296 extends beyond EOD, truncated [ 1583.268925][T32589] loop5: p37 start 9 is beyond EOD, truncated [ 1583.270896][T32589] loop5: p38 start 10 is beyond EOD, truncated [ 1583.272423][T32589] loop5: p39 size 100663296 extends beyond EOD, truncated [ 1583.275389][T32589] loop5: p40 start 9 is beyond EOD, truncated [ 1583.277500][T32589] loop5: p41 start 10 is beyond EOD, truncated [ 1583.278788][T32589] loop5: p42 size 100663296 extends beyond EOD, truncated [ 1583.281508][T32589] loop5: p43 start 9 is beyond EOD, truncated [ 1583.282757][T32589] loop5: p44 start 10 is beyond EOD, truncated [ 1583.284238][T32589] loop5: p45 size 100663296 extends beyond EOD, truncated [ 1583.286244][T32589] loop5: p46 start 9 is beyond EOD, truncated [ 1583.287235][T32589] loop5: p47 start 10 is beyond EOD, truncated [ 1583.288373][T32589] loop5: p48 size 100663296 extends beyond EOD, truncated [ 1583.289902][T32589] loop5: p49 start 9 is beyond EOD, truncated [ 1583.291686][T32589] loop5: p50 start 10 is beyond EOD, truncated [ 1583.292618][T32589] loop5: p51 size 100663296 extends beyond EOD, truncated [ 1583.294171][T32589] loop5: p52 start 9 is beyond EOD, truncated [ 1583.295757][T32589] loop5: p53 start 10 is beyond EOD, truncated [ 1583.296849][T32589] loop5: p54 size 100663296 extends beyond EOD, truncated [ 1583.298567][T32589] loop5: p55 start 9 is beyond EOD, truncated [ 1583.299701][T32589] loop5: p56 start 10 is beyond EOD, truncated [ 1583.300710][T32589] loop5: p57 size 100663296 extends beyond EOD, truncated [ 1583.303190][T32589] loop5: p58 start 9 is beyond EOD, truncated [ 1583.304760][T32589] loop5: p59 start 10 is beyond EOD, truncated [ 1583.306271][T32589] loop5: p60 size 100663296 extends beyond EOD, truncated [ 1583.308015][T32589] loop5: p61 start 9 is beyond EOD, truncated [ 1583.309800][T32589] loop5: p62 start 10 is beyond EOD, truncated [ 1583.311834][T32589] loop5: p63 size 100663296 extends beyond EOD, truncated [ 1583.314909][T32589] loop5: p64 start 9 is beyond EOD, truncated [ 1583.317059][T32589] loop5: p65 start 10 is beyond EOD, truncated [ 1583.318275][T32589] loop5: p66 size 100663296 extends beyond EOD, truncated [ 1583.320498][T32589] loop5: p67 start 9 is beyond EOD, truncated [ 1583.321876][T32589] loop5: p68 start 10 is beyond EOD, truncated [ 1583.323389][T32589] loop5: p69 size 100663296 extends beyond EOD, truncated [ 1583.325149][T32589] loop5: p70 start 9 is beyond EOD, truncated [ 1583.327297][T32589] loop5: p71 start 10 is beyond EOD, truncated [ 1583.328739][T32589] loop5: p72 size 100663296 extends beyond EOD, truncated [ 1583.330849][T32589] loop5: p73 start 9 is beyond EOD, truncated [ 1583.332391][T32589] loop5: p74 start 10 is beyond EOD, truncated [ 1583.333637][T32589] loop5: p75 size 100663296 extends beyond EOD, truncated [ 1583.335472][T32589] loop5: p76 start 9 is beyond EOD, truncated [ 1583.336635][T32589] loop5: p77 start 10 is beyond EOD, truncated [ 1583.337769][T32589] loop5: p78 size 100663296 extends beyond EOD, truncated [ 1583.339412][T32589] loop5: p79 start 9 is beyond EOD, truncated [ 1583.340955][T32589] loop5: p80 start 10 is beyond EOD, truncated [ 1583.342800][T32589] loop5: p81 size 100663296 extends beyond EOD, truncated [ 1583.345166][T32589] loop5: p82 start 9 is beyond EOD, truncated [ 1583.347406][T32589] loop5: p83 start 10 is beyond EOD, truncated [ 1583.348524][T32589] loop5: p84 size 100663296 extends beyond EOD, truncated [ 1583.350587][T32589] loop5: p85 start 9 is beyond EOD, truncated [ 1583.352064][T32589] loop5: p86 start 10 is beyond EOD, truncated [ 1583.353315][T32589] loop5: p87 size 100663296 extends beyond EOD, truncated [ 1583.354830][T32589] loop5: p88 start 9 is beyond EOD, truncated [ 1583.356543][T32589] loop5: p89 start 10 is beyond EOD, truncated [ 1583.358805][T32589] loop5: p90 size 100663296 extends beyond EOD, truncated [ 1583.360864][T32589] loop5: p91 start 9 is beyond EOD, truncated [ 1583.362099][T32589] loop5: p92 start 10 is beyond EOD, truncated [ 1583.363143][T32589] loop5: p93 size 100663296 extends beyond EOD, truncated [ 1583.364917][T32589] loop5: p94 start 9 is beyond EOD, truncated [ 1583.366226][T32589] loop5: p95 start 10 is beyond EOD, truncated [ 1583.367741][T32589] loop5: p96 size 100663296 extends beyond EOD, truncated [ 1583.369976][T32589] loop5: p97 start 9 is beyond EOD, truncated [ 1583.371640][T32589] loop5: p98 start 10 is beyond EOD, truncated [ 1583.373224][T32589] loop5: p99 size 100663296 extends beyond EOD, truncated [ 1583.375911][T32589] loop5: p100 start 9 is beyond EOD, truncated [ 1583.377324][T32589] loop5: p101 start 10 is beyond EOD, truncated [ 1583.379231][T32589] loop5: p102 size 100663296 extends beyond EOD, truncated [ 1583.381886][T32589] loop5: p103 start 9 is beyond EOD, truncated [ 1583.384219][T32589] loop5: p104 start 10 is beyond EOD, truncated [ 1583.385333][T32589] loop5: p105 size 100663296 extends beyond EOD, truncated [ 1583.387055][T32589] loop5: p106 start 9 is beyond EOD, truncated [ 1583.387952][T32589] loop5: p107 start 10 is beyond EOD, truncated [ 1583.389177][T32589] loop5: p108 size 100663296 extends beyond EOD, truncated [ 1583.391650][T32589] loop5: p109 start 9 is beyond EOD, truncated [ 1583.393256][T32589] loop5: p110 start 10 is beyond EOD, truncated [ 1583.394377][T32589] loop5: p111 size 100663296 extends beyond EOD, truncated [ 1583.396047][T32589] loop5: p112 start 9 is beyond EOD, truncated [ 1583.397199][T32589] loop5: p113 start 10 is beyond EOD, truncated [ 1583.398687][T32589] loop5: p114 size 100663296 extends beyond EOD, truncated [ 1583.400675][T32589] loop5: p115 start 9 is beyond EOD, truncated [ 1583.402181][T32589] loop5: p116 start 10 is beyond EOD, truncated [ 1583.403598][T32589] loop5: p117 size 100663296 extends beyond EOD, truncated [ 1583.405401][T32589] loop5: p118 start 9 is beyond EOD, truncated [ 1583.407188][T32589] loop5: p119 start 10 is beyond EOD, truncated [ 1583.409201][T32589] loop5: p120 size 100663296 extends beyond EOD, truncated [ 1583.412207][T32589] loop5: p121 start 9 is beyond EOD, truncated [ 1583.413725][T32589] loop5: p122 start 10 is beyond EOD, truncated [ 1583.415013][T32589] loop5: p123 size 100663296 extends beyond EOD, truncated [ 1583.416890][T32589] loop5: p124 start 9 is beyond EOD, truncated [ 1583.418423][T32589] loop5: p125 start 10 is beyond EOD, truncated [ 1583.420072][T32589] loop5: p126 size 100663296 extends beyond EOD, truncated [ 1583.422414][T32589] loop5: p127 start 9 is beyond EOD, truncated [ 1583.423909][T32589] loop5: p128 start 10 is beyond EOD, truncated [ 1583.424953][T32589] loop5: p129 size 100663296 extends beyond EOD, truncated [ 1583.426910][T32589] loop5: p130 start 9 is beyond EOD, truncated [ 1583.427976][T32589] loop5: p131 start 10 is beyond EOD, truncated [ 1583.429448][T32589] loop5: p132 size 100663296 extends beyond EOD, truncated [ 1583.432112][T32589] loop5: p133 start 9 is beyond EOD, truncated [ 1583.433887][T32589] loop5: p134 start 10 is beyond EOD, truncated [ 1583.435476][T32589] loop5: p135 size 100663296 extends beyond EOD, truncated [ 1583.437665][T32589] loop5: p136 start 9 is beyond EOD, truncated [ 1583.439120][T32589] loop5: p137 start 10 is beyond EOD, truncated [ 1583.440980][T32589] loop5: p138 size 100663296 extends beyond EOD, truncated [ 1583.443237][T32589] loop5: p139 start 9 is beyond EOD, truncated [ 1583.445292][T32589] loop5: p140 start 10 is beyond EOD, truncated [ 1583.447053][T32589] loop5: p141 size 100663296 extends beyond EOD, truncated [ 1583.449211][T32589] loop5: p142 start 9 is beyond EOD, truncated [ 1583.450529][T32589] loop5: p143 start 10 is beyond EOD, truncated [ 1583.452131][T32589] loop5: p144 size 100663296 extends beyond EOD, truncated [ 1583.453828][T32589] loop5: p145 start 9 is beyond EOD, truncated [ 1583.455192][T32589] loop5: p146 start 10 is beyond EOD, truncated [ 1583.456527][T32589] loop5: p147 size 100663296 extends beyond EOD, truncated [ 1583.458198][T32589] loop5: p148 start 9 is beyond EOD, truncated [ 1583.459466][T32589] loop5: p149 start 10 is beyond EOD, truncated [ 1583.460981][T32589] loop5: p150 size 100663296 extends beyond EOD, truncated [ 1583.463494][T32589] loop5: p151 start 9 is beyond EOD, truncated [ 1583.464427][T32589] loop5: p152 start 10 is beyond EOD, truncated [ 1583.465943][T32589] loop5: p153 size 100663296 extends beyond EOD, truncated [ 1583.467549][T32589] loop5: p154 start 9 is beyond EOD, truncated [ 1583.468493][T32589] loop5: p155 start 10 is beyond EOD, truncated [ 1583.469554][T32589] loop5: p156 size 100663296 extends beyond EOD, truncated [ 1583.471594][T32589] loop5: p157 start 9 is beyond EOD, truncated [ 1583.473347][T32589] loop5: p158 start 10 is beyond EOD, truncated [ 1583.474532][T32589] loop5: p159 size 100663296 extends beyond EOD, truncated [ 1583.477113][T32589] loop5: p160 start 9 is beyond EOD, truncated [ 1583.478988][T32589] loop5: p161 start 10 is beyond EOD, truncated [ 1583.480516][T32589] loop5: p162 size 100663296 extends beyond EOD, truncated [ 1583.482636][T32589] loop5: p163 start 9 is beyond EOD, truncated [ 1583.484145][T32589] loop5: p164 start 10 is beyond EOD, truncated [ 1583.486199][T32589] loop5: p165 size 100663296 extends beyond EOD, truncated [ 1583.488940][T32589] loop5: p166 start 9 is beyond EOD, truncated [ 1583.491415][T32589] loop5: p167 start 10 is beyond EOD, truncated [ 1583.493480][T32589] loop5: p168 size 100663296 extends beyond EOD, truncated [ 1583.495823][T32589] loop5: p169 start 9 is beyond EOD, truncated [ 1583.497699][T32589] loop5: p170 start 10 is beyond EOD, truncated [ 1583.498963][T32589] loop5: p171 size 100663296 extends beyond EOD, truncated [ 1583.501310][T32589] loop5: p172 start 9 is beyond EOD, truncated [ 1583.502638][T32589] loop5: p173 start 10 is beyond EOD, truncated [ 1583.504135][T32589] loop5: p174 size 100663296 extends beyond EOD, truncated [ 1583.505982][T32589] loop5: p175 start 9 is beyond EOD, truncated [ 1583.507594][T32589] loop5: p176 start 10 is beyond EOD, truncated [ 1583.510755][T32589] loop5: p177 size 100663296 extends beyond EOD, truncated [ 1583.512930][T32589] loop5: p178 start 9 is beyond EOD, truncated [ 1583.515005][T32589] loop5: p179 start 10 is beyond EOD, truncated [ 1583.516816][T32589] loop5: p180 size 100663296 extends beyond EOD, truncated [ 1583.518340][T32589] loop5: p181 start 9 is beyond EOD, truncated [ 1583.519429][T32589] loop5: p182 start 10 is beyond EOD, truncated [ 1583.520377][T32589] loop5: p183 size 100663296 extends beyond EOD, truncated [ 1583.523025][T32589] loop5: p184 start 9 is beyond EOD, truncated [ 1583.525304][T32589] loop5: p185 start 10 is beyond EOD, truncated [ 1583.526537][T32589] loop5: p186 size 100663296 extends beyond EOD, truncated [ 1583.528665][T32589] loop5: p187 start 9 is beyond EOD, truncated [ 1583.530373][T32589] loop5: p188 start 10 is beyond EOD, truncated [ 1583.531695][T32589] loop5: p189 size 100663296 extends beyond EOD, truncated [ 1583.533475][T32589] loop5: p190 start 9 is beyond EOD, truncated [ 1583.535580][T32589] loop5: p191 start 10 is beyond EOD, truncated [ 1583.536824][T32589] loop5: p192 size 100663296 extends beyond EOD, truncated [ 1583.539662][T32589] loop5: p193 start 9 is beyond EOD, truncated [ 1583.541844][T32589] loop5: p194 start 10 is beyond EOD, truncated [ 1583.543930][T32589] loop5: p195 size 100663296 extends beyond EOD, truncated [ 1583.546130][T32589] loop5: p196 start 9 is beyond EOD, truncated [ 1583.547835][T32589] loop5: p197 start 10 is beyond EOD, truncated [ 1583.549114][T32589] loop5: p198 size 100663296 extends beyond EOD, truncated [ 1583.551781][T32589] loop5: p199 start 9 is beyond EOD, truncated [ 1583.553273][T32589] loop5: p200 start 10 is beyond EOD, truncated [ 1583.554824][T32589] loop5: p201 size 100663296 extends beyond EOD, truncated [ 1583.556566][T32589] loop5: p202 start 9 is beyond EOD, truncated [ 1583.558022][T32589] loop5: p203 start 10 is beyond EOD, truncated [ 1583.559193][T32589] loop5: p204 size 100663296 extends beyond EOD, truncated [ 1583.562333][T32589] loop5: p205 start 9 is beyond EOD, truncated [ 1583.563905][T32589] loop5: p206 start 10 is beyond EOD, truncated [ 1583.565143][T32589] loop5: p207 size 100663296 extends beyond EOD, truncated [ 1583.566859][T32589] loop5: p208 start 9 is beyond EOD, truncated [ 1583.568536][T32589] loop5: p209 start 10 is beyond EOD, truncated [ 1583.569384][T32589] loop5: p210 size 100663296 extends beyond EOD, truncated [ 1583.571696][T32589] loop5: p211 start 9 is beyond EOD, truncated [ 1583.573180][T32589] loop5: p212 start 10 is beyond EOD, truncated [ 1583.578897][T32589] loop5: p213 size 100663296 extends beyond EOD, truncated [ 1583.581568][T32589] loop5: p214 start 9 is beyond EOD, truncated [ 1583.582626][T32589] loop5: p215 start 10 is beyond EOD, truncated [ 1583.584307][T32589] loop5: p216 size 100663296 extends beyond EOD, truncated [ 1583.586390][T32589] loop5: p217 start 9 is beyond EOD, truncated [ 1583.587384][T32589] loop5: p218 start 10 is beyond EOD, truncated [ 1583.588254][T32589] loop5: p219 size 100663296 extends beyond EOD, truncated [ 1583.590268][T32589] loop5: p220 start 9 is beyond EOD, truncated [ 1583.591645][T32589] loop5: p221 start 10 is beyond EOD, truncated [ 1583.592732][T32589] loop5: p222 size 100663296 extends beyond EOD, truncated [ 1583.594309][T32589] loop5: p223 start 9 is beyond EOD, truncated [ 1583.595641][T32589] loop5: p224 start 10 is beyond EOD, truncated [ 1583.597252][T32589] loop5: p225 size 100663296 extends beyond EOD, truncated [ 1583.599253][T32589] loop5: p226 start 9 is beyond EOD, truncated [ 1583.600946][T32589] loop5: p227 start 10 is beyond EOD, truncated [ 1583.602924][T32589] loop5: p228 size 100663296 extends beyond EOD, truncated [ 1583.605068][T32589] loop5: p229 start 9 is beyond EOD, truncated [ 1583.606498][T32589] loop5: p230 start 10 is beyond EOD, truncated [ 1583.608558][T32589] loop5: p231 size 100663296 extends beyond EOD, truncated [ 1583.610049][T32589] loop5: p232 start 9 is beyond EOD, truncated [ 1583.611095][T32589] loop5: p233 start 10 is beyond EOD, truncated [ 1583.612091][T32589] loop5: p234 size 100663296 extends beyond EOD, truncated [ 1583.613613][T32589] loop5: p235 start 9 is beyond EOD, truncated [ 1583.614720][T32589] loop5: p236 start 10 is beyond EOD, truncated [ 1583.615666][T32589] loop5: p237 size 100663296 extends beyond EOD, truncated [ 1583.616909][T32589] loop5: p238 start 9 is beyond EOD, truncated [ 1583.618044][T32589] loop5: p239 start 10 is beyond EOD, truncated [ 1583.619089][T32589] loop5: p240 size 100663296 extends beyond EOD, truncated [ 1583.621908][T32589] loop5: p241 start 9 is beyond EOD, truncated [ 1583.622965][T32589] loop5: p242 start 10 is beyond EOD, truncated [ 1583.623911][T32589] loop5: p243 size 100663296 extends beyond EOD, truncated [ 1583.625284][T32589] loop5: p244 start 9 is beyond EOD, truncated [ 1583.626725][T32589] loop5: p245 start 10 is beyond EOD, truncated [ 1583.627874][T32589] loop5: p246 size 100663296 extends beyond EOD, truncated [ 1583.629399][T32589] loop5: p247 start 9 is beyond EOD, truncated [ 1583.630548][T32589] loop5: p248 start 10 is beyond EOD, truncated [ 1583.631533][T32589] loop5: p249 size 100663296 extends beyond EOD, truncated [ 1583.633084][T32589] loop5: p250 start 9 is beyond EOD, truncated [ 1583.633978][T32589] loop5: p251 start 10 is beyond EOD, truncated [ 1583.634906][T32589] loop5: p252 size 100663296 extends beyond EOD, truncated [ 1583.636668][T32589] loop5: p253 start 9 is beyond EOD, truncated [ 1583.637632][T32589] loop5: p254 start 10 is beyond EOD, truncated [ 1583.638555][T32589] loop5: p255 size 100663296 extends beyond EOD, truncated 11:49:07 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020181ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.&file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:07 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xe00000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:07 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0xfffffff7, 0x80000000) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x25, 0x0, 0x5}, {0x6}]}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="00010000000000", @ANYRESHEX=r2, @ANYBLOB=',\x00']) r3 = fork() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) sendmsg$unix(r1, &(0x7f0000000300)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000140)="fa039d5c63866aa09b9c4daaf2f015dd582ffb922f2f0691cea9eda26bdb9ca505cf18302677a5ee9889b9987646a2344bc6fddb1a460fa3af4f939da205f3a1b06b36239da5f6f7bbb66a4f81a31849", 0x50}, {&(0x7f00000001c0)="5c934d41afa264f82752963ad1c26620e1ec9af040fcd1583a0d23d4fd1c84a78a1da98793eb0c645748d05a8c004d3dde67a15c3405189d18434272a1f5d2f036c12aca1faa84ff849b8b0e9a1611bfc7d538d5c69aa54a61d0d1cef235ec7fbc278162b279c8f1a716b1111a27dee5", 0x70}, {&(0x7f0000000000)="11d959a6c898eb133e030aa4befca8cdd898895226acd8b0ad325f810101367a3496eb843343fc", 0x27}], 0x3, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r5, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8}}}], 0x40, 0x8840}, 0x18c1ac8e1ded7dda) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 11:49:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='..file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1583.859673][T22428] 9pnet: Insufficient options for proto=fd [ 1583.866115][T22430] loop5: detected capacity change from 0 to 1 [ 1583.875526][T22440] 9pnet: Insufficient options for proto=fd 11:49:07 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.0file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:07 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="0201630000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1583.898071][T22430] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 1583.898244][T22430] loop5: p1 start 10 is beyond EOD, truncated [ 1583.914465][T22430] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1583.931647][T22431] loop4: detected capacity change from 0 to 1 [ 1583.937721][T22430] loop5: p3 start 9 is beyond EOD, truncated [ 1583.939092][T22430] loop5: p4 size 2 extends beyond EOD, truncated 11:49:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400f62cbc5c1515614bdcc7853c18f5352d00001000010000000000000000000020000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0xfa0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7464b64b028d9086b6616e5deeff34fd8c4dc43520195b1d0c7b4a50f73db044a89bb41e0bf5f415a700115d9f415fab1aea8367bbb3cf72ab2892aca00a09ad7bf4c865c6a3f580143a9b72d5995f02dd0196d5d9e9be49ce9457f2e05ead79c3cae4cf18b1900e214669f58651c8aadb45650b98", @ANYRESHEX, @ANYBLOB="000000000000001ac44d36059a5dbf9aff570da3aa55e08d9ad4c242344554d8348e1bf5e2da17c5a9a5743aca46b536a74c0918664eb38946776b1136e5c03f6a58653b821101a18c0f7a31b8753d6b6eaa6aa41a6aa980de5e9041cc0d98d0519b7f13b4883e6ff7b34abe574bb67aa92013f3aa3893e81cc15a27b62445e606b6799789b8fd5db069acc9a2bc59e7ae20fa9eae6b", @ANYRESHEX, @ANYBLOB=',\x00']) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000180)={0x8001, 0x97, 0x7f, 0x5770f526, 0x5}) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2efe66696c6530"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1583.961096][T22430] loop5: p5 start 10 is beyond EOD, truncated [ 1583.961612][T22431] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1583.962363][T22430] loop5: p6 size 100663296 extends beyond EOD, truncated [ 1583.963498][T22431] loop4: partition table partially beyond EOD, truncated [ 1583.963553][T22431] loop4: p1 start 10 is beyond EOD, truncated [ 1583.967266][T22431] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1583.969187][T22431] loop4: p3 start 9 is beyond EOD, truncated [ 1583.970408][T22431] loop4: p4 size 2 extends beyond EOD, truncated [ 1583.973439][T22431] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1583.975355][T22431] loop4: p6 start 9 is beyond EOD, truncated [ 1583.978679][T22430] loop5: p7 start 9 is beyond EOD, truncated [ 1583.980027][T22430] loop5: p8 start 10 is beyond EOD, truncated [ 1583.981102][T22430] loop5: p9 size 100663296 extends beyond EOD, truncated [ 1583.984083][T22430] loop5: p10 start 9 is beyond EOD, truncated [ 1583.985149][T22430] loop5: p11 start 10 is beyond EOD, truncated [ 1583.986155][T22430] loop5: p12 size 100663296 extends beyond EOD, truncated [ 1583.998662][T22430] loop5: p13 start 9 is beyond EOD, truncated [ 1583.999856][T22430] loop5: p14 start 10 is beyond EOD, truncated [ 1584.000885][T22430] loop5: p15 size 100663296 extends beyond EOD, truncated [ 1584.013609][T22430] loop5: p16 start 9 is beyond EOD, truncated [ 1584.014838][T22430] loop5: p17 start 10 is beyond EOD, truncated [ 1584.015849][T22430] loop5: p18 size 100663296 extends beyond EOD, truncated [ 1584.024597][T22430] loop5: p19 start 9 is beyond EOD, truncated [ 1584.025768][T22430] loop5: p20 start 10 is beyond EOD, truncated [ 1584.026674][T22430] loop5: p21 size 100663296 extends beyond EOD, truncated [ 1584.034747][T22430] loop5: p22 start 9 is beyond EOD, truncated [ 1584.036152][T22430] loop5: p23 start 10 is beyond EOD, truncated [ 1584.037159][T22430] loop5: p24 size 100663296 extends beyond EOD, truncated [ 1584.040064][T22430] loop5: p25 start 9 is beyond EOD, truncated [ 1584.041523][T22430] loop5: p26 start 10 is beyond EOD, truncated [ 1584.042481][T22430] loop5: p27 size 100663296 extends beyond EOD, truncated [ 1584.060382][T22430] loop5: p28 start 9 is beyond EOD, truncated [ 1584.061483][T22430] loop5: p29 start 10 is beyond EOD, truncated [ 1584.062358][T22430] loop5: p30 size 100663296 extends beyond EOD, truncated [ 1584.066289][T22430] loop5: p31 start 9 is beyond EOD, truncated [ 1584.067364][T22430] loop5: p32 start 10 is beyond EOD, truncated [ 1584.068346][T22430] loop5: p33 size 100663296 extends beyond EOD, truncated [ 1584.072391][T22430] loop5: p34 start 9 is beyond EOD, truncated [ 1584.073653][T22430] loop5: p35 start 10 is beyond EOD, truncated [ 1584.074607][T22430] loop5: p36 size 100663296 extends beyond EOD, truncated [ 1584.077412][T22430] loop5: p37 start 9 is beyond EOD, truncated [ 1584.078511][T22430] loop5: p38 start 10 is beyond EOD, truncated [ 1584.079834][T22430] loop5: p39 size 100663296 extends beyond EOD, truncated [ 1584.084690][T22430] loop5: p40 start 9 is beyond EOD, truncated [ 1584.085782][T22430] loop5: p41 start 10 is beyond EOD, truncated [ 1584.087214][T22430] loop5: p42 size 100663296 extends beyond EOD, truncated [ 1584.090060][T22430] loop5: p43 start 9 is beyond EOD, truncated [ 1584.091013][T22430] loop5: p44 start 10 is beyond EOD, truncated [ 1584.091978][T22430] loop5: p45 size 100663296 extends beyond EOD, truncated [ 1584.094381][T22430] loop5: p46 start 9 is beyond EOD, truncated [ 1584.095537][T22430] loop5: p47 start 10 is beyond EOD, truncated [ 1584.096874][T22430] loop5: p48 size 100663296 extends beyond EOD, truncated [ 1584.099173][T22430] loop5: p49 start 9 is beyond EOD, truncated [ 1584.100161][T22430] loop5: p50 start 10 is beyond EOD, truncated [ 1584.101097][T22430] loop5: p51 size 100663296 extends beyond EOD, truncated [ 1584.102588][T22430] loop5: p52 start 9 is beyond EOD, truncated [ 1584.103764][T22430] loop5: p53 start 10 is beyond EOD, truncated [ 1584.104896][T22430] loop5: p54 size 100663296 extends beyond EOD, truncated [ 1584.106297][T22430] loop5: p55 start 9 is beyond EOD, truncated [ 1584.107405][T22430] loop5: p56 start 10 is beyond EOD, truncated [ 1584.108441][T22430] loop5: p57 size 100663296 extends beyond EOD, truncated [ 1584.109755][T22430] loop5: p58 start 9 is beyond EOD, truncated [ 1584.111052][T22430] loop5: p59 start 10 is beyond EOD, truncated [ 1584.112365][T22430] loop5: p60 size 100663296 extends beyond EOD, truncated [ 1584.114012][T22430] loop5: p61 start 9 is beyond EOD, truncated [ 1584.115053][T22430] loop5: p62 start 10 is beyond EOD, truncated [ 1584.116617][T22430] loop5: p63 size 100663296 extends beyond EOD, truncated [ 1584.118438][T22430] loop5: p64 start 9 is beyond EOD, truncated [ 1584.119801][T22430] loop5: p65 start 10 is beyond EOD, truncated [ 1584.121464][T22430] loop5: p66 size 100663296 extends beyond EOD, truncated [ 1584.123358][T22430] loop5: p67 start 9 is beyond EOD, truncated [ 1584.124523][T22430] loop5: p68 start 10 is beyond EOD, truncated [ 1584.125528][T22430] loop5: p69 size 100663296 extends beyond EOD, truncated [ 1584.127158][T22430] loop5: p70 start 9 is beyond EOD, truncated [ 1584.128189][T22430] loop5: p71 start 10 is beyond EOD, truncated [ 1584.130554][T22430] loop5: p72 size 100663296 extends beyond EOD, truncated [ 1584.132102][T22430] loop5: p73 start 9 is beyond EOD, truncated [ 1584.133060][T22430] loop5: p74 start 10 is beyond EOD, truncated [ 1584.134194][T22430] loop5: p75 size 100663296 extends beyond EOD, truncated [ 1584.135631][T22430] loop5: p76 start 9 is beyond EOD, truncated [ 1584.136671][T22430] loop5: p77 start 10 is beyond EOD, truncated [ 1584.137932][T22430] loop5: p78 size 100663296 extends beyond EOD, truncated [ 1584.139321][T22430] loop5: p79 start 9 is beyond EOD, truncated [ 1584.140701][T22430] loop5: p80 start 10 is beyond EOD, truncated [ 1584.141872][T22430] loop5: p81 size 100663296 extends beyond EOD, truncated [ 1584.143500][T22430] loop5: p82 start 9 is beyond EOD, truncated [ 1584.144465][T22430] loop5: p83 start 10 is beyond EOD, truncated [ 1584.145597][T22430] loop5: p84 size 100663296 extends beyond EOD, truncated [ 1584.146970][T22430] loop5: p85 start 9 is beyond EOD, truncated [ 1584.148466][T22430] loop5: p86 start 10 is beyond EOD, truncated [ 1584.149675][T22430] loop5: p87 size 100663296 extends beyond EOD, truncated [ 1584.151795][T22430] loop5: p88 start 9 is beyond EOD, truncated [ 1584.152960][T22430] loop5: p89 start 10 is beyond EOD, truncated [ 1584.154102][T22430] loop5: p90 size 100663296 extends beyond EOD, truncated [ 1584.155861][T22430] loop5: p91 start 9 is beyond EOD, truncated [ 1584.157411][T22430] loop5: p92 start 10 is beyond EOD, truncated [ 1584.158268][T22430] loop5: p93 size 100663296 extends beyond EOD, truncated [ 1584.159706][T22430] loop5: p94 start 9 is beyond EOD, truncated [ 1584.160992][T22430] loop5: p95 start 10 is beyond EOD, truncated [ 1584.162314][T22430] loop5: p96 size 100663296 extends beyond EOD, truncated [ 1584.165422][T22430] loop5: p97 start 9 is beyond EOD, truncated [ 1584.166445][T22430] loop5: p98 start 10 is beyond EOD, truncated [ 1584.167443][T22430] loop5: p99 size 100663296 extends beyond EOD, truncated [ 1584.169137][T22430] loop5: p100 start 9 is beyond EOD, truncated [ 1584.170268][T22430] loop5: p101 start 10 is beyond EOD, truncated [ 1584.171402][T22430] loop5: p102 size 100663296 extends beyond EOD, truncated [ 1584.173296][T22430] loop5: p103 start 9 is beyond EOD, truncated [ 1584.174770][T22430] loop5: p104 start 10 is beyond EOD, truncated [ 1584.176141][T22430] loop5: p105 size 100663296 extends beyond EOD, truncated [ 1584.178128][T22430] loop5: p106 start 9 is beyond EOD, truncated [ 1584.179387][T22430] loop5: p107 start 10 is beyond EOD, truncated [ 1584.180379][T22430] loop5: p108 size 100663296 extends beyond EOD, truncated [ 1584.183660][T22430] loop5: p109 start 9 is beyond EOD, truncated [ 1584.184773][T22430] loop5: p110 start 10 is beyond EOD, truncated [ 1584.185767][T22430] loop5: p111 size 100663296 extends beyond EOD, truncated [ 1584.187165][T22430] loop5: p112 start 9 is beyond EOD, truncated [ 1584.188411][T22430] loop5: p113 start 10 is beyond EOD, truncated [ 1584.190011][T22430] loop5: p114 size 100663296 extends beyond EOD, truncated [ 1584.192574][T22430] loop5: p115 start 9 is beyond EOD, truncated [ 1584.193670][T22430] loop5: p116 start 10 is beyond EOD, truncated [ 1584.194772][T22430] loop5: p117 size 100663296 extends beyond EOD, truncated [ 1584.196553][T22430] loop5: p118 start 9 is beyond EOD, truncated [ 1584.197734][T22430] loop5: p119 start 10 is beyond EOD, truncated [ 1584.198786][T22430] loop5: p120 size 100663296 extends beyond EOD, truncated [ 1584.200467][T22430] loop5: p121 start 9 is beyond EOD, truncated [ 1584.201626][T22430] loop5: p122 start 10 is beyond EOD, truncated [ 1584.202581][T22430] loop5: p123 size 100663296 extends beyond EOD, truncated [ 1584.204295][T22430] loop5: p124 start 9 is beyond EOD, truncated [ 1584.205425][T22430] loop5: p125 start 10 is beyond EOD, truncated [ 1584.206372][T22430] loop5: p126 size 100663296 extends beyond EOD, truncated [ 1584.208578][T22430] loop5: p127 start 9 is beyond EOD, truncated [ 1584.209548][T22430] loop5: p128 start 10 is beyond EOD, truncated [ 1584.210423][T22430] loop5: p129 size 100663296 extends beyond EOD, truncated [ 1584.212812][T22430] loop5: p130 start 9 is beyond EOD, truncated [ 1584.213833][T22430] loop5: p131 start 10 is beyond EOD, truncated [ 1584.214983][T22430] loop5: p132 size 100663296 extends beyond EOD, truncated [ 1584.216693][T22430] loop5: p133 start 9 is beyond EOD, truncated [ 1584.217619][T22430] loop5: p134 start 10 is beyond EOD, truncated [ 1584.218854][T22430] loop5: p135 size 100663296 extends beyond EOD, truncated [ 1584.220425][T22430] loop5: p136 start 9 is beyond EOD, truncated [ 1584.221412][T22430] loop5: p137 start 10 is beyond EOD, truncated [ 1584.222409][T22430] loop5: p138 size 100663296 extends beyond EOD, truncated [ 1584.224240][T22430] loop5: p139 start 9 is beyond EOD, truncated [ 1584.225176][T22430] loop5: p140 start 10 is beyond EOD, truncated [ 1584.226176][T22430] loop5: p141 size 100663296 extends beyond EOD, truncated [ 1584.227732][T22430] loop5: p142 start 9 is beyond EOD, truncated [ 1584.228711][T22430] loop5: p143 start 10 is beyond EOD, truncated [ 1584.229735][T22430] loop5: p144 size 100663296 extends beyond EOD, truncated [ 1584.231928][T22430] loop5: p145 start 9 is beyond EOD, truncated [ 1584.232962][T22430] loop5: p146 start 10 is beyond EOD, truncated [ 1584.233850][T22430] loop5: p147 size 100663296 extends beyond EOD, truncated [ 1584.235189][T22430] loop5: p148 start 9 is beyond EOD, truncated [ 1584.236241][T22430] loop5: p149 start 10 is beyond EOD, truncated [ 1584.237167][T22430] loop5: p150 size 100663296 extends beyond EOD, truncated [ 1584.239003][T22430] loop5: p151 start 9 is beyond EOD, truncated [ 1584.239936][T22430] loop5: p152 start 10 is beyond EOD, truncated [ 1584.240888][T22430] loop5: p153 size 100663296 extends beyond EOD, truncated [ 1584.242673][T22430] loop5: p154 start 9 is beyond EOD, truncated [ 1584.243601][T22430] loop5: p155 start 10 is beyond EOD, truncated [ 1584.244487][T22430] loop5: p156 size 100663296 extends beyond EOD, truncated [ 1584.245869][T22430] loop5: p157 start 9 is beyond EOD, truncated [ 1584.246819][T22430] loop5: p158 start 10 is beyond EOD, truncated [ 1584.247683][T22430] loop5: p159 size 100663296 extends beyond EOD, truncated [ 1584.248985][T22430] loop5: p160 start 9 is beyond EOD, truncated [ 1584.249960][T22430] loop5: p161 start 10 is beyond EOD, truncated [ 1584.251086][T22430] loop5: p162 size 100663296 extends beyond EOD, truncated [ 1584.252706][T22430] loop5: p163 start 9 is beyond EOD, truncated [ 1584.253889][T22430] loop5: p164 start 10 is beyond EOD, truncated [ 1584.255201][T22430] loop5: p165 size 100663296 extends beyond EOD, truncated [ 1584.256434][T22430] loop5: p166 start 9 is beyond EOD, truncated [ 1584.257572][T22430] loop5: p167 start 10 is beyond EOD, truncated [ 1584.258755][T22430] loop5: p168 size 100663296 extends beyond EOD, truncated [ 1584.260229][T22430] loop5: p169 start 9 is beyond EOD, truncated [ 1584.261408][T22430] loop5: p170 start 10 is beyond EOD, truncated [ 1584.262357][T22430] loop5: p171 size 100663296 extends beyond EOD, truncated [ 1584.263808][T22430] loop5: p172 start 9 is beyond EOD, truncated [ 1584.264880][T22430] loop5: p173 start 10 is beyond EOD, truncated [ 1584.266290][T22430] loop5: p174 size 100663296 extends beyond EOD, truncated [ 1584.267662][T22430] loop5: p175 start 9 is beyond EOD, truncated [ 1584.268685][T22430] loop5: p176 start 10 is beyond EOD, truncated [ 1584.269706][T22430] loop5: p177 size 100663296 extends beyond EOD, truncated [ 1584.272589][T22430] loop5: p178 start 9 is beyond EOD, truncated [ 1584.273686][T22430] loop5: p179 start 10 is beyond EOD, truncated [ 1584.275010][T22430] loop5: p180 size 100663296 extends beyond EOD, truncated [ 1584.276343][T22430] loop5: p181 start 9 is beyond EOD, truncated [ 1584.277384][T22430] loop5: p182 start 10 is beyond EOD, truncated [ 1584.278544][T22430] loop5: p183 size 100663296 extends beyond EOD, truncated [ 1584.279990][T22430] loop5: p184 start 9 is beyond EOD, truncated [ 1584.280978][T22430] loop5: p185 start 10 is beyond EOD, truncated [ 1584.282520][T22430] loop5: p186 size 100663296 extends beyond EOD, truncated [ 1584.283993][T22430] loop5: p187 start 9 is beyond EOD, truncated [ 1584.285080][T22430] loop5: p188 start 10 is beyond EOD, truncated [ 1584.286352][T22430] loop5: p189 size 100663296 extends beyond EOD, truncated [ 1584.287671][T22430] loop5: p190 start 9 is beyond EOD, truncated [ 1584.288779][T22430] loop5: p191 start 10 is beyond EOD, truncated [ 1584.289677][T22430] loop5: p192 size 100663296 extends beyond EOD, truncated [ 1584.292439][T22430] loop5: p193 start 9 is beyond EOD, truncated [ 1584.293454][T22430] loop5: p194 start 10 is beyond EOD, truncated [ 1584.294720][T22430] loop5: p195 size 100663296 extends beyond EOD, truncated [ 1584.296234][T22430] loop5: p196 start 9 is beyond EOD, truncated [ 1584.297339][T22430] loop5: p197 start 10 is beyond EOD, truncated [ 1584.298215][T22430] loop5: p198 size 100663296 extends beyond EOD, truncated [ 1584.299530][T22430] loop5: p199 start 9 is beyond EOD, truncated [ 1584.300515][T22430] loop5: p200 start 10 is beyond EOD, truncated [ 1584.301529][T22430] loop5: p201 size 100663296 extends beyond EOD, truncated [ 1584.303273][T22430] loop5: p202 start 9 is beyond EOD, truncated [ 1584.304246][T22430] loop5: p203 start 10 is beyond EOD, truncated [ 1584.305214][T22430] loop5: p204 size 100663296 extends beyond EOD, truncated [ 1584.306668][T22430] loop5: p205 start 9 is beyond EOD, truncated [ 1584.307631][T22430] loop5: p206 start 10 is beyond EOD, truncated [ 1584.308534][T22430] loop5: p207 size 100663296 extends beyond EOD, truncated [ 1584.310302][T22430] loop5: p208 start 9 is beyond EOD, truncated [ 1584.311279][T22430] loop5: p209 start 10 is beyond EOD, truncated [ 1584.312191][T22430] loop5: p210 size 100663296 extends beyond EOD, truncated [ 1584.313880][T22430] loop5: p211 start 9 is beyond EOD, truncated [ 1584.314879][T22430] loop5: p212 start 10 is beyond EOD, truncated [ 1584.315977][T22430] loop5: p213 size 100663296 extends beyond EOD, truncated [ 1584.317386][T22430] loop5: p214 start 9 is beyond EOD, truncated [ 1584.318246][T22430] loop5: p215 start 10 is beyond EOD, truncated [ 1584.319319][T22430] loop5: p216 size 100663296 extends beyond EOD, truncated [ 1584.320624][T22430] loop5: p217 start 9 is beyond EOD, truncated [ 1584.321997][T22430] loop5: p218 start 10 is beyond EOD, truncated [ 1584.323045][T22430] loop5: p219 size 100663296 extends beyond EOD, truncated [ 1584.324444][T22430] loop5: p220 start 9 is beyond EOD, truncated [ 1584.325460][T22430] loop5: p221 start 10 is beyond EOD, truncated [ 1584.326495][T22430] loop5: p222 size 100663296 extends beyond EOD, truncated [ 1584.328202][T22430] loop5: p223 start 9 is beyond EOD, truncated [ 1584.329708][T22430] loop5: p224 start 10 is beyond EOD, truncated [ 1584.330614][T22430] loop5: p225 size 100663296 extends beyond EOD, truncated [ 1584.334071][T22430] loop5: p226 start 9 is beyond EOD, truncated [ 1584.335349][T22430] loop5: p227 start 10 is beyond EOD, truncated [ 1584.336364][T22430] loop5: p228 size 100663296 extends beyond EOD, truncated [ 1584.337759][T22430] loop5: p229 start 9 is beyond EOD, truncated [ 1584.338761][T22430] loop5: p230 start 10 is beyond EOD, truncated [ 1584.339900][T22430] loop5: p231 size 100663296 extends beyond EOD, truncated [ 1584.342264][T22430] loop5: p232 start 9 is beyond EOD, truncated [ 1584.343446][T22430] loop5: p233 start 10 is beyond EOD, truncated [ 1584.344302][T22430] loop5: p234 size 100663296 extends beyond EOD, truncated [ 1584.345700][T22430] loop5: p235 start 9 is beyond EOD, truncated [ 1584.346749][T22430] loop5: p236 start 10 is beyond EOD, truncated [ 1584.347888][T22430] loop5: p237 size 100663296 extends beyond EOD, truncated [ 1584.349356][T22430] loop5: p238 start 9 is beyond EOD, truncated [ 1584.350478][T22430] loop5: p239 start 10 is beyond EOD, truncated [ 1584.351682][T22430] loop5: p240 size 100663296 extends beyond EOD, truncated [ 1584.353429][T22430] loop5: p241 start 9 is beyond EOD, truncated [ 1584.354396][T22430] loop5: p242 start 10 is beyond EOD, truncated [ 1584.355374][T22430] loop5: p243 size 100663296 extends beyond EOD, truncated [ 1584.356592][T22430] loop5: p244 start 9 is beyond EOD, truncated [ 1584.357845][T22430] loop5: p245 start 10 is beyond EOD, truncated [ 1584.358809][T22430] loop5: p246 size 100663296 extends beyond EOD, truncated [ 1584.360321][T22430] loop5: p247 start 9 is beyond EOD, truncated [ 1584.361590][T22430] loop5: p248 start 10 is beyond EOD, truncated [ 1584.362622][T22430] loop5: p249 size 100663296 extends beyond EOD, truncated [ 1584.364455][T22430] loop5: p250 start 9 is beyond EOD, truncated [ 1584.365974][T22430] loop5: p251 start 10 is beyond EOD, truncated [ 1584.367152][T22430] loop5: p252 size 100663296 extends beyond EOD, truncated [ 1584.368625][T22430] loop5: p253 start 9 is beyond EOD, truncated [ 1584.369917][T22430] loop5: p254 start 10 is beyond EOD, truncated [ 1584.370905][T22430] loop5: p255 size 100663296 extends beyond EOD, truncated 11:49:08 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1000000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:08 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020182ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./\nile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:08 executing program 2: sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000000020104000000000000000002000000240002801400018008000100ac1414aa08000200ac1e00010c0002800500010000000000240003801400018008000100ac1414bb08000220fd0000010c0002800500010000000000040001"], 0x60}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace_dev_match', 0x0, 0x0) preadv(r4, &(0x7f0000001840)=[{&(0x7f0000000200)=""/251, 0xfb}], 0x1, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040825}, 0x4000) sendfile(r3, r1, 0x0, 0x100000003) 11:49:08 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6e, 0x100, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000000c0)="a2e699f9", 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000280)="e700e731b8f2cf35a0ce385d79ce0c767489a2bd2b2a3f10001e69da779d9b3b90cb081d91bee4264d9aec8f63f86b6aadcaba12ffe9e50516f256e29e06b209328ee2af73d295f12fa804", 0x4b}], 0x1}}], 0x1, 0x0) bind$packet(r1, &(0x7f0000000200)={0x11, 0x8, r2, 0x1, 0x0, 0x6, @dev}, 0x14) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="05040200c3"], 0xfdef) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r3) 11:49:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./%ile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:08 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1100000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1584.505628][T22670] loop5: detected capacity change from 0 to 1 [ 1584.512561][T22674] loop4: detected capacity change from 0 to 1 11:49:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./.ile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1584.546961][T22670] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 1584.549660][T22670] loop5: p1 start 10 is beyond EOD, truncated [ 1584.564762][T22670] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1584.567151][T22674] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1584.568010][T22674] loop4: partition table partially beyond EOD, truncated [ 1584.569636][T22674] loop4: p1 start 10 is beyond EOD, truncated [ 1584.571381][T22674] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1584.574191][T22674] loop4: p3 start 9 is beyond EOD, truncated [ 1584.575379][T22674] loop4: p4 size 2 extends beyond EOD, truncated [ 1584.576711][T22674] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1584.580439][T22674] loop4: p6 start 9 is beyond EOD, truncated 11:49:08 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1200000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.//ile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1584.639614][T22670] loop5: p3 start 9 is beyond EOD, truncated [ 1584.640948][T22670] loop5: p4 size 2 extends beyond EOD, truncated [ 1584.655592][T22670] loop5: p5 start 10 is beyond EOD, truncated [ 1584.657044][T22670] loop5: p6 size 100663296 extends beyond EOD, truncated [ 1584.665659][T22670] loop5: p7 start 9 is beyond EOD, truncated [ 1584.667023][T22670] loop5: p8 start 10 is beyond EOD, truncated [ 1584.668012][T22670] loop5: p9 size 100663296 extends beyond EOD, truncated [ 1584.677430][T22670] loop5: p10 start 9 is beyond EOD, truncated [ 1584.679077][T22670] loop5: p11 start 10 is beyond EOD, truncated [ 1584.680028][T22670] loop5: p12 size 100663296 extends beyond EOD, truncated [ 1584.686472][T22670] loop5: p13 start 9 is beyond EOD, truncated [ 1584.687664][T22670] loop5: p14 start 10 is beyond EOD, truncated 11:49:08 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) [ 1584.688728][T22670] loop5: p15 size 100663296 extends beyond EOD, truncated [ 1584.696541][T22670] loop5: p16 start 9 is beyond EOD, truncated [ 1584.697561][T22670] loop5: p17 start 10 is beyond EOD, truncated [ 1584.698446][T22670] loop5: p18 size 100663296 extends beyond EOD, truncated [ 1584.700924][T22670] loop5: p19 start 9 is beyond EOD, truncated [ 1584.701927][T22670] loop5: p20 start 10 is beyond EOD, truncated [ 1584.703104][T22670] loop5: p21 size 100663296 extends beyond EOD, truncated [ 1584.711941][T22670] loop5: p22 start 9 is beyond EOD, truncated [ 1584.713069][T22670] loop5: p23 start 10 is beyond EOD, truncated [ 1584.714038][T22670] loop5: p24 size 100663296 extends beyond EOD, truncated [ 1584.715923][T22670] loop5: p25 start 9 is beyond EOD, truncated [ 1584.716990][T22670] loop5: p26 start 10 is beyond EOD, truncated [ 1584.718123][T22670] loop5: p27 size 100663296 extends beyond EOD, truncated [ 1584.720365][T22670] loop5: p28 start 9 is beyond EOD, truncated [ 1584.721635][T22670] loop5: p29 start 10 is beyond EOD, truncated [ 1584.722595][T22670] loop5: p30 size 100663296 extends beyond EOD, truncated [ 1584.728528][T22670] loop5: p31 start 9 is beyond EOD, truncated [ 1584.729765][T22670] loop5: p32 start 10 is beyond EOD, truncated [ 1584.730712][T22670] loop5: p33 size 100663296 extends beyond EOD, truncated [ 1584.733939][T22670] loop5: p34 start 9 is beyond EOD, truncated [ 1584.735088][T22670] loop5: p35 start 10 is beyond EOD, truncated [ 1584.736272][T22670] loop5: p36 size 100663296 extends beyond EOD, truncated [ 1584.742888][T22670] loop5: p37 start 9 is beyond EOD, truncated [ 1584.743885][T22670] loop5: p38 start 10 is beyond EOD, truncated [ 1584.744909][T22670] loop5: p39 size 100663296 extends beyond EOD, truncated [ 1584.748940][T22670] loop5: p40 start 9 is beyond EOD, truncated [ 1584.750189][T22670] loop5: p41 start 10 is beyond EOD, truncated [ 1584.751128][T22670] loop5: p42 size 100663296 extends beyond EOD, truncated [ 1584.757611][T22670] loop5: p43 start 9 is beyond EOD, truncated [ 1584.758845][T22670] loop5: p44 start 10 is beyond EOD, truncated [ 1584.759860][T22670] loop5: p45 size 100663296 extends beyond EOD, truncated [ 1584.768036][T22670] loop5: p46 start 9 is beyond EOD, truncated [ 1584.769014][T22670] loop5: p47 start 10 is beyond EOD, truncated [ 1584.770138][T22670] loop5: p48 size 100663296 extends beyond EOD, truncated [ 1584.773077][T22670] loop5: p49 start 9 is beyond EOD, truncated [ 1584.774402][T22670] loop5: p50 start 10 is beyond EOD, truncated [ 1584.775411][T22670] loop5: p51 size 100663296 extends beyond EOD, truncated [ 1584.777947][T22670] loop5: p52 start 9 is beyond EOD, truncated [ 1584.778952][T22670] loop5: p53 start 10 is beyond EOD, truncated [ 1584.779971][T22670] loop5: p54 size 100663296 extends beyond EOD, truncated [ 1584.786941][T22670] loop5: p55 start 9 is beyond EOD, truncated [ 1584.788215][T22670] loop5: p56 start 10 is beyond EOD, truncated [ 1584.789331][T22670] loop5: p57 size 100663296 extends beyond EOD, truncated [ 1584.798976][T22670] loop5: p58 start 9 is beyond EOD, truncated [ 1584.801208][T22670] loop5: p59 start 10 is beyond EOD, truncated [ 1584.803060][T22670] loop5: p60 size 100663296 extends beyond EOD, truncated [ 1584.813490][T22670] loop5: p61 start 9 is beyond EOD, truncated [ 1584.815071][T22670] loop5: p62 start 10 is beyond EOD, truncated [ 1584.816093][T22670] loop5: p63 size 100663296 extends beyond EOD, truncated [ 1584.822079][T22670] loop5: p64 start 9 is beyond EOD, truncated [ 1584.823392][T22670] loop5: p65 start 10 is beyond EOD, truncated [ 1584.824638][T22670] loop5: p66 size 100663296 extends beyond EOD, truncated [ 1584.827923][T22670] loop5: p67 start 9 is beyond EOD, truncated [ 1584.829421][T22670] loop5: p68 start 10 is beyond EOD, truncated [ 1584.830593][T22670] loop5: p69 size 100663296 extends beyond EOD, truncated [ 1584.839813][T22670] loop5: p70 start 9 is beyond EOD, truncated [ 1584.841299][T22670] loop5: p71 start 10 is beyond EOD, truncated [ 1584.842561][T22670] loop5: p72 size 100663296 extends beyond EOD, truncated [ 1584.846550][T22670] loop5: p73 start 9 is beyond EOD, truncated [ 1584.847755][T22670] loop5: p74 start 10 is beyond EOD, truncated [ 1584.848754][T22670] loop5: p75 size 100663296 extends beyond EOD, truncated [ 1584.853656][T22670] loop5: p76 start 9 is beyond EOD, truncated [ 1584.854929][T22670] loop5: p77 start 10 is beyond EOD, truncated [ 1584.856111][T22670] loop5: p78 size 100663296 extends beyond EOD, truncated [ 1584.859937][T22670] loop5: p79 start 9 is beyond EOD, truncated [ 1584.861636][T22670] loop5: p80 start 10 is beyond EOD, truncated [ 1584.862817][T22670] loop5: p81 size 100663296 extends beyond EOD, truncated [ 1584.868218][T22670] loop5: p82 start 9 is beyond EOD, truncated [ 1584.870172][T22670] loop5: p83 start 10 is beyond EOD, truncated [ 1584.887439][T22670] loop5: p84 size 100663296 extends beyond EOD, truncated [ 1584.891271][T22670] loop5: p85 start 9 is beyond EOD, truncated [ 1584.893121][T22670] loop5: p86 start 10 is beyond EOD, truncated [ 1584.894966][T22670] loop5: p87 size 100663296 extends beyond EOD, truncated [ 1584.897908][T22670] loop5: p88 start 9 is beyond EOD, truncated [ 1584.899658][T22670] loop5: p89 start 10 is beyond EOD, truncated [ 1584.902112][T22670] loop5: p90 size 100663296 extends beyond EOD, truncated [ 1584.905793][T22670] loop5: p91 start 9 is beyond EOD, truncated [ 1584.907691][T22670] loop5: p92 start 10 is beyond EOD, truncated [ 1584.909275][T22670] loop5: p93 size 100663296 extends beyond EOD, truncated [ 1584.912280][T22670] loop5: p94 start 9 is beyond EOD, truncated [ 1584.913886][T22670] loop5: p95 start 10 is beyond EOD, truncated [ 1584.916357][T22670] loop5: p96 size 100663296 extends beyond EOD, truncated [ 1584.919818][T22670] loop5: p97 start 9 is beyond EOD, truncated [ 1584.922485][T22670] loop5: p98 start 10 is beyond EOD, truncated [ 1584.924402][T22670] loop5: p99 size 100663296 extends beyond EOD, truncated [ 1584.927253][T22670] loop5: p100 start 9 is beyond EOD, truncated [ 1584.929501][T22670] loop5: p101 start 10 is beyond EOD, truncated [ 1584.931401][T22670] loop5: p102 size 100663296 extends beyond EOD, truncated [ 1584.934437][T22670] loop5: p103 start 9 is beyond EOD, truncated [ 1584.936269][T22670] loop5: p104 start 10 is beyond EOD, truncated [ 1584.938167][T22670] loop5: p105 size 100663296 extends beyond EOD, truncated [ 1584.941309][T22670] loop5: p106 start 9 is beyond EOD, truncated [ 1584.943551][T22670] loop5: p107 start 10 is beyond EOD, truncated [ 1584.944864][T22670] loop5: p108 size 100663296 extends beyond EOD, truncated [ 1584.947882][T22670] loop5: p109 start 9 is beyond EOD, truncated [ 1584.949850][T22670] loop5: p110 start 10 is beyond EOD, truncated [ 1584.951969][T22670] loop5: p111 size 100663296 extends beyond EOD, truncated [ 1584.955194][T22670] loop5: p112 start 9 is beyond EOD, truncated [ 1584.957003][T22670] loop5: p113 start 10 is beyond EOD, truncated [ 1584.958888][T22670] loop5: p114 size 100663296 extends beyond EOD, truncated [ 1584.961921][T22670] loop5: p115 start 9 is beyond EOD, truncated [ 1584.963457][T22670] loop5: p116 start 10 is beyond EOD, truncated [ 1584.965185][T22670] loop5: p117 size 100663296 extends beyond EOD, truncated [ 1584.967539][T22670] loop5: p118 start 9 is beyond EOD, truncated [ 1584.969248][T22670] loop5: p119 start 10 is beyond EOD, truncated [ 1584.970527][T22670] loop5: p120 size 100663296 extends beyond EOD, truncated [ 1584.973432][T22670] loop5: p121 start 9 is beyond EOD, truncated [ 1584.975251][T22670] loop5: p122 start 10 is beyond EOD, truncated [ 1584.977149][T22670] loop5: p123 size 100663296 extends beyond EOD, truncated [ 1584.979687][T22670] loop5: p124 start 9 is beyond EOD, truncated [ 1584.982243][T22670] loop5: p125 start 10 is beyond EOD, truncated [ 1584.985222][T22670] loop5: p126 size 100663296 extends beyond EOD, truncated [ 1584.989461][T22670] loop5: p127 start 9 is beyond EOD, truncated [ 1584.991478][T22670] loop5: p128 start 10 is beyond EOD, truncated [ 1584.993239][T22670] loop5: p129 size 100663296 extends beyond EOD, truncated [ 1584.996307][T22670] loop5: p130 start 9 is beyond EOD, truncated [ 1584.998186][T22670] loop5: p131 start 10 is beyond EOD, truncated [ 1584.999641][T22670] loop5: p132 size 100663296 extends beyond EOD, truncated [ 1585.002792][T22670] loop5: p133 start 9 is beyond EOD, truncated [ 1585.004459][T22670] loop5: p134 start 10 is beyond EOD, truncated [ 1585.006191][T22670] loop5: p135 size 100663296 extends beyond EOD, truncated [ 1585.009088][T22670] loop5: p136 start 9 is beyond EOD, truncated [ 1585.010543][T22670] loop5: p137 start 10 is beyond EOD, truncated [ 1585.012415][T22670] loop5: p138 size 100663296 extends beyond EOD, truncated [ 1585.016919][T22670] loop5: p139 start 9 is beyond EOD, truncated [ 1585.019425][T22670] loop5: p140 start 10 is beyond EOD, truncated [ 1585.021405][T22670] loop5: p141 size 100663296 extends beyond EOD, truncated [ 1585.025005][T22670] loop5: p142 start 9 is beyond EOD, truncated [ 1585.027200][T22670] loop5: p143 start 10 is beyond EOD, truncated [ 1585.028611][T22670] loop5: p144 size 100663296 extends beyond EOD, truncated [ 1585.031638][T22670] loop5: p145 start 9 is beyond EOD, truncated [ 1585.033713][T22670] loop5: p146 start 10 is beyond EOD, truncated [ 1585.035804][T22670] loop5: p147 size 100663296 extends beyond EOD, truncated [ 1585.039479][T22670] loop5: p148 start 9 is beyond EOD, truncated [ 1585.040753][T22670] loop5: p149 start 10 is beyond EOD, truncated [ 1585.042957][T22670] loop5: p150 size 100663296 extends beyond EOD, truncated [ 1585.046002][T22670] loop5: p151 start 9 is beyond EOD, truncated [ 1585.047596][T22670] loop5: p152 start 10 is beyond EOD, truncated [ 1585.049623][T22670] loop5: p153 size 100663296 extends beyond EOD, truncated [ 1585.054149][T22670] loop5: p154 start 9 is beyond EOD, truncated [ 1585.055683][T22670] loop5: p155 start 10 is beyond EOD, truncated [ 1585.057449][T22670] loop5: p156 size 100663296 extends beyond EOD, truncated [ 1585.060314][T22670] loop5: p157 start 9 is beyond EOD, truncated [ 1585.062173][T22670] loop5: p158 start 10 is beyond EOD, truncated [ 1585.063670][T22670] loop5: p159 size 100663296 extends beyond EOD, truncated [ 1585.066805][T22670] loop5: p160 start 9 is beyond EOD, truncated [ 1585.069029][T22670] loop5: p161 start 10 is beyond EOD, truncated [ 1585.071037][T22670] loop5: p162 size 100663296 extends beyond EOD, truncated [ 1585.074053][T22670] loop5: p163 start 9 is beyond EOD, truncated [ 1585.075912][T22670] loop5: p164 start 10 is beyond EOD, truncated [ 1585.077685][T22670] loop5: p165 size 100663296 extends beyond EOD, truncated [ 1585.080758][T22670] loop5: p166 start 9 is beyond EOD, truncated [ 1585.083214][T22670] loop5: p167 start 10 is beyond EOD, truncated [ 1585.089371][T22670] loop5: p168 size 100663296 extends beyond EOD, truncated [ 1585.093173][T22670] loop5: p169 start 9 is beyond EOD, truncated [ 1585.095421][T22670] loop5: p170 start 10 is beyond EOD, truncated [ 1585.097297][T22670] loop5: p171 size 100663296 extends beyond EOD, truncated [ 1585.099916][T22670] loop5: p172 start 9 is beyond EOD, truncated [ 1585.101740][T22670] loop5: p173 start 10 is beyond EOD, truncated [ 1585.103485][T22670] loop5: p174 size 100663296 extends beyond EOD, truncated [ 1585.106714][T22670] loop5: p175 start 9 is beyond EOD, truncated [ 1585.109036][T22670] loop5: p176 start 10 is beyond EOD, truncated [ 1585.111193][T22670] loop5: p177 size 100663296 extends beyond EOD, truncated [ 1585.114627][T22670] loop5: p178 start 9 is beyond EOD, truncated [ 1585.116831][T22670] loop5: p179 start 10 is beyond EOD, truncated [ 1585.119865][T22670] loop5: p180 size 100663296 extends beyond EOD, truncated [ 1585.123326][T22670] loop5: p181 start 9 is beyond EOD, truncated [ 1585.124898][T22670] loop5: p182 start 10 is beyond EOD, truncated [ 1585.126495][T22670] loop5: p183 size 100663296 extends beyond EOD, truncated [ 1585.129565][T22670] loop5: p184 start 9 is beyond EOD, truncated [ 1585.131043][T22670] loop5: p185 start 10 is beyond EOD, truncated [ 1585.133694][T22670] loop5: p186 size 100663296 extends beyond EOD, truncated [ 1585.136787][T22670] loop5: p187 start 9 is beyond EOD, truncated [ 1585.138514][T22670] loop5: p188 start 10 is beyond EOD, truncated [ 1585.140784][T22670] loop5: p189 size 100663296 extends beyond EOD, truncated [ 1585.144574][T22670] loop5: p190 start 9 is beyond EOD, truncated [ 1585.146784][T22670] loop5: p191 start 10 is beyond EOD, truncated [ 1585.149305][T22670] loop5: p192 size 100663296 extends beyond EOD, truncated [ 1585.155602][T22670] loop5: p193 start 9 is beyond EOD, truncated [ 1585.157350][T22670] loop5: p194 start 10 is beyond EOD, truncated [ 1585.159482][T22670] loop5: p195 size 100663296 extends beyond EOD, truncated [ 1585.161935][T22670] loop5: p196 start 9 is beyond EOD, truncated [ 1585.164295][T22670] loop5: p197 start 10 is beyond EOD, truncated [ 1585.166439][T22670] loop5: p198 size 100663296 extends beyond EOD, truncated [ 1585.169542][T22670] loop5: p199 start 9 is beyond EOD, truncated [ 1585.171722][T22670] loop5: p200 start 10 is beyond EOD, truncated [ 1585.173162][T22670] loop5: p201 size 100663296 extends beyond EOD, truncated [ 1585.175438][T22670] loop5: p202 start 9 is beyond EOD, truncated [ 1585.177731][T22670] loop5: p203 start 10 is beyond EOD, truncated [ 1585.179951][T22670] loop5: p204 size 100663296 extends beyond EOD, truncated [ 1585.183691][T22670] loop5: p205 start 9 is beyond EOD, truncated [ 1585.185825][T22670] loop5: p206 start 10 is beyond EOD, truncated [ 1585.187910][T22670] loop5: p207 size 100663296 extends beyond EOD, truncated [ 1585.190577][T22670] loop5: p208 start 9 is beyond EOD, truncated [ 1585.192874][T22670] loop5: p209 start 10 is beyond EOD, truncated [ 1585.194872][T22670] loop5: p210 size 100663296 extends beyond EOD, truncated [ 1585.199612][T22670] loop5: p211 start 9 is beyond EOD, truncated [ 1585.200946][T22670] loop5: p212 start 10 is beyond EOD, truncated [ 1585.202557][T22670] loop5: p213 size 100663296 extends beyond EOD, truncated [ 1585.206015][T22670] loop5: p214 start 9 is beyond EOD, truncated [ 1585.207897][T22670] loop5: p215 start 10 is beyond EOD, truncated [ 1585.209700][T22670] loop5: p216 size 100663296 extends beyond EOD, truncated [ 1585.213564][T22670] loop5: p217 start 9 is beyond EOD, truncated [ 1585.215314][T22670] loop5: p218 start 10 is beyond EOD, truncated [ 1585.217455][T22670] loop5: p219 size 100663296 extends beyond EOD, truncated [ 1585.220809][T22670] loop5: p220 start 9 is beyond EOD, truncated [ 1585.222794][T22670] loop5: p221 start 10 is beyond EOD, truncated [ 1585.224892][T22670] loop5: p222 size 100663296 extends beyond EOD, truncated [ 1585.228778][T22670] loop5: p223 start 9 is beyond EOD, truncated [ 1585.231058][T22670] loop5: p224 start 10 is beyond EOD, truncated [ 1585.233097][T22670] loop5: p225 size 100663296 extends beyond EOD, truncated [ 1585.236630][T22670] loop5: p226 start 9 is beyond EOD, truncated [ 1585.238023][T22670] loop5: p227 start 10 is beyond EOD, truncated [ 1585.239663][T22670] loop5: p228 size 100663296 extends beyond EOD, truncated [ 1585.243077][T22670] loop5: p229 start 9 is beyond EOD, truncated [ 1585.245136][T22670] loop5: p230 start 10 is beyond EOD, truncated [ 1585.246830][T22670] loop5: p231 size 100663296 extends beyond EOD, truncated [ 1585.252226][T22670] loop5: p232 start 9 is beyond EOD, truncated [ 1585.253173][T22670] loop5: p233 start 10 is beyond EOD, truncated [ 1585.254150][T22670] loop5: p234 size 100663296 extends beyond EOD, truncated [ 1585.256133][T22670] loop5: p235 start 9 is beyond EOD, truncated [ 1585.257191][T22670] loop5: p236 start 10 is beyond EOD, truncated [ 1585.258152][T22670] loop5: p237 size 100663296 extends beyond EOD, truncated [ 1585.260478][T22670] loop5: p238 start 9 is beyond EOD, truncated [ 1585.261703][T22670] loop5: p239 start 10 is beyond EOD, truncated [ 1585.262813][T22670] loop5: p240 size 100663296 extends beyond EOD, truncated [ 1585.266309][T22670] loop5: p241 start 9 is beyond EOD, truncated [ 1585.267522][T22670] loop5: p242 start 10 is beyond EOD, truncated [ 1585.268526][T22670] loop5: p243 size 100663296 extends beyond EOD, truncated [ 1585.270690][T22670] loop5: p244 start 9 is beyond EOD, truncated [ 1585.271854][T22670] loop5: p245 start 10 is beyond EOD, truncated [ 1585.272915][T22670] loop5: p246 size 100663296 extends beyond EOD, truncated [ 1585.275919][T22670] loop5: p247 start 9 is beyond EOD, truncated [ 1585.276978][T22670] loop5: p248 start 10 is beyond EOD, truncated [ 1585.278549][T22670] loop5: p249 size 100663296 extends beyond EOD, truncated [ 1585.281025][T22670] loop5: p250 start 9 is beyond EOD, truncated [ 1585.282071][T22670] loop5: p251 start 10 is beyond EOD, truncated [ 1585.283346][T22670] loop5: p252 size 100663296 extends beyond EOD, truncated [ 1585.286281][T22670] loop5: p253 start 9 is beyond EOD, truncated [ 1585.287478][T22670] loop5: p254 start 10 is beyond EOD, truncated [ 1585.288831][T22670] loop5: p255 size 100663296 extends beyond EOD, truncated 11:49:09 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="0201a5ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:09 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020181ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:09 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./File0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:09 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) 11:49:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./Hile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1585.491940][T22925] loop5: detected capacity change from 0 to 1 11:49:09 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020181ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./Jile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:09 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2010000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./Lile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1585.577323][T22925] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 1585.577541][T22925] loop5: p1 start 10 is beyond EOD, truncated [ 1585.601903][T22925] loop5: p2 size 100663296 extends beyond EOD, truncated 11:49:09 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) 11:49:09 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2200000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1585.681975][T22925] loop5: p3 start 9 is beyond EOD, truncated [ 1585.683561][T22925] loop5: p4 size 2 extends beyond EOD, truncated [ 1585.688773][T22925] loop5: p5 start 10 is beyond EOD, truncated [ 1585.691222][T22925] loop5: p6 size 100663296 extends beyond EOD, truncated [ 1585.700543][T22925] loop5: p7 start 9 is beyond EOD, truncated [ 1585.702614][T22925] loop5: p8 start 10 is beyond EOD, truncated [ 1585.704759][T22925] loop5: p9 size 100663296 extends beyond EOD, truncated [ 1585.714165][T22925] loop5: p10 start 9 is beyond EOD, truncated [ 1585.716384][T22925] loop5: p11 start 10 is beyond EOD, truncated [ 1585.717950][T22925] loop5: p12 size 100663296 extends beyond EOD, truncated [ 1585.737935][T22925] loop5: p13 start 9 is beyond EOD, truncated [ 1585.739980][T22925] loop5: p14 start 10 is beyond EOD, truncated [ 1585.742073][T22925] loop5: p15 size 100663296 extends beyond EOD, truncated [ 1585.749417][T22925] loop5: p16 start 9 is beyond EOD, truncated [ 1585.752049][T22925] loop5: p17 start 10 is beyond EOD, truncated [ 1585.753252][T22925] loop5: p18 size 100663296 extends beyond EOD, truncated [ 1585.757031][T22925] loop5: p19 start 9 is beyond EOD, truncated [ 1585.758335][T22925] loop5: p20 start 10 is beyond EOD, truncated [ 1585.759553][T22925] loop5: p21 size 100663296 extends beyond EOD, truncated [ 1585.763064][T22925] loop5: p22 start 9 is beyond EOD, truncated [ 1585.764135][T22925] loop5: p23 start 10 is beyond EOD, truncated [ 1585.765530][T22925] loop5: p24 size 100663296 extends beyond EOD, truncated [ 1585.769014][T22925] loop5: p25 start 9 is beyond EOD, truncated [ 1585.770297][T22925] loop5: p26 start 10 is beyond EOD, truncated [ 1585.771865][T22925] loop5: p27 size 100663296 extends beyond EOD, truncated [ 1585.781767][T22925] loop5: p28 start 9 is beyond EOD, truncated [ 1585.782902][T22925] loop5: p29 start 10 is beyond EOD, truncated [ 1585.784063][T22925] loop5: p30 size 100663296 extends beyond EOD, truncated [ 1585.791766][T22925] loop5: p31 start 9 is beyond EOD, truncated [ 1585.793844][T22925] loop5: p32 start 10 is beyond EOD, truncated [ 1585.796141][T22925] loop5: p33 size 100663296 extends beyond EOD, truncated [ 1585.801056][T22925] loop5: p34 start 9 is beyond EOD, truncated [ 1585.803188][T22925] loop5: p35 start 10 is beyond EOD, truncated [ 1585.805096][T22925] loop5: p36 size 100663296 extends beyond EOD, truncated [ 1585.812201][T22925] loop5: p37 start 9 is beyond EOD, truncated [ 1585.813550][T22925] loop5: p38 start 10 is beyond EOD, truncated [ 1585.815733][T22925] loop5: p39 size 100663296 extends beyond EOD, truncated [ 1585.819978][T22925] loop5: p40 start 9 is beyond EOD, truncated [ 1585.821162][T22925] loop5: p41 start 10 is beyond EOD, truncated [ 1585.822697][T22925] loop5: p42 size 100663296 extends beyond EOD, truncated [ 1585.828021][T22925] loop5: p43 start 9 is beyond EOD, truncated [ 1585.829919][T22925] loop5: p44 start 10 is beyond EOD, truncated [ 1585.831866][T22925] loop5: p45 size 100663296 extends beyond EOD, truncated [ 1585.836899][T22925] loop5: p46 start 9 is beyond EOD, truncated [ 1585.839457][T22925] loop5: p47 start 10 is beyond EOD, truncated [ 1585.842235][T22925] loop5: p48 size 100663296 extends beyond EOD, truncated [ 1585.846892][T22925] loop5: p49 start 9 is beyond EOD, truncated [ 1585.848419][T22925] loop5: p50 start 10 is beyond EOD, truncated [ 1585.850687][T22925] loop5: p51 size 100663296 extends beyond EOD, truncated [ 1585.855333][T22925] loop5: p52 start 9 is beyond EOD, truncated [ 1585.856769][T22925] loop5: p53 start 10 is beyond EOD, truncated [ 1585.858135][T22925] loop5: p54 size 100663296 extends beyond EOD, truncated [ 1585.860792][T22925] loop5: p55 start 9 is beyond EOD, truncated [ 1585.861879][T22925] loop5: p56 start 10 is beyond EOD, truncated [ 1585.863059][T22925] loop5: p57 size 100663296 extends beyond EOD, truncated [ 1585.866414][T22925] loop5: p58 start 9 is beyond EOD, truncated [ 1585.867821][T22925] loop5: p59 start 10 is beyond EOD, truncated [ 1585.868992][T22925] loop5: p60 size 100663296 extends beyond EOD, truncated [ 1585.872312][T22925] loop5: p61 start 9 is beyond EOD, truncated [ 1585.873466][T22925] loop5: p62 start 10 is beyond EOD, truncated [ 1585.874608][T22925] loop5: p63 size 100663296 extends beyond EOD, truncated [ 1585.878176][T22925] loop5: p64 start 9 is beyond EOD, truncated [ 1585.880023][T22925] loop5: p65 start 10 is beyond EOD, truncated [ 1585.881068][T22925] loop5: p66 size 100663296 extends beyond EOD, truncated [ 1585.885654][T22925] loop5: p67 start 9 is beyond EOD, truncated [ 1585.888041][T22925] loop5: p68 start 10 is beyond EOD, truncated [ 1585.889776][T22925] loop5: p69 size 100663296 extends beyond EOD, truncated [ 1585.894757][T22925] loop5: p70 start 9 is beyond EOD, truncated [ 1585.896790][T22925] loop5: p71 start 10 is beyond EOD, truncated [ 1585.898004][T22925] loop5: p72 size 100663296 extends beyond EOD, truncated [ 1585.901806][T22925] loop5: p73 start 9 is beyond EOD, truncated [ 1585.903719][T22925] loop5: p74 start 10 is beyond EOD, truncated [ 1585.905214][T22925] loop5: p75 size 100663296 extends beyond EOD, truncated [ 1585.909483][T22925] loop5: p76 start 9 is beyond EOD, truncated [ 1585.911436][T22925] loop5: p77 start 10 is beyond EOD, truncated [ 1585.913751][T22925] loop5: p78 size 100663296 extends beyond EOD, truncated [ 1585.917697][T22925] loop5: p79 start 9 is beyond EOD, truncated [ 1585.919311][T22925] loop5: p80 start 10 is beyond EOD, truncated [ 1585.921322][T22925] loop5: p81 size 100663296 extends beyond EOD, truncated [ 1585.925220][T22925] loop5: p82 start 9 is beyond EOD, truncated [ 1585.927211][T22925] loop5: p83 start 10 is beyond EOD, truncated [ 1585.928891][T22925] loop5: p84 size 100663296 extends beyond EOD, truncated [ 1585.932407][T22925] loop5: p85 start 9 is beyond EOD, truncated [ 1585.934717][T22925] loop5: p86 start 10 is beyond EOD, truncated [ 1585.936277][T22925] loop5: p87 size 100663296 extends beyond EOD, truncated [ 1585.940407][T22925] loop5: p88 start 9 is beyond EOD, truncated [ 1585.941679][T22925] loop5: p89 start 10 is beyond EOD, truncated [ 1585.943123][T22925] loop5: p90 size 100663296 extends beyond EOD, truncated [ 1585.946471][T22925] loop5: p91 start 9 is beyond EOD, truncated [ 1585.948273][T22925] loop5: p92 start 10 is beyond EOD, truncated [ 1585.949740][T22925] loop5: p93 size 100663296 extends beyond EOD, truncated [ 1585.952679][T22925] loop5: p94 start 9 is beyond EOD, truncated [ 1585.954640][T22925] loop5: p95 start 10 is beyond EOD, truncated [ 1585.957365][T22925] loop5: p96 size 100663296 extends beyond EOD, truncated [ 1585.961016][T22925] loop5: p97 start 9 is beyond EOD, truncated [ 1585.963053][T22925] loop5: p98 start 10 is beyond EOD, truncated [ 1585.964293][T22925] loop5: p99 size 100663296 extends beyond EOD, truncated [ 1585.968062][T22925] loop5: p100 start 9 is beyond EOD, truncated [ 1585.969678][T22925] loop5: p101 start 10 is beyond EOD, truncated [ 1585.972080][T22925] loop5: p102 size 100663296 extends beyond EOD, truncated [ 1585.975156][T22925] loop5: p103 start 9 is beyond EOD, truncated [ 1585.977363][T22925] loop5: p104 start 10 is beyond EOD, truncated [ 1585.979438][T22925] loop5: p105 size 100663296 extends beyond EOD, truncated [ 1585.983585][T22925] loop5: p106 start 9 is beyond EOD, truncated [ 1585.985288][T22925] loop5: p107 start 10 is beyond EOD, truncated [ 1585.986834][T22925] loop5: p108 size 100663296 extends beyond EOD, truncated [ 1585.990474][T22925] loop5: p109 start 9 is beyond EOD, truncated [ 1585.992358][T22925] loop5: p110 start 10 is beyond EOD, truncated [ 1585.994143][T22925] loop5: p111 size 100663296 extends beyond EOD, truncated [ 1585.998789][T22925] loop5: p112 start 9 is beyond EOD, truncated [ 1586.000767][T22925] loop5: p113 start 10 is beyond EOD, truncated [ 1586.003001][T22925] loop5: p114 size 100663296 extends beyond EOD, truncated [ 1586.006663][T22925] loop5: p115 start 9 is beyond EOD, truncated [ 1586.008333][T22925] loop5: p116 start 10 is beyond EOD, truncated [ 1586.009530][T22925] loop5: p117 size 100663296 extends beyond EOD, truncated [ 1586.013447][T22925] loop5: p118 start 9 is beyond EOD, truncated [ 1586.014759][T22925] loop5: p119 start 10 is beyond EOD, truncated [ 1586.016354][T22925] loop5: p120 size 100663296 extends beyond EOD, truncated [ 1586.020440][T22925] loop5: p121 start 9 is beyond EOD, truncated [ 1586.022555][T22925] loop5: p122 start 10 is beyond EOD, truncated [ 1586.024411][T22925] loop5: p123 size 100663296 extends beyond EOD, truncated [ 1586.027939][T22925] loop5: p124 start 9 is beyond EOD, truncated [ 1586.030103][T22925] loop5: p125 start 10 is beyond EOD, truncated [ 1586.031567][T22925] loop5: p126 size 100663296 extends beyond EOD, truncated [ 1586.035334][T22925] loop5: p127 start 9 is beyond EOD, truncated [ 1586.037612][T22925] loop5: p128 start 10 is beyond EOD, truncated [ 1586.039574][T22925] loop5: p129 size 100663296 extends beyond EOD, truncated [ 1586.042781][T22925] loop5: p130 start 9 is beyond EOD, truncated [ 1586.044121][T22925] loop5: p131 start 10 is beyond EOD, truncated [ 1586.046253][T22925] loop5: p132 size 100663296 extends beyond EOD, truncated [ 1586.049727][T22925] loop5: p133 start 9 is beyond EOD, truncated [ 1586.051202][T22925] loop5: p134 start 10 is beyond EOD, truncated [ 1586.052765][T22925] loop5: p135 size 100663296 extends beyond EOD, truncated [ 1586.056597][T22925] loop5: p136 start 9 is beyond EOD, truncated [ 1586.058576][T22925] loop5: p137 start 10 is beyond EOD, truncated [ 1586.060263][T22925] loop5: p138 size 100663296 extends beyond EOD, truncated [ 1586.064329][T22925] loop5: p139 start 9 is beyond EOD, truncated [ 1586.065792][T22925] loop5: p140 start 10 is beyond EOD, truncated [ 1586.067434][T22925] loop5: p141 size 100663296 extends beyond EOD, truncated [ 1586.070948][T22925] loop5: p142 start 9 is beyond EOD, truncated [ 1586.072397][T22925] loop5: p143 start 10 is beyond EOD, truncated [ 1586.074036][T22925] loop5: p144 size 100663296 extends beyond EOD, truncated [ 1586.077870][T22925] loop5: p145 start 9 is beyond EOD, truncated [ 1586.080147][T22925] loop5: p146 start 10 is beyond EOD, truncated [ 1586.081431][T22925] loop5: p147 size 100663296 extends beyond EOD, truncated [ 1586.085075][T22925] loop5: p148 start 9 is beyond EOD, truncated [ 1586.086997][T22925] loop5: p149 start 10 is beyond EOD, truncated [ 1586.089625][T22925] loop5: p150 size 100663296 extends beyond EOD, truncated [ 1586.093771][T22925] loop5: p151 start 9 is beyond EOD, truncated [ 1586.096102][T22925] loop5: p152 start 10 is beyond EOD, truncated [ 1586.097845][T22925] loop5: p153 size 100663296 extends beyond EOD, truncated [ 1586.101717][T22925] loop5: p154 start 9 is beyond EOD, truncated [ 1586.102857][T22925] loop5: p155 start 10 is beyond EOD, truncated [ 1586.104227][T22925] loop5: p156 size 100663296 extends beyond EOD, truncated [ 1586.107991][T22925] loop5: p157 start 9 is beyond EOD, truncated [ 1586.110051][T22925] loop5: p158 start 10 is beyond EOD, truncated [ 1586.112361][T22925] loop5: p159 size 100663296 extends beyond EOD, truncated [ 1586.116485][T22925] loop5: p160 start 9 is beyond EOD, truncated [ 1586.118336][T22925] loop5: p161 start 10 is beyond EOD, truncated [ 1586.120353][T22925] loop5: p162 size 100663296 extends beyond EOD, truncated [ 1586.125374][T22925] loop5: p163 start 9 is beyond EOD, truncated [ 1586.127600][T22925] loop5: p164 start 10 is beyond EOD, truncated [ 1586.129619][T22925] loop5: p165 size 100663296 extends beyond EOD, truncated [ 1586.134494][T22925] loop5: p166 start 9 is beyond EOD, truncated [ 1586.136102][T22925] loop5: p167 start 10 is beyond EOD, truncated [ 1586.138160][T22925] loop5: p168 size 100663296 extends beyond EOD, truncated [ 1586.142976][T22925] loop5: p169 start 9 is beyond EOD, truncated [ 1586.144965][T22925] loop5: p170 start 10 is beyond EOD, truncated [ 1586.147267][T22925] loop5: p171 size 100663296 extends beyond EOD, truncated [ 1586.151851][T22925] loop5: p172 start 9 is beyond EOD, truncated [ 1586.157584][T22925] loop5: p173 start 10 is beyond EOD, truncated [ 1586.159601][T22925] loop5: p174 size 100663296 extends beyond EOD, truncated [ 1586.165313][T22925] loop5: p175 start 9 is beyond EOD, truncated [ 1586.168129][T22925] loop5: p176 start 10 is beyond EOD, truncated [ 1586.169898][T22925] loop5: p177 size 100663296 extends beyond EOD, truncated [ 1586.173994][T22925] loop5: p178 start 9 is beyond EOD, truncated [ 1586.175521][T22925] loop5: p179 start 10 is beyond EOD, truncated [ 1586.176893][T22925] loop5: p180 size 100663296 extends beyond EOD, truncated [ 1586.180286][T22925] loop5: p181 start 9 is beyond EOD, truncated [ 1586.182515][T22925] loop5: p182 start 10 is beyond EOD, truncated [ 1586.184503][T22925] loop5: p183 size 100663296 extends beyond EOD, truncated [ 1586.189770][T22925] loop5: p184 start 9 is beyond EOD, truncated [ 1586.192124][T22925] loop5: p185 start 10 is beyond EOD, truncated [ 1586.193703][T22925] loop5: p186 size 100663296 extends beyond EOD, truncated [ 1586.198249][T22925] loop5: p187 start 9 is beyond EOD, truncated [ 1586.200325][T22925] loop5: p188 start 10 is beyond EOD, truncated [ 1586.202906][T22925] loop5: p189 size 100663296 extends beyond EOD, truncated [ 1586.207851][T22925] loop5: p190 start 9 is beyond EOD, truncated [ 1586.209921][T22925] loop5: p191 start 10 is beyond EOD, truncated [ 1586.212140][T22925] loop5: p192 size 100663296 extends beyond EOD, truncated [ 1586.216399][T22925] loop5: p193 start 9 is beyond EOD, truncated [ 1586.218484][T22925] loop5: p194 start 10 is beyond EOD, truncated [ 1586.221105][T22925] loop5: p195 size 100663296 extends beyond EOD, truncated [ 1586.225437][T22925] loop5: p196 start 9 is beyond EOD, truncated [ 1586.227806][T22925] loop5: p197 start 10 is beyond EOD, truncated [ 1586.229300][T22925] loop5: p198 size 100663296 extends beyond EOD, truncated [ 1586.234045][T22925] loop5: p199 start 9 is beyond EOD, truncated [ 1586.235753][T22925] loop5: p200 start 10 is beyond EOD, truncated [ 1586.237692][T22925] loop5: p201 size 100663296 extends beyond EOD, truncated [ 1586.241262][T22925] loop5: p202 start 9 is beyond EOD, truncated [ 1586.242941][T22925] loop5: p203 start 10 is beyond EOD, truncated [ 1586.244588][T22925] loop5: p204 size 100663296 extends beyond EOD, truncated [ 1586.250425][T22925] loop5: p205 start 9 is beyond EOD, truncated [ 1586.252307][T22925] loop5: p206 start 10 is beyond EOD, truncated [ 1586.253967][T22925] loop5: p207 size 100663296 extends beyond EOD, truncated [ 1586.258516][T22925] loop5: p208 start 9 is beyond EOD, truncated [ 1586.260463][T22925] loop5: p209 start 10 is beyond EOD, truncated [ 1586.262375][T22925] loop5: p210 size 100663296 extends beyond EOD, truncated [ 1586.266074][T22925] loop5: p211 start 9 is beyond EOD, truncated [ 1586.267474][T22925] loop5: p212 start 10 is beyond EOD, truncated [ 1586.269319][T22925] loop5: p213 size 100663296 extends beyond EOD, truncated [ 1586.273232][T22925] loop5: p214 start 9 is beyond EOD, truncated [ 1586.274652][T22925] loop5: p215 start 10 is beyond EOD, truncated [ 1586.276713][T22925] loop5: p216 size 100663296 extends beyond EOD, truncated [ 1586.281115][T22925] loop5: p217 start 9 is beyond EOD, truncated [ 1586.283219][T22925] loop5: p218 start 10 is beyond EOD, truncated [ 1586.284914][T22925] loop5: p219 size 100663296 extends beyond EOD, truncated [ 1586.291064][T22925] loop5: p220 start 9 is beyond EOD, truncated [ 1586.293286][T22925] loop5: p221 start 10 is beyond EOD, truncated [ 1586.295521][T22925] loop5: p222 size 100663296 extends beyond EOD, truncated [ 1586.299932][T22925] loop5: p223 start 9 is beyond EOD, truncated [ 1586.301501][T22925] loop5: p224 start 10 is beyond EOD, truncated [ 1586.303148][T22925] loop5: p225 size 100663296 extends beyond EOD, truncated [ 1586.307487][T22925] loop5: p226 start 9 is beyond EOD, truncated [ 1586.309253][T22925] loop5: p227 start 10 is beyond EOD, truncated [ 1586.310953][T22925] loop5: p228 size 100663296 extends beyond EOD, truncated [ 1586.314551][T22925] loop5: p229 start 9 is beyond EOD, truncated [ 1586.315676][T22925] loop5: p230 start 10 is beyond EOD, truncated [ 1586.316605][T22925] loop5: p231 size 100663296 extends beyond EOD, truncated [ 1586.319441][T22925] loop5: p232 start 9 is beyond EOD, truncated [ 1586.320720][T22925] loop5: p233 start 10 is beyond EOD, truncated [ 1586.322120][T22925] loop5: p234 size 100663296 extends beyond EOD, truncated [ 1586.326393][T22925] loop5: p235 start 9 is beyond EOD, truncated [ 1586.327592][T22925] loop5: p236 start 10 is beyond EOD, truncated [ 1586.328837][T22925] loop5: p237 size 100663296 extends beyond EOD, truncated [ 1586.331733][T22925] loop5: p238 start 9 is beyond EOD, truncated [ 1586.333237][T22925] loop5: p239 start 10 is beyond EOD, truncated [ 1586.334223][T22925] loop5: p240 size 100663296 extends beyond EOD, truncated [ 1586.338613][T22925] loop5: p241 start 9 is beyond EOD, truncated [ 1586.340105][T22925] loop5: p242 start 10 is beyond EOD, truncated [ 1586.341063][T22925] loop5: p243 size 100663296 extends beyond EOD, truncated [ 1586.345340][T22925] loop5: p244 start 9 is beyond EOD, truncated [ 1586.346329][T22925] loop5: p245 start 10 is beyond EOD, truncated [ 1586.347340][T22925] loop5: p246 size 100663296 extends beyond EOD, truncated [ 1586.350417][T22925] loop5: p247 start 9 is beyond EOD, truncated [ 1586.351743][T22925] loop5: p248 start 10 is beyond EOD, truncated [ 1586.352782][T22925] loop5: p249 size 100663296 extends beyond EOD, truncated [ 1586.357060][T22925] loop5: p250 start 9 is beyond EOD, truncated [ 1586.358015][T22925] loop5: p251 start 10 is beyond EOD, truncated [ 1586.359238][T22925] loop5: p252 size 100663296 extends beyond EOD, truncated [ 1586.363203][T22925] loop5: p253 start 9 is beyond EOD, truncated [ 1586.364256][T22925] loop5: p254 start 10 is beyond EOD, truncated [ 1586.365395][T22925] loop5: p255 size 100663296 extends beyond EOD, truncated 11:49:10 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="0201a6ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:10 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020181ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./Nile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:10 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2500000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:10 executing program 4: syz_read_part_table(0x0, 0x0, &(0x7f00000001c0)) 11:49:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./Pile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:10 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="0201a5ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:10 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2602000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./Rile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:10 executing program 4: syz_read_part_table(0x0, 0x0, &(0x7f00000001c0)) 11:49:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./Tile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:10 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020182ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1586.627372][T23178] loop5: detected capacity change from 0 to 1 [ 1586.707647][T23178] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 1586.707761][T23178] loop5: p1 start 10 is beyond EOD, truncated [ 1586.724209][T23178] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1586.730909][T23178] loop5: p3 start 9 is beyond EOD, truncated [ 1586.732231][T23178] loop5: p4 size 2 extends beyond EOD, truncated [ 1586.734044][T23178] loop5: p5 start 10 is beyond EOD, truncated [ 1586.735573][T23178] loop5: p6 size 100663296 extends beyond EOD, truncated [ 1586.737363][T23178] loop5: p7 start 9 is beyond EOD, truncated [ 1586.738806][T23178] loop5: p8 start 10 is beyond EOD, truncated [ 1586.739727][T23178] loop5: p9 size 100663296 extends beyond EOD, truncated [ 1586.741258][T23178] loop5: p10 start 9 is beyond EOD, truncated [ 1586.742399][T23178] loop5: p11 start 10 is beyond EOD, truncated [ 1586.743433][T23178] loop5: p12 size 100663296 extends beyond EOD, truncated [ 1586.745160][T23178] loop5: p13 start 9 is beyond EOD, truncated [ 1586.746271][T23178] loop5: p14 start 10 is beyond EOD, truncated [ 1586.747209][T23178] loop5: p15 size 100663296 extends beyond EOD, truncated [ 1586.748634][T23178] loop5: p16 start 9 is beyond EOD, truncated [ 1586.749837][T23178] loop5: p17 start 10 is beyond EOD, truncated [ 1586.750841][T23178] loop5: p18 size 100663296 extends beyond EOD, truncated [ 1586.752657][T23178] loop5: p19 start 9 is beyond EOD, truncated [ 1586.753596][T23178] loop5: p20 start 10 is beyond EOD, truncated [ 1586.754924][T23178] loop5: p21 size 100663296 extends beyond EOD, truncated [ 1586.757106][T23178] loop5: p22 start 9 is beyond EOD, truncated [ 1586.758629][T23178] loop5: p23 start 10 is beyond EOD, truncated [ 1586.759845][T23178] loop5: p24 size 100663296 extends beyond EOD, truncated [ 1586.771818][T23178] loop5: p25 start 9 is beyond EOD, truncated [ 1586.773153][T23178] loop5: p26 start 10 is beyond EOD, truncated [ 1586.774194][T23178] loop5: p27 size 100663296 extends beyond EOD, truncated [ 1586.776641][T23178] loop5: p28 start 9 is beyond EOD, truncated [ 1586.777813][T23178] loop5: p29 start 10 is beyond EOD, truncated [ 1586.778840][T23178] loop5: p30 size 100663296 extends beyond EOD, truncated [ 1586.780449][T23178] loop5: p31 start 9 is beyond EOD, truncated [ 1586.781545][T23178] loop5: p32 start 10 is beyond EOD, truncated [ 1586.782596][T23178] loop5: p33 size 100663296 extends beyond EOD, truncated [ 1586.784686][T23178] loop5: p34 start 9 is beyond EOD, truncated [ 1586.786568][T23178] loop5: p35 start 10 is beyond EOD, truncated [ 1586.788127][T23178] loop5: p36 size 100663296 extends beyond EOD, truncated [ 1586.790452][T23178] loop5: p37 start 9 is beyond EOD, truncated [ 1586.791599][T23178] loop5: p38 start 10 is beyond EOD, truncated [ 1586.792698][T23178] loop5: p39 size 100663296 extends beyond EOD, truncated [ 1586.795166][T23178] loop5: p40 start 9 is beyond EOD, truncated [ 1586.796279][T23178] loop5: p41 start 10 is beyond EOD, truncated [ 1586.797331][T23178] loop5: p42 size 100663296 extends beyond EOD, truncated [ 1586.798867][T23178] loop5: p43 start 9 is beyond EOD, truncated [ 1586.800004][T23178] loop5: p44 start 10 is beyond EOD, truncated [ 1586.801032][T23178] loop5: p45 size 100663296 extends beyond EOD, truncated [ 1586.803249][T23178] loop5: p46 start 9 is beyond EOD, truncated [ 1586.807951][T23178] loop5: p47 start 10 is beyond EOD, truncated [ 1586.809498][T23178] loop5: p48 size 100663296 extends beyond EOD, truncated [ 1586.810970][T23178] loop5: p49 start 9 is beyond EOD, truncated [ 1586.812084][T23178] loop5: p50 start 10 is beyond EOD, truncated [ 1586.813373][T23178] loop5: p51 size 100663296 extends beyond EOD, truncated [ 1586.815316][T23178] loop5: p52 start 9 is beyond EOD, truncated [ 1586.816242][T23178] loop5: p53 start 10 is beyond EOD, truncated [ 1586.817552][T23178] loop5: p54 size 100663296 extends beyond EOD, truncated [ 1586.819273][T23178] loop5: p55 start 9 is beyond EOD, truncated [ 1586.820656][T23178] loop5: p56 start 10 is beyond EOD, truncated [ 1586.821738][T23178] loop5: p57 size 100663296 extends beyond EOD, truncated [ 1586.823622][T23178] loop5: p58 start 9 is beyond EOD, truncated [ 1586.824759][T23178] loop5: p59 start 10 is beyond EOD, truncated [ 1586.825876][T23178] loop5: p60 size 100663296 extends beyond EOD, truncated [ 1586.827444][T23178] loop5: p61 start 9 is beyond EOD, truncated [ 1586.828671][T23178] loop5: p62 start 10 is beyond EOD, truncated [ 1586.829766][T23178] loop5: p63 size 100663296 extends beyond EOD, truncated [ 1586.831299][T23178] loop5: p64 start 9 is beyond EOD, truncated [ 1586.832451][T23178] loop5: p65 start 10 is beyond EOD, truncated [ 1586.833877][T23178] loop5: p66 size 100663296 extends beyond EOD, truncated [ 1586.835767][T23178] loop5: p67 start 9 is beyond EOD, truncated [ 1586.837178][T23178] loop5: p68 start 10 is beyond EOD, truncated [ 1586.838271][T23178] loop5: p69 size 100663296 extends beyond EOD, truncated [ 1586.840261][T23178] loop5: p70 start 9 is beyond EOD, truncated [ 1586.841387][T23178] loop5: p71 start 10 is beyond EOD, truncated [ 1586.842637][T23178] loop5: p72 size 100663296 extends beyond EOD, truncated [ 1586.844557][T23178] loop5: p73 start 9 is beyond EOD, truncated [ 1586.845604][T23178] loop5: p74 start 10 is beyond EOD, truncated [ 1586.847224][T23178] loop5: p75 size 100663296 extends beyond EOD, truncated [ 1586.849261][T23178] loop5: p76 start 9 is beyond EOD, truncated [ 1586.850336][T23178] loop5: p77 start 10 is beyond EOD, truncated [ 1586.851348][T23178] loop5: p78 size 100663296 extends beyond EOD, truncated [ 1586.852881][T23178] loop5: p79 start 9 is beyond EOD, truncated [ 1586.853912][T23178] loop5: p80 start 10 is beyond EOD, truncated [ 1586.855472][T23178] loop5: p81 size 100663296 extends beyond EOD, truncated [ 1586.856819][T23178] loop5: p82 start 9 is beyond EOD, truncated [ 1586.858298][T23178] loop5: p83 start 10 is beyond EOD, truncated [ 1586.859476][T23178] loop5: p84 size 100663296 extends beyond EOD, truncated [ 1586.860744][T23178] loop5: p85 start 9 is beyond EOD, truncated [ 1586.861825][T23178] loop5: p86 start 10 is beyond EOD, truncated [ 1586.862917][T23178] loop5: p87 size 100663296 extends beyond EOD, truncated [ 1586.864491][T23178] loop5: p88 start 9 is beyond EOD, truncated [ 1586.866633][T23178] loop5: p89 start 10 is beyond EOD, truncated [ 1586.867837][T23178] loop5: p90 size 100663296 extends beyond EOD, truncated [ 1586.869464][T23178] loop5: p91 start 9 is beyond EOD, truncated [ 1586.870926][T23178] loop5: p92 start 10 is beyond EOD, truncated [ 1586.872117][T23178] loop5: p93 size 100663296 extends beyond EOD, truncated [ 1586.873938][T23178] loop5: p94 start 9 is beyond EOD, truncated [ 1586.875238][T23178] loop5: p95 start 10 is beyond EOD, truncated [ 1586.876216][T23178] loop5: p96 size 100663296 extends beyond EOD, truncated [ 1586.877590][T23178] loop5: p97 start 9 is beyond EOD, truncated [ 1586.878885][T23178] loop5: p98 start 10 is beyond EOD, truncated [ 1586.880227][T23178] loop5: p99 size 100663296 extends beyond EOD, truncated [ 1586.881608][T23178] loop5: p100 start 9 is beyond EOD, truncated [ 1586.883594][T23178] loop5: p101 start 10 is beyond EOD, truncated [ 1586.885170][T23178] loop5: p102 size 100663296 extends beyond EOD, truncated [ 1586.886809][T23178] loop5: p103 start 9 is beyond EOD, truncated [ 1586.887785][T23178] loop5: p104 start 10 is beyond EOD, truncated [ 1586.888782][T23178] loop5: p105 size 100663296 extends beyond EOD, truncated [ 1586.890550][T23178] loop5: p106 start 9 is beyond EOD, truncated [ 1586.891947][T23178] loop5: p107 start 10 is beyond EOD, truncated [ 1586.892965][T23178] loop5: p108 size 100663296 extends beyond EOD, truncated [ 1586.894534][T23178] loop5: p109 start 9 is beyond EOD, truncated [ 1586.895593][T23178] loop5: p110 start 10 is beyond EOD, truncated [ 1586.896484][T23178] loop5: p111 size 100663296 extends beyond EOD, truncated [ 1586.900341][T23178] loop5: p112 start 9 is beyond EOD, truncated [ 1586.901838][T23178] loop5: p113 start 10 is beyond EOD, truncated [ 1586.903022][T23178] loop5: p114 size 100663296 extends beyond EOD, truncated [ 1586.905056][T23178] loop5: p115 start 9 is beyond EOD, truncated [ 1586.906650][T23178] loop5: p116 start 10 is beyond EOD, truncated [ 1586.907741][T23178] loop5: p117 size 100663296 extends beyond EOD, truncated [ 1586.909130][T23178] loop5: p118 start 9 is beyond EOD, truncated [ 1586.910097][T23178] loop5: p119 start 10 is beyond EOD, truncated [ 1586.911333][T23178] loop5: p120 size 100663296 extends beyond EOD, truncated [ 1586.913023][T23178] loop5: p121 start 9 is beyond EOD, truncated [ 1586.914306][T23178] loop5: p122 start 10 is beyond EOD, truncated [ 1586.915436][T23178] loop5: p123 size 100663296 extends beyond EOD, truncated [ 1586.916803][T23178] loop5: p124 start 9 is beyond EOD, truncated [ 1586.917718][T23178] loop5: p125 start 10 is beyond EOD, truncated [ 1586.918810][T23178] loop5: p126 size 100663296 extends beyond EOD, truncated [ 1586.920323][T23178] loop5: p127 start 9 is beyond EOD, truncated [ 1586.921819][T23178] loop5: p128 start 10 is beyond EOD, truncated [ 1586.923322][T23178] loop5: p129 size 100663296 extends beyond EOD, truncated [ 1586.924798][T23178] loop5: p130 start 9 is beyond EOD, truncated [ 1586.925747][T23178] loop5: p131 start 10 is beyond EOD, truncated [ 1586.926782][T23178] loop5: p132 size 100663296 extends beyond EOD, truncated [ 1586.928763][T23178] loop5: p133 start 9 is beyond EOD, truncated [ 1586.929700][T23178] loop5: p134 start 10 is beyond EOD, truncated [ 1586.930597][T23178] loop5: p135 size 100663296 extends beyond EOD, truncated [ 1586.932309][T23178] loop5: p136 start 9 is beyond EOD, truncated [ 1586.933385][T23178] loop5: p137 start 10 is beyond EOD, truncated [ 1586.934546][T23178] loop5: p138 size 100663296 extends beyond EOD, truncated [ 1586.936130][T23178] loop5: p139 start 9 is beyond EOD, truncated [ 1586.937074][T23178] loop5: p140 start 10 is beyond EOD, truncated [ 1586.937950][T23178] loop5: p141 size 100663296 extends beyond EOD, truncated [ 1586.939221][T23178] loop5: p142 start 9 is beyond EOD, truncated [ 1586.940128][T23178] loop5: p143 start 10 is beyond EOD, truncated [ 1586.941040][T23178] loop5: p144 size 100663296 extends beyond EOD, truncated [ 1586.942391][T23178] loop5: p145 start 9 is beyond EOD, truncated [ 1586.943521][T23178] loop5: p146 start 10 is beyond EOD, truncated [ 1586.944937][T23178] loop5: p147 size 100663296 extends beyond EOD, truncated [ 1586.946664][T23178] loop5: p148 start 9 is beyond EOD, truncated [ 1586.947574][T23178] loop5: p149 start 10 is beyond EOD, truncated [ 1586.948721][T23178] loop5: p150 size 100663296 extends beyond EOD, truncated [ 1586.950443][T23178] loop5: p151 start 9 is beyond EOD, truncated [ 1586.951410][T23178] loop5: p152 start 10 is beyond EOD, truncated [ 1586.952292][T23178] loop5: p153 size 100663296 extends beyond EOD, truncated [ 1586.954605][T23178] loop5: p154 start 9 is beyond EOD, truncated [ 1586.955620][T23178] loop5: p155 start 10 is beyond EOD, truncated [ 1586.956519][T23178] loop5: p156 size 100663296 extends beyond EOD, truncated [ 1586.957958][T23178] loop5: p157 start 9 is beyond EOD, truncated [ 1586.958986][T23178] loop5: p158 start 10 is beyond EOD, truncated [ 1586.959899][T23178] loop5: p159 size 100663296 extends beyond EOD, truncated [ 1586.961220][T23178] loop5: p160 start 9 is beyond EOD, truncated [ 1586.962425][T23178] loop5: p161 start 10 is beyond EOD, truncated [ 1586.963362][T23178] loop5: p162 size 100663296 extends beyond EOD, truncated [ 1586.965433][T23178] loop5: p163 start 9 is beyond EOD, truncated [ 1586.966470][T23178] loop5: p164 start 10 is beyond EOD, truncated [ 1586.967447][T23178] loop5: p165 size 100663296 extends beyond EOD, truncated [ 1586.969231][T23178] loop5: p166 start 9 is beyond EOD, truncated [ 1586.970248][T23178] loop5: p167 start 10 is beyond EOD, truncated [ 1586.971201][T23178] loop5: p168 size 100663296 extends beyond EOD, truncated [ 1586.972720][T23178] loop5: p169 start 9 is beyond EOD, truncated [ 1586.974032][T23178] loop5: p170 start 10 is beyond EOD, truncated [ 1586.975013][T23178] loop5: p171 size 100663296 extends beyond EOD, truncated [ 1586.976359][T23178] loop5: p172 start 9 is beyond EOD, truncated [ 1586.977419][T23178] loop5: p173 start 10 is beyond EOD, truncated [ 1586.978591][T23178] loop5: p174 size 100663296 extends beyond EOD, truncated [ 1586.980158][T23178] loop5: p175 start 9 is beyond EOD, truncated [ 1586.981122][T23178] loop5: p176 start 10 is beyond EOD, truncated [ 1586.982405][T23178] loop5: p177 size 100663296 extends beyond EOD, truncated [ 1586.984922][T23178] loop5: p178 start 9 is beyond EOD, truncated [ 1586.986305][T23178] loop5: p179 start 10 is beyond EOD, truncated [ 1586.987505][T23178] loop5: p180 size 100663296 extends beyond EOD, truncated [ 1586.989252][T23178] loop5: p181 start 9 is beyond EOD, truncated [ 1586.990285][T23178] loop5: p182 start 10 is beyond EOD, truncated [ 1586.991256][T23178] loop5: p183 size 100663296 extends beyond EOD, truncated [ 1586.992505][T23178] loop5: p184 start 9 is beyond EOD, truncated [ 1586.993575][T23178] loop5: p185 start 10 is beyond EOD, truncated [ 1586.994704][T23178] loop5: p186 size 100663296 extends beyond EOD, truncated [ 1586.996277][T23178] loop5: p187 start 9 is beyond EOD, truncated [ 1586.997468][T23178] loop5: p188 start 10 is beyond EOD, truncated [ 1586.998505][T23178] loop5: p189 size 100663296 extends beyond EOD, truncated [ 1586.999867][T23178] loop5: p190 start 9 is beyond EOD, truncated [ 1587.000975][T23178] loop5: p191 start 10 is beyond EOD, truncated [ 1587.002411][T23178] loop5: p192 size 100663296 extends beyond EOD, truncated [ 1587.005125][T23178] loop5: p193 start 9 is beyond EOD, truncated [ 1587.006134][T23178] loop5: p194 start 10 is beyond EOD, truncated [ 1587.007213][T23178] loop5: p195 size 100663296 extends beyond EOD, truncated [ 1587.008894][T23178] loop5: p196 start 9 is beyond EOD, truncated [ 1587.010155][T23178] loop5: p197 start 10 is beyond EOD, truncated [ 1587.011142][T23178] loop5: p198 size 100663296 extends beyond EOD, truncated [ 1587.013905][T23178] loop5: p199 start 9 is beyond EOD, truncated [ 1587.015113][T23178] loop5: p200 start 10 is beyond EOD, truncated [ 1587.016197][T23178] loop5: p201 size 100663296 extends beyond EOD, truncated [ 1587.017575][T23178] loop5: p202 start 9 is beyond EOD, truncated [ 1587.018646][T23178] loop5: p203 start 10 is beyond EOD, truncated [ 1587.019880][T23178] loop5: p204 size 100663296 extends beyond EOD, truncated [ 1587.021508][T23178] loop5: p205 start 9 is beyond EOD, truncated [ 1587.022857][T23178] loop5: p206 start 10 is beyond EOD, truncated [ 1587.023894][T23178] loop5: p207 size 100663296 extends beyond EOD, truncated [ 1587.025778][T23178] loop5: p208 start 9 is beyond EOD, truncated [ 1587.027203][T23178] loop5: p209 start 10 is beyond EOD, truncated [ 1587.028365][T23178] loop5: p210 size 100663296 extends beyond EOD, truncated [ 1587.029895][T23178] loop5: p211 start 9 is beyond EOD, truncated [ 1587.031138][T23178] loop5: p212 start 10 is beyond EOD, truncated [ 1587.032473][T23178] loop5: p213 size 100663296 extends beyond EOD, truncated [ 1587.034719][T23178] loop5: p214 start 9 is beyond EOD, truncated [ 1587.035700][T23178] loop5: p215 start 10 is beyond EOD, truncated [ 1587.037055][T23178] loop5: p216 size 100663296 extends beyond EOD, truncated [ 1587.038341][T23178] loop5: p217 start 9 is beyond EOD, truncated [ 1587.039936][T23178] loop5: p218 start 10 is beyond EOD, truncated [ 1587.041078][T23178] loop5: p219 size 100663296 extends beyond EOD, truncated [ 1587.042751][T23178] loop5: p220 start 9 is beyond EOD, truncated [ 1587.043808][T23178] loop5: p221 start 10 is beyond EOD, truncated [ 1587.044941][T23178] loop5: p222 size 100663296 extends beyond EOD, truncated [ 1587.046493][T23178] loop5: p223 start 9 is beyond EOD, truncated [ 1587.047758][T23178] loop5: p224 start 10 is beyond EOD, truncated [ 1587.049253][T23178] loop5: p225 size 100663296 extends beyond EOD, truncated [ 1587.050774][T23178] loop5: p226 start 9 is beyond EOD, truncated [ 1587.051729][T23178] loop5: p227 start 10 is beyond EOD, truncated [ 1587.052815][T23178] loop5: p228 size 100663296 extends beyond EOD, truncated [ 1587.054578][T23178] loop5: p229 start 9 is beyond EOD, truncated [ 1587.056106][T23178] loop5: p230 start 10 is beyond EOD, truncated [ 1587.057442][T23178] loop5: p231 size 100663296 extends beyond EOD, truncated [ 1587.059466][T23178] loop5: p232 start 9 is beyond EOD, truncated [ 1587.060848][T23178] loop5: p233 start 10 is beyond EOD, truncated [ 1587.061877][T23178] loop5: p234 size 100663296 extends beyond EOD, truncated [ 1587.064183][T23178] loop5: p235 start 9 is beyond EOD, truncated [ 1587.065297][T23178] loop5: p236 start 10 is beyond EOD, truncated [ 1587.066368][T23178] loop5: p237 size 100663296 extends beyond EOD, truncated [ 1587.068263][T23178] loop5: p238 start 9 is beyond EOD, truncated [ 1587.069478][T23178] loop5: p239 start 10 is beyond EOD, truncated [ 1587.070482][T23178] loop5: p240 size 100663296 extends beyond EOD, truncated [ 1587.072437][T23178] loop5: p241 start 9 is beyond EOD, truncated [ 1587.073690][T23178] loop5: p242 start 10 is beyond EOD, truncated [ 1587.074966][T23178] loop5: p243 size 100663296 extends beyond EOD, truncated [ 1587.076592][T23178] loop5: p244 start 9 is beyond EOD, truncated [ 1587.077697][T23178] loop5: p245 start 10 is beyond EOD, truncated [ 1587.079320][T23178] loop5: p246 size 100663296 extends beyond EOD, truncated [ 1587.080815][T23178] loop5: p247 start 9 is beyond EOD, truncated [ 1587.081751][T23178] loop5: p248 start 10 is beyond EOD, truncated [ 1587.083529][T23178] loop5: p249 size 100663296 extends beyond EOD, truncated [ 1587.085602][T23178] loop5: p250 start 9 is beyond EOD, truncated [ 1587.086770][T23178] loop5: p251 start 10 is beyond EOD, truncated [ 1587.087714][T23178] loop5: p252 size 100663296 extends beyond EOD, truncated [ 1587.090635][T23178] loop5: p253 start 9 is beyond EOD, truncated [ 1587.091853][T23178] loop5: p254 start 10 is beyond EOD, truncated [ 1587.092806][T23178] loop5: p255 size 100663296 extends beyond EOD, truncated [ 1587.124417][T32589] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 1587.124634][T32589] loop5: p1 start 10 is beyond EOD, truncated [ 1587.140240][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1587.142384][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1587.143930][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1587.147203][T32589] loop5: p5 start 10 is beyond EOD, truncated [ 1587.148552][T32589] loop5: p6 size 100663296 extends beyond EOD, truncated [ 1587.151246][T32589] loop5: p7 start 9 is beyond EOD, truncated [ 1587.153139][T32589] loop5: p8 start 10 is beyond EOD, truncated [ 1587.155080][T32589] loop5: p9 size 100663296 extends beyond EOD, truncated [ 1587.158018][T32589] loop5: p10 start 9 is beyond EOD, truncated [ 1587.159577][T32589] loop5: p11 start 10 is beyond EOD, truncated [ 1587.161583][T32589] loop5: p12 size 100663296 extends beyond EOD, truncated [ 1587.164876][T32589] loop5: p13 start 9 is beyond EOD, truncated [ 1587.166707][T32589] loop5: p14 start 10 is beyond EOD, truncated [ 1587.168838][T32589] loop5: p15 size 100663296 extends beyond EOD, truncated [ 1587.171313][T32589] loop5: p16 start 9 is beyond EOD, truncated [ 1587.172604][T32589] loop5: p17 start 10 is beyond EOD, truncated [ 1587.173712][T32589] loop5: p18 size 100663296 extends beyond EOD, truncated [ 1587.176033][T32589] loop5: p19 start 9 is beyond EOD, truncated [ 1587.177254][T32589] loop5: p20 start 10 is beyond EOD, truncated [ 1587.178859][T32589] loop5: p21 size 100663296 extends beyond EOD, truncated [ 1587.180743][T32589] loop5: p22 start 9 is beyond EOD, truncated [ 1587.182089][T32589] loop5: p23 start 10 is beyond EOD, truncated [ 1587.183514][T32589] loop5: p24 size 100663296 extends beyond EOD, truncated [ 1587.185471][T32589] loop5: p25 start 9 is beyond EOD, truncated [ 1587.187164][T32589] loop5: p26 start 10 is beyond EOD, truncated [ 1587.189163][T32589] loop5: p27 size 100663296 extends beyond EOD, truncated [ 1587.190782][T32589] loop5: p28 start 9 is beyond EOD, truncated [ 1587.191971][T32589] loop5: p29 start 10 is beyond EOD, truncated [ 1587.193442][T32589] loop5: p30 size 100663296 extends beyond EOD, truncated [ 1587.195872][T32589] loop5: p31 start 9 is beyond EOD, truncated [ 1587.198072][T32589] loop5: p32 start 10 is beyond EOD, truncated [ 1587.199584][T32589] loop5: p33 size 100663296 extends beyond EOD, truncated [ 1587.201878][T32589] loop5: p34 start 9 is beyond EOD, truncated [ 1587.203491][T32589] loop5: p35 start 10 is beyond EOD, truncated [ 1587.205426][T32589] loop5: p36 size 100663296 extends beyond EOD, truncated [ 1587.207689][T32589] loop5: p37 start 9 is beyond EOD, truncated [ 1587.208836][T32589] loop5: p38 start 10 is beyond EOD, truncated [ 1587.210382][T32589] loop5: p39 size 100663296 extends beyond EOD, truncated [ 1587.212313][T32589] loop5: p40 start 9 is beyond EOD, truncated [ 1587.213918][T32589] loop5: p41 start 10 is beyond EOD, truncated [ 1587.215740][T32589] loop5: p42 size 100663296 extends beyond EOD, truncated [ 1587.217410][T32589] loop5: p43 start 9 is beyond EOD, truncated [ 1587.218542][T32589] loop5: p44 start 10 is beyond EOD, truncated [ 1587.219764][T32589] loop5: p45 size 100663296 extends beyond EOD, truncated [ 1587.222106][T32589] loop5: p46 start 9 is beyond EOD, truncated [ 1587.223606][T32589] loop5: p47 start 10 is beyond EOD, truncated [ 1587.226352][T32589] loop5: p48 size 100663296 extends beyond EOD, truncated [ 1587.231804][T32589] loop5: p49 start 9 is beyond EOD, truncated [ 1587.233952][T32589] loop5: p50 start 10 is beyond EOD, truncated [ 1587.235302][T32589] loop5: p51 size 100663296 extends beyond EOD, truncated [ 1587.237344][T32589] loop5: p52 start 9 is beyond EOD, truncated [ 1587.238699][T32589] loop5: p53 start 10 is beyond EOD, truncated [ 1587.240096][T32589] loop5: p54 size 100663296 extends beyond EOD, truncated [ 1587.241601][T32589] loop5: p55 start 9 is beyond EOD, truncated [ 1587.243070][T32589] loop5: p56 start 10 is beyond EOD, truncated [ 1587.244764][T32589] loop5: p57 size 100663296 extends beyond EOD, truncated [ 1587.247081][T32589] loop5: p58 start 9 is beyond EOD, truncated [ 1587.248588][T32589] loop5: p59 start 10 is beyond EOD, truncated [ 1587.249977][T32589] loop5: p60 size 100663296 extends beyond EOD, truncated [ 1587.252287][T32589] loop5: p61 start 9 is beyond EOD, truncated [ 1587.253748][T32589] loop5: p62 start 10 is beyond EOD, truncated [ 1587.255786][T32589] loop5: p63 size 100663296 extends beyond EOD, truncated [ 1587.257893][T32589] loop5: p64 start 9 is beyond EOD, truncated [ 1587.260203][T32589] loop5: p65 start 10 is beyond EOD, truncated [ 1587.262692][T32589] loop5: p66 size 100663296 extends beyond EOD, truncated [ 1587.265685][T32589] loop5: p67 start 9 is beyond EOD, truncated [ 1587.267460][T32589] loop5: p68 start 10 is beyond EOD, truncated [ 1587.269936][T32589] loop5: p69 size 100663296 extends beyond EOD, truncated [ 1587.271743][T32589] loop5: p70 start 9 is beyond EOD, truncated [ 1587.273028][T32589] loop5: p71 start 10 is beyond EOD, truncated [ 1587.274707][T32589] loop5: p72 size 100663296 extends beyond EOD, truncated [ 1587.277061][T32589] loop5: p73 start 9 is beyond EOD, truncated [ 1587.279220][T32589] loop5: p74 start 10 is beyond EOD, truncated [ 1587.280301][T32589] loop5: p75 size 100663296 extends beyond EOD, truncated [ 1587.282683][T32589] loop5: p76 start 9 is beyond EOD, truncated [ 1587.284268][T32589] loop5: p77 start 10 is beyond EOD, truncated [ 1587.286007][T32589] loop5: p78 size 100663296 extends beyond EOD, truncated [ 1587.287786][T32589] loop5: p79 start 9 is beyond EOD, truncated [ 1587.288988][T32589] loop5: p80 start 10 is beyond EOD, truncated [ 1587.289949][T32589] loop5: p81 size 100663296 extends beyond EOD, truncated [ 1587.292487][T32589] loop5: p82 start 9 is beyond EOD, truncated [ 1587.294874][T32589] loop5: p83 start 10 is beyond EOD, truncated [ 1587.296414][T32589] loop5: p84 size 100663296 extends beyond EOD, truncated [ 1587.298523][T32589] loop5: p85 start 9 is beyond EOD, truncated [ 1587.299858][T32589] loop5: p86 start 10 is beyond EOD, truncated [ 1587.301391][T32589] loop5: p87 size 100663296 extends beyond EOD, truncated [ 1587.303047][T32589] loop5: p88 start 9 is beyond EOD, truncated [ 1587.304841][T32589] loop5: p89 start 10 is beyond EOD, truncated [ 1587.305942][T32589] loop5: p90 size 100663296 extends beyond EOD, truncated [ 1587.307899][T32589] loop5: p91 start 9 is beyond EOD, truncated [ 1587.308956][T32589] loop5: p92 start 10 is beyond EOD, truncated [ 1587.310083][T32589] loop5: p93 size 100663296 extends beyond EOD, truncated [ 1587.311799][T32589] loop5: p94 start 9 is beyond EOD, truncated [ 1587.313374][T32589] loop5: p95 start 10 is beyond EOD, truncated [ 1587.315370][T32589] loop5: p96 size 100663296 extends beyond EOD, truncated [ 1587.317514][T32589] loop5: p97 start 9 is beyond EOD, truncated [ 1587.318405][T32589] loop5: p98 start 10 is beyond EOD, truncated [ 1587.319740][T32589] loop5: p99 size 100663296 extends beyond EOD, truncated [ 1587.321816][T32589] loop5: p100 start 9 is beyond EOD, truncated [ 1587.323406][T32589] loop5: p101 start 10 is beyond EOD, truncated [ 1587.325378][T32589] loop5: p102 size 100663296 extends beyond EOD, truncated [ 1587.327870][T32589] loop5: p103 start 9 is beyond EOD, truncated [ 1587.329845][T32589] loop5: p104 start 10 is beyond EOD, truncated [ 1587.331277][T32589] loop5: p105 size 100663296 extends beyond EOD, truncated [ 1587.333880][T32589] loop5: p106 start 9 is beyond EOD, truncated [ 1587.335603][T32589] loop5: p107 start 10 is beyond EOD, truncated [ 1587.337127][T32589] loop5: p108 size 100663296 extends beyond EOD, truncated [ 1587.338947][T32589] loop5: p109 start 9 is beyond EOD, truncated [ 1587.340225][T32589] loop5: p110 start 10 is beyond EOD, truncated [ 1587.341096][T32589] loop5: p111 size 100663296 extends beyond EOD, truncated [ 1587.342923][T32589] loop5: p112 start 9 is beyond EOD, truncated [ 1587.344835][T32589] loop5: p113 start 10 is beyond EOD, truncated [ 1587.345929][T32589] loop5: p114 size 100663296 extends beyond EOD, truncated [ 1587.347606][T32589] loop5: p115 start 9 is beyond EOD, truncated [ 1587.348865][T32589] loop5: p116 start 10 is beyond EOD, truncated [ 1587.350046][T32589] loop5: p117 size 100663296 extends beyond EOD, truncated [ 1587.352119][T32589] loop5: p118 start 9 is beyond EOD, truncated [ 1587.353369][T32589] loop5: p119 start 10 is beyond EOD, truncated [ 1587.354593][T32589] loop5: p120 size 100663296 extends beyond EOD, truncated [ 1587.356725][T32589] loop5: p121 start 9 is beyond EOD, truncated [ 1587.358778][T32589] loop5: p122 start 10 is beyond EOD, truncated [ 1587.361448][T32589] loop5: p123 size 100663296 extends beyond EOD, truncated [ 1587.363956][T32589] loop5: p124 start 9 is beyond EOD, truncated [ 1587.365937][T32589] loop5: p125 start 10 is beyond EOD, truncated [ 1587.367656][T32589] loop5: p126 size 100663296 extends beyond EOD, truncated [ 1587.369504][T32589] loop5: p127 start 9 is beyond EOD, truncated [ 1587.371211][T32589] loop5: p128 start 10 is beyond EOD, truncated [ 1587.372638][T32589] loop5: p129 size 100663296 extends beyond EOD, truncated [ 1587.375532][T32589] loop5: p130 start 9 is beyond EOD, truncated [ 1587.377601][T32589] loop5: p131 start 10 is beyond EOD, truncated [ 1587.378558][T32589] loop5: p132 size 100663296 extends beyond EOD, truncated [ 1587.380082][T32589] loop5: p133 start 9 is beyond EOD, truncated [ 1587.381149][T32589] loop5: p134 start 10 is beyond EOD, truncated [ 1587.382275][T32589] loop5: p135 size 100663296 extends beyond EOD, truncated [ 1587.384801][T32589] loop5: p136 start 9 is beyond EOD, truncated [ 1587.385871][T32589] loop5: p137 start 10 is beyond EOD, truncated [ 1587.386855][T32589] loop5: p138 size 100663296 extends beyond EOD, truncated [ 1587.388185][T32589] loop5: p139 start 9 is beyond EOD, truncated [ 1587.389106][T32589] loop5: p140 start 10 is beyond EOD, truncated [ 1587.390342][T32589] loop5: p141 size 100663296 extends beyond EOD, truncated [ 1587.392094][T32589] loop5: p142 start 9 is beyond EOD, truncated [ 1587.393812][T32589] loop5: p143 start 10 is beyond EOD, truncated [ 1587.395461][T32589] loop5: p144 size 100663296 extends beyond EOD, truncated [ 1587.397328][T32589] loop5: p145 start 9 is beyond EOD, truncated [ 1587.398745][T32589] loop5: p146 start 10 is beyond EOD, truncated [ 1587.400639][T32589] loop5: p147 size 100663296 extends beyond EOD, truncated [ 1587.402281][T32589] loop5: p148 start 9 is beyond EOD, truncated [ 1587.403540][T32589] loop5: p149 start 10 is beyond EOD, truncated [ 1587.405003][T32589] loop5: p150 size 100663296 extends beyond EOD, truncated [ 1587.407001][T32589] loop5: p151 start 9 is beyond EOD, truncated [ 1587.408875][T32589] loop5: p152 start 10 is beyond EOD, truncated [ 1587.410780][T32589] loop5: p153 size 100663296 extends beyond EOD, truncated [ 1587.412941][T32589] loop5: p154 start 9 is beyond EOD, truncated [ 1587.414377][T32589] loop5: p155 start 10 is beyond EOD, truncated [ 1587.416216][T32589] loop5: p156 size 100663296 extends beyond EOD, truncated [ 1587.418303][T32589] loop5: p157 start 9 is beyond EOD, truncated [ 1587.419264][T32589] loop5: p158 start 10 is beyond EOD, truncated [ 1587.420376][T32589] loop5: p159 size 100663296 extends beyond EOD, truncated [ 1587.422180][T32589] loop5: p160 start 9 is beyond EOD, truncated [ 1587.423516][T32589] loop5: p161 start 10 is beyond EOD, truncated [ 1587.425390][T32589] loop5: p162 size 100663296 extends beyond EOD, truncated [ 1587.428016][T32589] loop5: p163 start 9 is beyond EOD, truncated [ 1587.429403][T32589] loop5: p164 start 10 is beyond EOD, truncated [ 1587.430574][T32589] loop5: p165 size 100663296 extends beyond EOD, truncated [ 1587.434044][T32589] loop5: p166 start 9 is beyond EOD, truncated [ 1587.434964][T32589] loop5: p167 start 10 is beyond EOD, truncated [ 1587.437180][T32589] loop5: p168 size 100663296 extends beyond EOD, truncated [ 1587.440363][T32589] loop5: p169 start 9 is beyond EOD, truncated [ 1587.441609][T32589] loop5: p170 start 10 is beyond EOD, truncated [ 1587.442829][T32589] loop5: p171 size 100663296 extends beyond EOD, truncated [ 1587.445374][T32589] loop5: p172 start 9 is beyond EOD, truncated [ 1587.446583][T32589] loop5: p173 start 10 is beyond EOD, truncated [ 1587.448007][T32589] loop5: p174 size 100663296 extends beyond EOD, truncated [ 1587.449868][T32589] loop5: p175 start 9 is beyond EOD, truncated [ 1587.451212][T32589] loop5: p176 start 10 is beyond EOD, truncated [ 1587.452371][T32589] loop5: p177 size 100663296 extends beyond EOD, truncated [ 1587.455134][T32589] loop5: p178 start 9 is beyond EOD, truncated [ 1587.456769][T32589] loop5: p179 start 10 is beyond EOD, truncated [ 1587.457926][T32589] loop5: p180 size 100663296 extends beyond EOD, truncated [ 1587.460235][T32589] loop5: p181 start 9 is beyond EOD, truncated [ 1587.463065][T32589] loop5: p182 start 10 is beyond EOD, truncated [ 1587.464432][T32589] loop5: p183 size 100663296 extends beyond EOD, truncated [ 1587.466137][T32589] loop5: p184 start 9 is beyond EOD, truncated [ 1587.467505][T32589] loop5: p185 start 10 is beyond EOD, truncated [ 1587.468672][T32589] loop5: p186 size 100663296 extends beyond EOD, truncated [ 1587.470229][T32589] loop5: p187 start 9 is beyond EOD, truncated [ 1587.471176][T32589] loop5: p188 start 10 is beyond EOD, truncated [ 1587.472108][T32589] loop5: p189 size 100663296 extends beyond EOD, truncated [ 1587.474902][T32589] loop5: p190 start 9 is beyond EOD, truncated [ 1587.476115][T32589] loop5: p191 start 10 is beyond EOD, truncated [ 1587.477161][T32589] loop5: p192 size 100663296 extends beyond EOD, truncated [ 1587.478808][T32589] loop5: p193 start 9 is beyond EOD, truncated [ 1587.479739][T32589] loop5: p194 start 10 is beyond EOD, truncated [ 1587.480665][T32589] loop5: p195 size 100663296 extends beyond EOD, truncated [ 1587.482111][T32589] loop5: p196 start 9 is beyond EOD, truncated [ 1587.483099][T32589] loop5: p197 start 10 is beyond EOD, truncated [ 1587.484132][T32589] loop5: p198 size 100663296 extends beyond EOD, truncated [ 1587.485648][T32589] loop5: p199 start 9 is beyond EOD, truncated [ 1587.486840][T32589] loop5: p200 start 10 is beyond EOD, truncated [ 1587.487810][T32589] loop5: p201 size 100663296 extends beyond EOD, truncated [ 1587.489171][T32589] loop5: p202 start 9 is beyond EOD, truncated [ 1587.490098][T32589] loop5: p203 start 10 is beyond EOD, truncated [ 1587.491026][T32589] loop5: p204 size 100663296 extends beyond EOD, truncated [ 1587.492672][T32589] loop5: p205 start 9 is beyond EOD, truncated [ 1587.493763][T32589] loop5: p206 start 10 is beyond EOD, truncated [ 1587.494795][T32589] loop5: p207 size 100663296 extends beyond EOD, truncated [ 1587.496763][T32589] loop5: p208 start 9 is beyond EOD, truncated [ 1587.497708][T32589] loop5: p209 start 10 is beyond EOD, truncated [ 1587.498614][T32589] loop5: p210 size 100663296 extends beyond EOD, truncated [ 1587.500190][T32589] loop5: p211 start 9 is beyond EOD, truncated [ 1587.501392][T32589] loop5: p212 start 10 is beyond EOD, truncated [ 1587.502575][T32589] loop5: p213 size 100663296 extends beyond EOD, truncated [ 1587.505517][T32589] loop5: p214 start 9 is beyond EOD, truncated [ 1587.506448][T32589] loop5: p215 start 10 is beyond EOD, truncated [ 1587.507408][T32589] loop5: p216 size 100663296 extends beyond EOD, truncated [ 1587.508770][T32589] loop5: p217 start 9 is beyond EOD, truncated [ 1587.509704][T32589] loop5: p218 start 10 is beyond EOD, truncated [ 1587.510735][T32589] loop5: p219 size 100663296 extends beyond EOD, truncated [ 1587.512060][T32589] loop5: p220 start 9 is beyond EOD, truncated [ 1587.513039][T32589] loop5: p221 start 10 is beyond EOD, truncated [ 1587.514129][T32589] loop5: p222 size 100663296 extends beyond EOD, truncated [ 1587.515549][T32589] loop5: p223 start 9 is beyond EOD, truncated [ 1587.516489][T32589] loop5: p224 start 10 is beyond EOD, truncated [ 1587.517522][T32589] loop5: p225 size 100663296 extends beyond EOD, truncated [ 1587.518968][T32589] loop5: p226 start 9 is beyond EOD, truncated [ 1587.519923][T32589] loop5: p227 start 10 is beyond EOD, truncated [ 1587.520789][T32589] loop5: p228 size 100663296 extends beyond EOD, truncated [ 1587.522192][T32589] loop5: p229 start 9 is beyond EOD, truncated [ 1587.523569][T32589] loop5: p230 start 10 is beyond EOD, truncated [ 1587.524841][T32589] loop5: p231 size 100663296 extends beyond EOD, truncated [ 1587.526243][T32589] loop5: p232 start 9 is beyond EOD, truncated [ 1587.527788][T32589] loop5: p233 start 10 is beyond EOD, truncated [ 1587.528880][T32589] loop5: p234 size 100663296 extends beyond EOD, truncated [ 1587.530846][T32589] loop5: p235 start 9 is beyond EOD, truncated [ 1587.531926][T32589] loop5: p236 start 10 is beyond EOD, truncated [ 1587.532910][T32589] loop5: p237 size 100663296 extends beyond EOD, truncated [ 1587.535281][T32589] loop5: p238 start 9 is beyond EOD, truncated [ 1587.536544][T32589] loop5: p239 start 10 is beyond EOD, truncated [ 1587.537381][T32589] loop5: p240 size 100663296 extends beyond EOD, truncated [ 1587.538748][T32589] loop5: p241 start 9 is beyond EOD, truncated [ 1587.539941][T32589] loop5: p242 start 10 is beyond EOD, truncated [ 1587.540924][T32589] loop5: p243 size 100663296 extends beyond EOD, truncated [ 1587.542409][T32589] loop5: p244 start 9 is beyond EOD, truncated [ 1587.543397][T32589] loop5: p245 start 10 is beyond EOD, truncated [ 1587.544376][T32589] loop5: p246 size 100663296 extends beyond EOD, truncated [ 1587.546028][T32589] loop5: p247 start 9 is beyond EOD, truncated [ 1587.547165][T32589] loop5: p248 start 10 is beyond EOD, truncated [ 1587.548433][T32589] loop5: p249 size 100663296 extends beyond EOD, truncated [ 1587.550325][T32589] loop5: p250 start 9 is beyond EOD, truncated [ 1587.551983][T32589] loop5: p251 start 10 is beyond EOD, truncated [ 1587.552928][T32589] loop5: p252 size 100663296 extends beyond EOD, truncated [ 1587.555166][T32589] loop5: p253 start 9 is beyond EOD, truncated [ 1587.556568][T32589] loop5: p254 start 10 is beyond EOD, truncated [ 1587.557507][T32589] loop5: p255 size 100663296 extends beyond EOD, truncated 11:49:11 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="0201a9ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:11 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2702000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./Vile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:11 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020182ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:11 executing program 4: syz_read_part_table(0x0, 0x0, &(0x7f00000001c0)) 11:49:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000739d7c3d8bc938da0000001100010000000000000000000000000a9ca6faffffff71de22d74af257b8f908b716c45da30d6c361158b768b5bff0358185d922b0660ca891c3e8ce1c6174ff1e000000000000000000"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8ffff00000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a310000e3ff0900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c001c80050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x121200, 0x0) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='/\x00\x00\x00', @ANYRES16, @ANYBLOB="000827bd7000fcdbdf250900000005001300ff0000000500130007000000"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x10) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x703d26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./Xile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:11 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020182ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da000000095dda4a79e3771100011100000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1587.833065][T23556] loop5: detected capacity change from 0 to 1 11:49:11 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3f00000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:11 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x1c0}]) 11:49:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./Zile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1587.880714][T23556] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 1587.880869][T23556] loop5: p1 start 10 is beyond EOD, truncated [ 1587.895875][T23556] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1587.980471][T23589] loop4: detected capacity change from 0 to 1 [ 1587.992404][T23556] loop5: p3 start 9 is beyond EOD, truncated [ 1587.993601][T23556] loop5: p4 size 2 extends beyond EOD, truncated [ 1588.008204][T23556] loop5: p5 start 10 is beyond EOD, truncated [ 1588.010729][T23556] loop5: p6 size 100663296 extends beyond EOD, truncated [ 1588.012779][T23556] loop5: p7 start 9 is beyond EOD, truncated [ 1588.014356][T23556] loop5: p8 start 10 is beyond EOD, truncated [ 1588.015329][T23556] loop5: p9 size 100663296 extends beyond EOD, truncated [ 1588.016870][T23556] loop5: p10 start 9 is beyond EOD, truncated [ 1588.017908][T23556] loop5: p11 start 10 is beyond EOD, truncated [ 1588.018852][T23556] loop5: p12 size 100663296 extends beyond EOD, truncated [ 1588.020778][T23556] loop5: p13 start 9 is beyond EOD, truncated [ 1588.021834][T23556] loop5: p14 start 10 is beyond EOD, truncated [ 1588.022960][T23556] loop5: p15 size 100663296 extends beyond EOD, truncated [ 1588.026698][T23556] loop5: p16 start 9 is beyond EOD, truncated [ 1588.027748][T23556] loop5: p17 start 10 is beyond EOD, truncated [ 1588.029341][T23556] loop5: p18 size 100663296 extends beyond EOD, truncated [ 1588.031727][T23556] loop5: p19 start 9 is beyond EOD, truncated [ 1588.032866][T23556] loop5: p20 start 10 is beyond EOD, truncated [ 1588.034014][T23556] loop5: p21 size 100663296 extends beyond EOD, truncated [ 1588.036372][T23556] loop5: p22 start 9 is beyond EOD, truncated [ 1588.037755][T23556] loop5: p23 start 10 is beyond EOD, truncated [ 1588.039030][T23556] loop5: p24 size 100663296 extends beyond EOD, truncated [ 1588.041085][T23556] loop5: p25 start 9 is beyond EOD, truncated [ 1588.042036][T23556] loop5: p26 start 10 is beyond EOD, truncated [ 1588.043019][T23556] loop5: p27 size 100663296 extends beyond EOD, truncated [ 1588.045869][T23556] loop5: p28 start 9 is beyond EOD, truncated [ 1588.047049][T23556] loop5: p29 start 10 is beyond EOD, truncated [ 1588.048278][T23556] loop5: p30 size 100663296 extends beyond EOD, truncated [ 1588.050361][T23556] loop5: p31 start 9 is beyond EOD, truncated [ 1588.051821][T23556] loop5: p32 start 10 is beyond EOD, truncated [ 1588.052979][T23556] loop5: p33 size 100663296 extends beyond EOD, truncated [ 1588.056820][T23556] loop5: p34 start 9 is beyond EOD, truncated [ 1588.058197][T23556] loop5: p35 start 10 is beyond EOD, truncated [ 1588.059225][T23556] loop5: p36 size 100663296 extends beyond EOD, truncated [ 1588.061330][T23556] loop5: p37 start 9 is beyond EOD, truncated [ 1588.062843][T23556] loop5: p38 start 10 is beyond EOD, truncated [ 1588.064111][T23556] loop5: p39 size 100663296 extends beyond EOD, truncated [ 1588.067025][T23556] loop5: p40 start 9 is beyond EOD, truncated [ 1588.068190][T23556] loop5: p41 start 10 is beyond EOD, truncated [ 1588.069143][T23556] loop5: p42 size 100663296 extends beyond EOD, truncated [ 1588.071664][T23556] loop5: p43 start 9 is beyond EOD, truncated [ 1588.073010][T23556] loop5: p44 start 10 is beyond EOD, truncated [ 1588.074480][T23556] loop5: p45 size 100663296 extends beyond EOD, truncated [ 1588.077604][T23556] loop5: p46 start 9 is beyond EOD, truncated [ 1588.078949][T23556] loop5: p47 start 10 is beyond EOD, truncated [ 1588.080186][T23556] loop5: p48 size 100663296 extends beyond EOD, truncated [ 1588.082718][T23556] loop5: p49 start 9 is beyond EOD, truncated [ 1588.083818][T23556] loop5: p50 start 10 is beyond EOD, truncated [ 1588.084889][T23556] loop5: p51 size 100663296 extends beyond EOD, truncated [ 1588.088422][T23556] loop5: p52 start 9 is beyond EOD, truncated [ 1588.089584][T23556] loop5: p53 start 10 is beyond EOD, truncated [ 1588.090680][T23556] loop5: p54 size 100663296 extends beyond EOD, truncated [ 1588.092957][T23556] loop5: p55 start 9 is beyond EOD, truncated [ 1588.094390][T23556] loop5: p56 start 10 is beyond EOD, truncated [ 1588.095563][T23556] loop5: p57 size 100663296 extends beyond EOD, truncated [ 1588.098772][T23556] loop5: p58 start 9 is beyond EOD, truncated [ 1588.099888][T23556] loop5: p59 start 10 is beyond EOD, truncated [ 1588.100866][T23556] loop5: p60 size 100663296 extends beyond EOD, truncated [ 1588.102893][T23556] loop5: p61 start 9 is beyond EOD, truncated [ 1588.104074][T23556] loop5: p62 start 10 is beyond EOD, truncated [ 1588.105126][T23556] loop5: p63 size 100663296 extends beyond EOD, truncated [ 1588.108891][T23556] loop5: p64 start 9 is beyond EOD, truncated [ 1588.110407][T23556] loop5: p65 start 10 is beyond EOD, truncated [ 1588.112224][T23556] loop5: p66 size 100663296 extends beyond EOD, truncated [ 1588.115349][T23556] loop5: p67 start 9 is beyond EOD, truncated [ 1588.116577][T23556] loop5: p68 start 10 is beyond EOD, truncated [ 1588.118391][T23556] loop5: p69 size 100663296 extends beyond EOD, truncated [ 1588.120477][T23556] loop5: p70 start 9 is beyond EOD, truncated [ 1588.121949][T23556] loop5: p71 start 10 is beyond EOD, truncated [ 1588.123606][T23556] loop5: p72 size 100663296 extends beyond EOD, truncated [ 1588.127031][T23556] loop5: p73 start 9 is beyond EOD, truncated [ 1588.128577][T23556] loop5: p74 start 10 is beyond EOD, truncated [ 1588.129654][T23556] loop5: p75 size 100663296 extends beyond EOD, truncated [ 1588.131688][T23556] loop5: p76 start 9 is beyond EOD, truncated [ 1588.133097][T23556] loop5: p77 start 10 is beyond EOD, truncated [ 1588.134648][T23556] loop5: p78 size 100663296 extends beyond EOD, truncated [ 1588.137188][T23556] loop5: p79 start 9 is beyond EOD, truncated [ 1588.138383][T23556] loop5: p80 start 10 is beyond EOD, truncated [ 1588.139479][T23556] loop5: p81 size 100663296 extends beyond EOD, truncated [ 1588.141854][T23556] loop5: p82 start 9 is beyond EOD, truncated [ 1588.142874][T23556] loop5: p83 start 10 is beyond EOD, truncated [ 1588.143921][T23556] loop5: p84 size 100663296 extends beyond EOD, truncated [ 1588.146771][T23556] loop5: p85 start 9 is beyond EOD, truncated [ 1588.148037][T23556] loop5: p86 start 10 is beyond EOD, truncated [ 1588.149501][T23556] loop5: p87 size 100663296 extends beyond EOD, truncated [ 1588.151781][T23556] loop5: p88 start 9 is beyond EOD, truncated [ 1588.153085][T23556] loop5: p89 start 10 is beyond EOD, truncated [ 1588.154603][T23556] loop5: p90 size 100663296 extends beyond EOD, truncated [ 1588.157293][T23556] loop5: p91 start 9 is beyond EOD, truncated [ 1588.158745][T23556] loop5: p92 start 10 is beyond EOD, truncated [ 1588.160145][T23556] loop5: p93 size 100663296 extends beyond EOD, truncated [ 1588.161721][T23556] loop5: p94 start 9 is beyond EOD, truncated [ 1588.162688][T23556] loop5: p95 start 10 is beyond EOD, truncated [ 1588.163684][T23556] loop5: p96 size 100663296 extends beyond EOD, truncated [ 1588.166393][T23556] loop5: p97 start 9 is beyond EOD, truncated [ 1588.167387][T23556] loop5: p98 start 10 is beyond EOD, truncated [ 1588.168557][T23556] loop5: p99 size 100663296 extends beyond EOD, truncated [ 1588.174402][T23556] loop5: p100 start 9 is beyond EOD, truncated [ 1588.175587][T23556] loop5: p101 start 10 is beyond EOD, truncated [ 1588.177246][T23556] loop5: p102 size 100663296 extends beyond EOD, truncated [ 1588.179516][T23556] loop5: p103 start 9 is beyond EOD, truncated [ 1588.180820][T23556] loop5: p104 start 10 is beyond EOD, truncated [ 1588.181913][T23556] loop5: p105 size 100663296 extends beyond EOD, truncated [ 1588.184695][T23556] loop5: p106 start 9 is beyond EOD, truncated [ 1588.185820][T23556] loop5: p107 start 10 is beyond EOD, truncated [ 1588.187291][T23556] loop5: p108 size 100663296 extends beyond EOD, truncated [ 1588.189648][T23556] loop5: p109 start 9 is beyond EOD, truncated [ 1588.191223][T23556] loop5: p110 start 10 is beyond EOD, truncated [ 1588.192999][T23556] loop5: p111 size 100663296 extends beyond EOD, truncated [ 1588.195884][T23556] loop5: p112 start 9 is beyond EOD, truncated [ 1588.197118][T23556] loop5: p113 start 10 is beyond EOD, truncated [ 1588.198155][T23556] loop5: p114 size 100663296 extends beyond EOD, truncated [ 1588.199481][T23556] loop5: p115 start 9 is beyond EOD, truncated [ 1588.200684][T23556] loop5: p116 start 10 is beyond EOD, truncated [ 1588.201789][T23556] loop5: p117 size 100663296 extends beyond EOD, truncated [ 1588.203338][T23556] loop5: p118 start 9 is beyond EOD, truncated [ 1588.204395][T23556] loop5: p119 start 10 is beyond EOD, truncated [ 1588.205599][T23556] loop5: p120 size 100663296 extends beyond EOD, truncated [ 1588.208574][T23556] loop5: p121 start 9 is beyond EOD, truncated [ 1588.209987][T23556] loop5: p122 start 10 is beyond EOD, truncated [ 1588.211063][T23556] loop5: p123 size 100663296 extends beyond EOD, truncated [ 1588.213206][T23556] loop5: p124 start 9 is beyond EOD, truncated [ 1588.214624][T23556] loop5: p125 start 10 is beyond EOD, truncated [ 1588.215855][T23556] loop5: p126 size 100663296 extends beyond EOD, truncated [ 1588.218594][T23556] loop5: p127 start 9 is beyond EOD, truncated [ 1588.219517][T23556] loop5: p128 start 10 is beyond EOD, truncated [ 1588.220458][T23556] loop5: p129 size 100663296 extends beyond EOD, truncated [ 1588.222155][T23556] loop5: p130 start 9 is beyond EOD, truncated [ 1588.223160][T23556] loop5: p131 start 10 is beyond EOD, truncated [ 1588.224136][T23556] loop5: p132 size 100663296 extends beyond EOD, truncated [ 1588.226857][T23556] loop5: p133 start 9 is beyond EOD, truncated [ 1588.227933][T23556] loop5: p134 start 10 is beyond EOD, truncated [ 1588.228876][T23556] loop5: p135 size 100663296 extends beyond EOD, truncated [ 1588.230622][T23556] loop5: p136 start 9 is beyond EOD, truncated [ 1588.231591][T23556] loop5: p137 start 10 is beyond EOD, truncated [ 1588.232597][T23556] loop5: p138 size 100663296 extends beyond EOD, truncated [ 1588.235250][T23556] loop5: p139 start 9 is beyond EOD, truncated [ 1588.236248][T23556] loop5: p140 start 10 is beyond EOD, truncated [ 1588.237256][T23556] loop5: p141 size 100663296 extends beyond EOD, truncated [ 1588.239088][T23556] loop5: p142 start 9 is beyond EOD, truncated [ 1588.240287][T23556] loop5: p143 start 10 is beyond EOD, truncated [ 1588.241326][T23556] loop5: p144 size 100663296 extends beyond EOD, truncated [ 1588.243071][T23556] loop5: p145 start 9 is beyond EOD, truncated [ 1588.244344][T23556] loop5: p146 start 10 is beyond EOD, truncated [ 1588.245688][T23556] loop5: p147 size 100663296 extends beyond EOD, truncated [ 1588.248656][T23556] loop5: p148 start 9 is beyond EOD, truncated [ 1588.249657][T23556] loop5: p149 start 10 is beyond EOD, truncated [ 1588.250592][T23556] loop5: p150 size 100663296 extends beyond EOD, truncated [ 1588.252184][T23556] loop5: p151 start 9 is beyond EOD, truncated [ 1588.253145][T23556] loop5: p152 start 10 is beyond EOD, truncated [ 1588.254203][T23556] loop5: p153 size 100663296 extends beyond EOD, truncated [ 1588.256875][T23556] loop5: p154 start 9 is beyond EOD, truncated [ 1588.258231][T23556] loop5: p155 start 10 is beyond EOD, truncated [ 1588.259377][T23556] loop5: p156 size 100663296 extends beyond EOD, truncated [ 1588.261031][T23556] loop5: p157 start 9 is beyond EOD, truncated [ 1588.262222][T23556] loop5: p158 start 10 is beyond EOD, truncated [ 1588.263361][T23556] loop5: p159 size 100663296 extends beyond EOD, truncated [ 1588.266056][T23556] loop5: p160 start 9 is beyond EOD, truncated [ 1588.267360][T23556] loop5: p161 start 10 is beyond EOD, truncated [ 1588.268304][T23556] loop5: p162 size 100663296 extends beyond EOD, truncated [ 1588.270052][T23556] loop5: p163 start 9 is beyond EOD, truncated [ 1588.271221][T23556] loop5: p164 start 10 is beyond EOD, truncated [ 1588.272610][T23556] loop5: p165 size 100663296 extends beyond EOD, truncated [ 1588.275664][T23556] loop5: p166 start 9 is beyond EOD, truncated [ 1588.276773][T23556] loop5: p167 start 10 is beyond EOD, truncated [ 1588.277833][T23556] loop5: p168 size 100663296 extends beyond EOD, truncated [ 1588.279504][T23556] loop5: p169 start 9 is beyond EOD, truncated [ 1588.280477][T23556] loop5: p170 start 10 is beyond EOD, truncated [ 1588.281587][T23556] loop5: p171 size 100663296 extends beyond EOD, truncated [ 1588.283271][T23556] loop5: p172 start 9 is beyond EOD, truncated [ 1588.285068][T23556] loop5: p173 start 10 is beyond EOD, truncated [ 1588.286031][T23556] loop5: p174 size 100663296 extends beyond EOD, truncated [ 1588.289109][T23556] loop5: p175 start 9 is beyond EOD, truncated [ 1588.290199][T23556] loop5: p176 start 10 is beyond EOD, truncated [ 1588.291105][T23556] loop5: p177 size 100663296 extends beyond EOD, truncated [ 1588.292797][T23556] loop5: p178 start 9 is beyond EOD, truncated [ 1588.294025][T23556] loop5: p179 start 10 is beyond EOD, truncated [ 1588.295017][T23556] loop5: p180 size 100663296 extends beyond EOD, truncated [ 1588.296710][T23556] loop5: p181 start 9 is beyond EOD, truncated [ 1588.297977][T23556] loop5: p182 start 10 is beyond EOD, truncated [ 1588.299119][T23556] loop5: p183 size 100663296 extends beyond EOD, truncated [ 1588.300698][T23556] loop5: p184 start 9 is beyond EOD, truncated [ 1588.301792][T23556] loop5: p185 start 10 is beyond EOD, truncated [ 1588.302990][T23556] loop5: p186 size 100663296 extends beyond EOD, truncated [ 1588.304624][T23556] loop5: p187 start 9 is beyond EOD, truncated [ 1588.305994][T23556] loop5: p188 start 10 is beyond EOD, truncated [ 1588.306983][T23556] loop5: p189 size 100663296 extends beyond EOD, truncated [ 1588.308444][T23556] loop5: p190 start 9 is beyond EOD, truncated [ 1588.309495][T23556] loop5: p191 start 10 is beyond EOD, truncated [ 1588.311022][T23556] loop5: p192 size 100663296 extends beyond EOD, truncated [ 1588.312999][T23556] loop5: p193 start 9 is beyond EOD, truncated [ 1588.314277][T23556] loop5: p194 start 10 is beyond EOD, truncated [ 1588.315514][T23556] loop5: p195 size 100663296 extends beyond EOD, truncated [ 1588.317577][T23556] loop5: p196 start 9 is beyond EOD, truncated [ 1588.318745][T23556] loop5: p197 start 10 is beyond EOD, truncated [ 1588.319770][T23556] loop5: p198 size 100663296 extends beyond EOD, truncated [ 1588.321268][T23556] loop5: p199 start 9 is beyond EOD, truncated [ 1588.322352][T23556] loop5: p200 start 10 is beyond EOD, truncated [ 1588.323334][T23556] loop5: p201 size 100663296 extends beyond EOD, truncated [ 1588.325114][T23556] loop5: p202 start 9 is beyond EOD, truncated [ 1588.326735][T23556] loop5: p203 start 10 is beyond EOD, truncated [ 1588.327902][T23556] loop5: p204 size 100663296 extends beyond EOD, truncated [ 1588.329598][T23556] loop5: p205 start 9 is beyond EOD, truncated [ 1588.330589][T23556] loop5: p206 start 10 is beyond EOD, truncated [ 1588.331650][T23556] loop5: p207 size 100663296 extends beyond EOD, truncated [ 1588.333064][T23556] loop5: p208 start 9 is beyond EOD, truncated [ 1588.334075][T23556] loop5: p209 start 10 is beyond EOD, truncated [ 1588.335151][T23556] loop5: p210 size 100663296 extends beyond EOD, truncated [ 1588.336653][T23556] loop5: p211 start 9 is beyond EOD, truncated [ 1588.337676][T23556] loop5: p212 start 10 is beyond EOD, truncated [ 1588.338593][T23556] loop5: p213 size 100663296 extends beyond EOD, truncated [ 1588.340010][T23556] loop5: p214 start 9 is beyond EOD, truncated [ 1588.340848][T23556] loop5: p215 start 10 is beyond EOD, truncated [ 1588.341731][T23556] loop5: p216 size 100663296 extends beyond EOD, truncated [ 1588.342932][T23556] loop5: p217 start 9 is beyond EOD, truncated [ 1588.344281][T23556] loop5: p218 start 10 is beyond EOD, truncated [ 1588.345409][T23556] loop5: p219 size 100663296 extends beyond EOD, truncated [ 1588.346768][T23556] loop5: p220 start 9 is beyond EOD, truncated [ 1588.347797][T23556] loop5: p221 start 10 is beyond EOD, truncated [ 1588.348813][T23556] loop5: p222 size 100663296 extends beyond EOD, truncated [ 1588.350313][T23556] loop5: p223 start 9 is beyond EOD, truncated [ 1588.351471][T23556] loop5: p224 start 10 is beyond EOD, truncated [ 1588.352418][T23556] loop5: p225 size 100663296 extends beyond EOD, truncated [ 1588.354062][T23556] loop5: p226 start 9 is beyond EOD, truncated [ 1588.355306][T23556] loop5: p227 start 10 is beyond EOD, truncated [ 1588.356255][T23556] loop5: p228 size 100663296 extends beyond EOD, truncated [ 1588.357488][T23556] loop5: p229 start 9 is beyond EOD, truncated [ 1588.358517][T23556] loop5: p230 start 10 is beyond EOD, truncated [ 1588.359736][T23556] loop5: p231 size 100663296 extends beyond EOD, truncated [ 1588.361054][T23556] loop5: p232 start 9 is beyond EOD, truncated [ 1588.361953][T23556] loop5: p233 start 10 is beyond EOD, truncated [ 1588.362940][T23556] loop5: p234 size 100663296 extends beyond EOD, truncated [ 1588.364739][T23556] loop5: p235 start 9 is beyond EOD, truncated [ 1588.365672][T23556] loop5: p236 start 10 is beyond EOD, truncated [ 1588.366735][T23556] loop5: p237 size 100663296 extends beyond EOD, truncated [ 1588.368322][T23556] loop5: p238 start 9 is beyond EOD, truncated [ 1588.369403][T23556] loop5: p239 start 10 is beyond EOD, truncated [ 1588.370676][T23556] loop5: p240 size 100663296 extends beyond EOD, truncated [ 1588.372093][T23556] loop5: p241 start 9 is beyond EOD, truncated [ 1588.373063][T23556] loop5: p242 start 10 is beyond EOD, truncated [ 1588.374353][T23556] loop5: p243 size 100663296 extends beyond EOD, truncated [ 1588.376685][T23556] loop5: p244 start 9 is beyond EOD, truncated [ 1588.377903][T23556] loop5: p245 start 10 is beyond EOD, truncated [ 1588.379082][T23556] loop5: p246 size 100663296 extends beyond EOD, truncated [ 1588.380633][T23556] loop5: p247 start 9 is beyond EOD, truncated [ 1588.381670][T23556] loop5: p248 start 10 is beyond EOD, truncated [ 1588.382663][T23556] loop5: p249 size 100663296 extends beyond EOD, truncated [ 1588.384292][T23556] loop5: p250 start 9 is beyond EOD, truncated [ 1588.385360][T23556] loop5: p251 start 10 is beyond EOD, truncated [ 1588.386609][T23556] loop5: p252 size 100663296 extends beyond EOD, truncated [ 1588.388441][T23556] loop5: p253 start 9 is beyond EOD, truncated [ 1588.389529][T23556] loop5: p254 start 10 is beyond EOD, truncated [ 1588.390676][T23556] loop5: p255 size 100663296 extends beyond EOD, truncated [ 1588.460833][T23556] loop5: detected capacity change from 0 to 1 [ 1588.505359][T23556] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 1588.505570][T23556] loop5: p1 start 10 is beyond EOD, truncated [ 1588.521937][T23556] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1588.524574][T23556] loop5: p3 start 9 is beyond EOD, truncated [ 1588.525876][T23556] loop5: p4 size 2 extends beyond EOD, truncated [ 1588.527629][T23556] loop5: p5 start 10 is beyond EOD, truncated [ 1588.528662][T23556] loop5: p6 size 100663296 extends beyond EOD, truncated [ 1588.530436][T23556] loop5: p7 start 9 is beyond EOD, truncated [ 1588.531873][T23556] loop5: p8 start 10 is beyond EOD, truncated [ 1588.532998][T23556] loop5: p9 size 100663296 extends beyond EOD, truncated [ 1588.535534][T23556] loop5: p10 start 9 is beyond EOD, truncated [ 1588.536602][T23556] loop5: p11 start 10 is beyond EOD, truncated [ 1588.537743][T23556] loop5: p12 size 100663296 extends beyond EOD, truncated [ 1588.539517][T23556] loop5: p13 start 9 is beyond EOD, truncated [ 1588.540536][T23556] loop5: p14 start 10 is beyond EOD, truncated [ 1588.541543][T23556] loop5: p15 size 100663296 extends beyond EOD, truncated [ 1588.543152][T23556] loop5: p16 start 9 is beyond EOD, truncated [ 1588.544359][T23556] loop5: p17 start 10 is beyond EOD, truncated [ 1588.545561][T23556] loop5: p18 size 100663296 extends beyond EOD, truncated [ 1588.547622][T23556] loop5: p19 start 9 is beyond EOD, truncated [ 1588.548744][T23556] loop5: p20 start 10 is beyond EOD, truncated [ 1588.549987][T23556] loop5: p21 size 100663296 extends beyond EOD, truncated [ 1588.551805][T23556] loop5: p22 start 9 is beyond EOD, truncated [ 1588.553021][T23556] loop5: p23 start 10 is beyond EOD, truncated [ 1588.554064][T23556] loop5: p24 size 100663296 extends beyond EOD, truncated [ 1588.556289][T23556] loop5: p25 start 9 is beyond EOD, truncated [ 1588.557427][T23556] loop5: p26 start 10 is beyond EOD, truncated [ 1588.558579][T23556] loop5: p27 size 100663296 extends beyond EOD, truncated [ 1588.560839][T23556] loop5: p28 start 9 is beyond EOD, truncated [ 1588.562278][T23556] loop5: p29 start 10 is beyond EOD, truncated [ 1588.563695][T23556] loop5: p30 size 100663296 extends beyond EOD, truncated [ 1588.565262][T23556] loop5: p31 start 9 is beyond EOD, truncated [ 1588.566166][T23556] loop5: p32 start 10 is beyond EOD, truncated [ 1588.567158][T23556] loop5: p33 size 100663296 extends beyond EOD, truncated [ 1588.568954][T23556] loop5: p34 start 9 is beyond EOD, truncated [ 1588.569951][T23556] loop5: p35 start 10 is beyond EOD, truncated [ 1588.570888][T23556] loop5: p36 size 100663296 extends beyond EOD, truncated [ 1588.573012][T23556] loop5: p37 start 9 is beyond EOD, truncated [ 1588.574114][T23556] loop5: p38 start 10 is beyond EOD, truncated [ 1588.575089][T23556] loop5: p39 size 100663296 extends beyond EOD, truncated [ 1588.576561][T23556] loop5: p40 start 9 is beyond EOD, truncated [ 1588.578093][T23556] loop5: p41 start 10 is beyond EOD, truncated [ 1588.579044][T23556] loop5: p42 size 100663296 extends beyond EOD, truncated [ 1588.580873][T23556] loop5: p43 start 9 is beyond EOD, truncated [ 1588.582257][T23556] loop5: p44 start 10 is beyond EOD, truncated [ 1588.583859][T23556] loop5: p45 size 100663296 extends beyond EOD, truncated [ 1588.585506][T23556] loop5: p46 start 9 is beyond EOD, truncated [ 1588.586629][T23556] loop5: p47 start 10 is beyond EOD, truncated [ 1588.587732][T23556] loop5: p48 size 100663296 extends beyond EOD, truncated [ 1588.589686][T23556] loop5: p49 start 9 is beyond EOD, truncated [ 1588.590727][T23556] loop5: p50 start 10 is beyond EOD, truncated [ 1588.592028][T23556] loop5: p51 size 100663296 extends beyond EOD, truncated [ 1588.595636][T23556] loop5: p52 start 9 is beyond EOD, truncated [ 1588.597745][T23556] loop5: p53 start 10 is beyond EOD, truncated [ 1588.599076][T23556] loop5: p54 size 100663296 extends beyond EOD, truncated [ 1588.600537][T23556] loop5: p55 start 9 is beyond EOD, truncated [ 1588.601888][T23556] loop5: p56 start 10 is beyond EOD, truncated [ 1588.603028][T23556] loop5: p57 size 100663296 extends beyond EOD, truncated [ 1588.604489][T23556] loop5: p58 start 9 is beyond EOD, truncated [ 1588.605631][T23556] loop5: p59 start 10 is beyond EOD, truncated [ 1588.606875][T23556] loop5: p60 size 100663296 extends beyond EOD, truncated [ 1588.608317][T23556] loop5: p61 start 9 is beyond EOD, truncated [ 1588.609468][T23556] loop5: p62 start 10 is beyond EOD, truncated [ 1588.610687][T23556] loop5: p63 size 100663296 extends beyond EOD, truncated [ 1588.612495][T23556] loop5: p64 start 9 is beyond EOD, truncated [ 1588.613572][T23556] loop5: p65 start 10 is beyond EOD, truncated [ 1588.614918][T23556] loop5: p66 size 100663296 extends beyond EOD, truncated [ 1588.616676][T23556] loop5: p67 start 9 is beyond EOD, truncated [ 1588.617751][T23556] loop5: p68 start 10 is beyond EOD, truncated [ 1588.619109][T23556] loop5: p69 size 100663296 extends beyond EOD, truncated [ 1588.620885][T23556] loop5: p70 start 9 is beyond EOD, truncated [ 1588.622070][T23556] loop5: p71 start 10 is beyond EOD, truncated [ 1588.623160][T23556] loop5: p72 size 100663296 extends beyond EOD, truncated [ 1588.625516][T23556] loop5: p73 start 9 is beyond EOD, truncated [ 1588.626592][T23556] loop5: p74 start 10 is beyond EOD, truncated [ 1588.627504][T23556] loop5: p75 size 100663296 extends beyond EOD, truncated [ 1588.629016][T23556] loop5: p76 start 9 is beyond EOD, truncated [ 1588.630273][T23556] loop5: p77 start 10 is beyond EOD, truncated [ 1588.631478][T23556] loop5: p78 size 100663296 extends beyond EOD, truncated [ 1588.633048][T23556] loop5: p79 start 9 is beyond EOD, truncated [ 1588.634371][T23556] loop5: p80 start 10 is beyond EOD, truncated [ 1588.635594][T23556] loop5: p81 size 100663296 extends beyond EOD, truncated [ 1588.637509][T23556] loop5: p82 start 9 is beyond EOD, truncated [ 1588.638624][T23556] loop5: p83 start 10 is beyond EOD, truncated [ 1588.639656][T23556] loop5: p84 size 100663296 extends beyond EOD, truncated [ 1588.641091][T23556] loop5: p85 start 9 is beyond EOD, truncated [ 1588.642462][T23556] loop5: p86 start 10 is beyond EOD, truncated [ 1588.643686][T23556] loop5: p87 size 100663296 extends beyond EOD, truncated [ 1588.645336][T23556] loop5: p88 start 9 is beyond EOD, truncated [ 1588.646299][T23556] loop5: p89 start 10 is beyond EOD, truncated [ 1588.647226][T23556] loop5: p90 size 100663296 extends beyond EOD, truncated [ 1588.648864][T23556] loop5: p91 start 9 is beyond EOD, truncated [ 1588.649901][T23556] loop5: p92 start 10 is beyond EOD, truncated [ 1588.651137][T23556] loop5: p93 size 100663296 extends beyond EOD, truncated [ 1588.652758][T23556] loop5: p94 start 9 is beyond EOD, truncated [ 1588.654053][T23556] loop5: p95 start 10 is beyond EOD, truncated [ 1588.655131][T23556] loop5: p96 size 100663296 extends beyond EOD, truncated [ 1588.657968][T23556] loop5: p97 start 9 is beyond EOD, truncated [ 1588.659629][T23556] loop5: p98 start 10 is beyond EOD, truncated [ 1588.660616][T23556] loop5: p99 size 100663296 extends beyond EOD, truncated [ 1588.663533][T23556] loop5: p100 start 9 is beyond EOD, truncated [ 1588.664652][T23556] loop5: p101 start 10 is beyond EOD, truncated [ 1588.665970][T23556] loop5: p102 size 100663296 extends beyond EOD, truncated [ 1588.669027][T23556] loop5: p103 start 9 is beyond EOD, truncated [ 1588.670113][T23556] loop5: p104 start 10 is beyond EOD, truncated [ 1588.671170][T23556] loop5: p105 size 100663296 extends beyond EOD, truncated [ 1588.672769][T23556] loop5: p106 start 9 is beyond EOD, truncated [ 1588.674063][T23556] loop5: p107 start 10 is beyond EOD, truncated [ 1588.675095][T23556] loop5: p108 size 100663296 extends beyond EOD, truncated [ 1588.676770][T23556] loop5: p109 start 9 is beyond EOD, truncated [ 1588.678001][T23556] loop5: p110 start 10 is beyond EOD, truncated [ 1588.678967][T23556] loop5: p111 size 100663296 extends beyond EOD, truncated [ 1588.680840][T23556] loop5: p112 start 9 is beyond EOD, truncated [ 1588.682307][T23556] loop5: p113 start 10 is beyond EOD, truncated [ 1588.683584][T23556] loop5: p114 size 100663296 extends beyond EOD, truncated [ 1588.686410][T23556] loop5: p115 start 9 is beyond EOD, truncated [ 1588.687557][T23556] loop5: p116 start 10 is beyond EOD, truncated [ 1588.688649][T23556] loop5: p117 size 100663296 extends beyond EOD, truncated [ 1588.690405][T23556] loop5: p118 start 9 is beyond EOD, truncated [ 1588.691440][T23556] loop5: p119 start 10 is beyond EOD, truncated [ 1588.692505][T23556] loop5: p120 size 100663296 extends beyond EOD, truncated [ 1588.696179][T23556] loop5: p121 start 9 is beyond EOD, truncated [ 1588.697407][T23556] loop5: p122 start 10 is beyond EOD, truncated [ 1588.698389][T23556] loop5: p123 size 100663296 extends beyond EOD, truncated [ 1588.700810][T23556] loop5: p124 start 9 is beyond EOD, truncated [ 1588.701903][T23556] loop5: p125 start 10 is beyond EOD, truncated [ 1588.703008][T23556] loop5: p126 size 100663296 extends beyond EOD, truncated [ 1588.704645][T23556] loop5: p127 start 9 is beyond EOD, truncated [ 1588.705738][T23556] loop5: p128 start 10 is beyond EOD, truncated [ 1588.707175][T23556] loop5: p129 size 100663296 extends beyond EOD, truncated [ 1588.708701][T23556] loop5: p130 start 9 is beyond EOD, truncated [ 1588.709855][T23556] loop5: p131 start 10 is beyond EOD, truncated [ 1588.711196][T23556] loop5: p132 size 100663296 extends beyond EOD, truncated [ 1588.712950][T23556] loop5: p133 start 9 is beyond EOD, truncated [ 1588.714075][T23556] loop5: p134 start 10 is beyond EOD, truncated [ 1588.715145][T23556] loop5: p135 size 100663296 extends beyond EOD, truncated [ 1588.716999][T23556] loop5: p136 start 9 is beyond EOD, truncated [ 1588.718313][T23556] loop5: p137 start 10 is beyond EOD, truncated [ 1588.719665][T23556] loop5: p138 size 100663296 extends beyond EOD, truncated [ 1588.721414][T23556] loop5: p139 start 9 is beyond EOD, truncated [ 1588.722709][T23556] loop5: p140 start 10 is beyond EOD, truncated [ 1588.723763][T23556] loop5: p141 size 100663296 extends beyond EOD, truncated [ 1588.725699][T23556] loop5: p142 start 9 is beyond EOD, truncated [ 1588.726861][T23556] loop5: p143 start 10 is beyond EOD, truncated [ 1588.727808][T23556] loop5: p144 size 100663296 extends beyond EOD, truncated [ 1588.729179][T23556] loop5: p145 start 9 is beyond EOD, truncated [ 1588.730612][T23556] loop5: p146 start 10 is beyond EOD, truncated [ 1588.732010][T23556] loop5: p147 size 100663296 extends beyond EOD, truncated [ 1588.733398][T23556] loop5: p148 start 9 is beyond EOD, truncated [ 1588.734445][T23556] loop5: p149 start 10 is beyond EOD, truncated [ 1588.735666][T23556] loop5: p150 size 100663296 extends beyond EOD, truncated [ 1588.737803][T23556] loop5: p151 start 9 is beyond EOD, truncated [ 1588.738948][T23556] loop5: p152 start 10 is beyond EOD, truncated [ 1588.740050][T23556] loop5: p153 size 100663296 extends beyond EOD, truncated [ 1588.741772][T23556] loop5: p154 start 9 is beyond EOD, truncated [ 1588.742907][T23556] loop5: p155 start 10 is beyond EOD, truncated [ 1588.743941][T23556] loop5: p156 size 100663296 extends beyond EOD, truncated [ 1588.745965][T23556] loop5: p157 start 9 is beyond EOD, truncated [ 1588.747166][T23556] loop5: p158 start 10 is beyond EOD, truncated [ 1588.748268][T23556] loop5: p159 size 100663296 extends beyond EOD, truncated [ 1588.749744][T23556] loop5: p160 start 9 is beyond EOD, truncated [ 1588.751051][T23556] loop5: p161 start 10 is beyond EOD, truncated [ 1588.751998][T23556] loop5: p162 size 100663296 extends beyond EOD, truncated [ 1588.753410][T23556] loop5: p163 start 9 is beyond EOD, truncated [ 1588.754505][T23556] loop5: p164 start 10 is beyond EOD, truncated [ 1588.755421][T23556] loop5: p165 size 100663296 extends beyond EOD, truncated [ 1588.757875][T23556] loop5: p166 start 9 is beyond EOD, truncated [ 1588.759159][T23556] loop5: p167 start 10 is beyond EOD, truncated [ 1588.760108][T23556] loop5: p168 size 100663296 extends beyond EOD, truncated [ 1588.762382][T23556] loop5: p169 start 9 is beyond EOD, truncated [ 1588.763356][T23556] loop5: p170 start 10 is beyond EOD, truncated [ 1588.764338][T23556] loop5: p171 size 100663296 extends beyond EOD, truncated [ 1588.766799][T23556] loop5: p172 start 9 is beyond EOD, truncated [ 1588.768272][T23556] loop5: p173 start 10 is beyond EOD, truncated [ 1588.769259][T23556] loop5: p174 size 100663296 extends beyond EOD, truncated [ 1588.770816][T23556] loop5: p175 start 9 is beyond EOD, truncated [ 1588.771969][T23556] loop5: p176 start 10 is beyond EOD, truncated [ 1588.772929][T23556] loop5: p177 size 100663296 extends beyond EOD, truncated [ 1588.774508][T23556] loop5: p178 start 9 is beyond EOD, truncated [ 1588.775509][T23556] loop5: p179 start 10 is beyond EOD, truncated [ 1588.776874][T23556] loop5: p180 size 100663296 extends beyond EOD, truncated [ 1588.778755][T23556] loop5: p181 start 9 is beyond EOD, truncated [ 1588.779906][T23556] loop5: p182 start 10 is beyond EOD, truncated [ 1588.781370][T23556] loop5: p183 size 100663296 extends beyond EOD, truncated [ 1588.783065][T23556] loop5: p184 start 9 is beyond EOD, truncated [ 1588.784143][T23556] loop5: p185 start 10 is beyond EOD, truncated [ 1588.785111][T23556] loop5: p186 size 100663296 extends beyond EOD, truncated [ 1588.786602][T23556] loop5: p187 start 9 is beyond EOD, truncated [ 1588.787768][T23556] loop5: p188 start 10 is beyond EOD, truncated [ 1588.788694][T23556] loop5: p189 size 100663296 extends beyond EOD, truncated [ 1588.790576][T23556] loop5: p190 start 9 is beyond EOD, truncated [ 1588.792073][T23556] loop5: p191 start 10 is beyond EOD, truncated [ 1588.793046][T23556] loop5: p192 size 100663296 extends beyond EOD, truncated [ 1588.794484][T23556] loop5: p193 start 9 is beyond EOD, truncated [ 1588.795741][T23556] loop5: p194 start 10 is beyond EOD, truncated [ 1588.796956][T23556] loop5: p195 size 100663296 extends beyond EOD, truncated [ 1588.798330][T23556] loop5: p196 start 9 is beyond EOD, truncated [ 1588.799832][T23556] loop5: p197 start 10 is beyond EOD, truncated [ 1588.800889][T23556] loop5: p198 size 100663296 extends beyond EOD, truncated [ 1588.802222][T23556] loop5: p199 start 9 is beyond EOD, truncated [ 1588.803310][T23556] loop5: p200 start 10 is beyond EOD, truncated [ 1588.804292][T23556] loop5: p201 size 100663296 extends beyond EOD, truncated [ 1588.805747][T23556] loop5: p202 start 9 is beyond EOD, truncated [ 1588.806725][T23556] loop5: p203 start 10 is beyond EOD, truncated [ 1588.807852][T23556] loop5: p204 size 100663296 extends beyond EOD, truncated [ 1588.809455][T23556] loop5: p205 start 9 is beyond EOD, truncated [ 1588.810694][T23556] loop5: p206 start 10 is beyond EOD, truncated [ 1588.811851][T23556] loop5: p207 size 100663296 extends beyond EOD, truncated [ 1588.813491][T23556] loop5: p208 start 9 is beyond EOD, truncated [ 1588.814644][T23556] loop5: p209 start 10 is beyond EOD, truncated [ 1588.816007][T23556] loop5: p210 size 100663296 extends beyond EOD, truncated [ 1588.817707][T23556] loop5: p211 start 9 is beyond EOD, truncated [ 1588.818869][T23556] loop5: p212 start 10 is beyond EOD, truncated [ 1588.819816][T23556] loop5: p213 size 100663296 extends beyond EOD, truncated [ 1588.821534][T23556] loop5: p214 start 9 is beyond EOD, truncated [ 1588.822810][T23556] loop5: p215 start 10 is beyond EOD, truncated [ 1588.823856][T23556] loop5: p216 size 100663296 extends beyond EOD, truncated [ 1588.825249][T23556] loop5: p217 start 9 is beyond EOD, truncated [ 1588.826190][T23556] loop5: p218 start 10 is beyond EOD, truncated [ 1588.827108][T23556] loop5: p219 size 100663296 extends beyond EOD, truncated [ 1588.828564][T23556] loop5: p220 start 9 is beyond EOD, truncated [ 1588.829793][T23556] loop5: p221 start 10 is beyond EOD, truncated [ 1588.830734][T23556] loop5: p222 size 100663296 extends beyond EOD, truncated [ 1588.832269][T23556] loop5: p223 start 9 is beyond EOD, truncated [ 1588.833291][T23556] loop5: p224 start 10 is beyond EOD, truncated [ 1588.834580][T23556] loop5: p225 size 100663296 extends beyond EOD, truncated [ 1588.836521][T23556] loop5: p226 start 9 is beyond EOD, truncated [ 1588.837769][T23556] loop5: p227 start 10 is beyond EOD, truncated [ 1588.838895][T23556] loop5: p228 size 100663296 extends beyond EOD, truncated [ 1588.840559][T23556] loop5: p229 start 9 is beyond EOD, truncated [ 1588.841844][T23556] loop5: p230 start 10 is beyond EOD, truncated [ 1588.842923][T23556] loop5: p231 size 100663296 extends beyond EOD, truncated [ 1588.845494][T23556] loop5: p232 start 9 is beyond EOD, truncated [ 1588.846500][T23556] loop5: p233 start 10 is beyond EOD, truncated [ 1588.847480][T23556] loop5: p234 size 100663296 extends beyond EOD, truncated [ 1588.848870][T23556] loop5: p235 start 9 is beyond EOD, truncated [ 1588.849840][T23556] loop5: p236 start 10 is beyond EOD, truncated [ 1588.850841][T23556] loop5: p237 size 100663296 extends beyond EOD, truncated [ 1588.852238][T23556] loop5: p238 start 9 is beyond EOD, truncated [ 1588.853293][T23556] loop5: p239 start 10 is beyond EOD, truncated [ 1588.854271][T23556] loop5: p240 size 100663296 extends beyond EOD, truncated [ 1588.856307][T23556] loop5: p241 start 9 is beyond EOD, truncated 11:49:12 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="0201bfffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:12 executing program 2: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) lseek(r0, 0x842, 0x0) r1 = semget$private(0x0, 0x4, 0x80) r2 = memfd_create(&(0x7f0000000080)='L-.[{!:@&*(\x00', 0x6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000000c0)) semtimedop(r1, &(0x7f0000000300)=[{}], 0x1, 0x0) 11:49:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./\\ile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:12 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4000000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x120, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36d32a60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ed6da4c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6df6c0c7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xdc, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44d561e7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d4c6add}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dfac30d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6973be50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20e6d09}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e88797d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fbbaaf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12cb5017}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a4d2438}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b016b8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x800}, 0x20000850) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 11:49:12 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x1c0}]) [ 1588.857395][T23556] loop5: p242 start 10 is beyond EOD, truncated [ 1588.858394][T23556] loop5: p243 size 100663296 extends beyond EOD, truncated [ 1588.859808][T23556] loop5: p244 start 9 is beyond EOD, truncated [ 1588.861008][T23556] loop5: p245 start 10 is beyond EOD, truncated [ 1588.862332][T23556] loop5: p246 size 100663296 extends beyond EOD, truncated [ 1588.864097][T23556] loop5: p247 start 9 is beyond EOD, truncated [ 1588.865052][T23556] loop5: p248 start 10 is beyond EOD, truncated [ 1588.865980][T23556] loop5: p249 size 100663296 extends beyond EOD, truncated [ 1588.867631][T23556] loop5: p250 start 9 is beyond EOD, truncated [ 1588.868968][T23556] loop5: p251 start 10 is beyond EOD, truncated [ 1588.869871][T23556] loop5: p252 size 100663296 extends beyond EOD, truncated [ 1588.872032][T23556] loop5: p253 start 9 is beyond EOD, truncated [ 1588.873089][T23556] loop5: p254 start 10 is beyond EOD, truncated [ 1588.874364][T23556] loop5: p255 size 100663296 extends beyond EOD, truncated 11:49:12 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x48da6ecc00000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./^ile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1588.958965][T23869] loop4: detected capacity change from 0 to 1 11:49:13 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="0201a9ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:13 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:13 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x1c0}]) 11:49:13 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="0201a9ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1589.076775][T23983] loop5: detected capacity change from 0 to 1 [ 1589.088241][T23985] loop4: detected capacity change from 0 to 1 [ 1589.146052][T32589] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 1589.146368][T32589] loop5: p1 start 10 is beyond EOD, truncated [ 1589.163270][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1589.164877][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1589.165826][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1589.167347][T32589] loop5: p5 start 10 is beyond EOD, truncated [ 1589.168677][T32589] loop5: p6 size 100663296 extends beyond EOD, truncated [ 1589.170011][T32589] loop5: p7 start 9 is beyond EOD, truncated [ 1589.171009][T32589] loop5: p8 start 10 is beyond EOD, truncated [ 1589.172083][T32589] loop5: p9 size 100663296 extends beyond EOD, truncated [ 1589.173277][T32589] loop5: p10 start 9 is beyond EOD, truncated [ 1589.174229][T32589] loop5: p11 start 10 is beyond EOD, truncated [ 1589.175359][T32589] loop5: p12 size 100663296 extends beyond EOD, truncated [ 1589.176956][T32589] loop5: p13 start 9 is beyond EOD, truncated [ 1589.178106][T32589] loop5: p14 start 10 is beyond EOD, truncated [ 1589.179312][T32589] loop5: p15 size 100663296 extends beyond EOD, truncated [ 1589.180673][T32589] loop5: p16 start 9 is beyond EOD, truncated [ 1589.181719][T32589] loop5: p17 start 10 is beyond EOD, truncated [ 1589.182666][T32589] loop5: p18 size 100663296 extends beyond EOD, truncated [ 1589.184589][T32589] loop5: p19 start 9 is beyond EOD, truncated [ 1589.185678][T32589] loop5: p20 start 10 is beyond EOD, truncated [ 1589.187125][T32589] loop5: p21 size 100663296 extends beyond EOD, truncated [ 1589.189593][T32589] loop5: p22 start 9 is beyond EOD, truncated [ 1589.190981][T32589] loop5: p23 start 10 is beyond EOD, truncated [ 1589.192140][T32589] loop5: p24 size 100663296 extends beyond EOD, truncated [ 1589.193669][T32589] loop5: p25 start 9 is beyond EOD, truncated [ 1589.194580][T32589] loop5: p26 start 10 is beyond EOD, truncated [ 1589.195529][T32589] loop5: p27 size 100663296 extends beyond EOD, truncated [ 1589.197771][T32589] loop5: p28 start 9 is beyond EOD, truncated [ 1589.198912][T32589] loop5: p29 start 10 is beyond EOD, truncated [ 1589.199896][T32589] loop5: p30 size 100663296 extends beyond EOD, truncated [ 1589.204917][T32589] loop5: p31 start 9 is beyond EOD, truncated [ 1589.206123][T32589] loop5: p32 start 10 is beyond EOD, truncated [ 1589.207212][T32589] loop5: p33 size 100663296 extends beyond EOD, truncated [ 1589.208660][T32589] loop5: p34 start 9 is beyond EOD, truncated [ 1589.209625][T32589] loop5: p35 start 10 is beyond EOD, truncated [ 1589.210560][T32589] loop5: p36 size 100663296 extends beyond EOD, truncated [ 1589.211973][T32589] loop5: p37 start 9 is beyond EOD, truncated [ 1589.213038][T32589] loop5: p38 start 10 is beyond EOD, truncated [ 1589.213874][T32589] loop5: p39 size 100663296 extends beyond EOD, truncated [ 1589.215630][T32589] loop5: p40 start 9 is beyond EOD, truncated [ 1589.216587][T32589] loop5: p41 start 10 is beyond EOD, truncated [ 1589.217476][T32589] loop5: p42 size 100663296 extends beyond EOD, truncated [ 1589.218806][T32589] loop5: p43 start 9 is beyond EOD, truncated [ 1589.219770][T32589] loop5: p44 start 10 is beyond EOD, truncated [ 1589.220769][T32589] loop5: p45 size 100663296 extends beyond EOD, truncated [ 1589.222279][T32589] loop5: p46 start 9 is beyond EOD, truncated [ 1589.223142][T32589] loop5: p47 start 10 is beyond EOD, truncated [ 1589.224183][T32589] loop5: p48 size 100663296 extends beyond EOD, truncated [ 1589.225847][T32589] loop5: p49 start 9 is beyond EOD, truncated [ 1589.226757][T32589] loop5: p50 start 10 is beyond EOD, truncated [ 1589.227665][T32589] loop5: p51 size 100663296 extends beyond EOD, truncated [ 1589.229123][T32589] loop5: p52 start 9 is beyond EOD, truncated [ 1589.230148][T32589] loop5: p53 start 10 is beyond EOD, truncated [ 1589.231028][T32589] loop5: p54 size 100663296 extends beyond EOD, truncated [ 1589.232380][T32589] loop5: p55 start 9 is beyond EOD, truncated [ 1589.233253][T32589] loop5: p56 start 10 is beyond EOD, truncated [ 1589.234191][T32589] loop5: p57 size 100663296 extends beyond EOD, truncated [ 1589.236066][T32589] loop5: p58 start 9 is beyond EOD, truncated [ 1589.237066][T32589] loop5: p59 start 10 is beyond EOD, truncated [ 1589.238080][T32589] loop5: p60 size 100663296 extends beyond EOD, truncated [ 1589.239754][T32589] loop5: p61 start 9 is beyond EOD, truncated [ 1589.240893][T32589] loop5: p62 start 10 is beyond EOD, truncated [ 1589.241861][T32589] loop5: p63 size 100663296 extends beyond EOD, truncated [ 1589.243290][T32589] loop5: p64 start 9 is beyond EOD, truncated [ 1589.244402][T32589] loop5: p65 start 10 is beyond EOD, truncated [ 1589.245316][T32589] loop5: p66 size 100663296 extends beyond EOD, truncated [ 1589.246602][T32589] loop5: p67 start 9 is beyond EOD, truncated [ 1589.247515][T32589] loop5: p68 start 10 is beyond EOD, truncated [ 1589.248372][T32589] loop5: p69 size 100663296 extends beyond EOD, truncated [ 1589.249577][T32589] loop5: p70 start 9 is beyond EOD, truncated [ 1589.250519][T32589] loop5: p71 start 10 is beyond EOD, truncated [ 1589.251475][T32589] loop5: p72 size 100663296 extends beyond EOD, truncated [ 1589.252887][T32589] loop5: p73 start 9 is beyond EOD, truncated [ 1589.253865][T32589] loop5: p74 start 10 is beyond EOD, truncated [ 1589.254838][T32589] loop5: p75 size 100663296 extends beyond EOD, truncated [ 1589.256766][T32589] loop5: p76 start 9 is beyond EOD, truncated [ 1589.257622][T32589] loop5: p77 start 10 is beyond EOD, truncated [ 1589.258642][T32589] loop5: p78 size 100663296 extends beyond EOD, truncated [ 1589.259965][T32589] loop5: p79 start 9 is beyond EOD, truncated [ 1589.260882][T32589] loop5: p80 start 10 is beyond EOD, truncated [ 1589.261760][T32589] loop5: p81 size 100663296 extends beyond EOD, truncated [ 1589.263030][T32589] loop5: p82 start 9 is beyond EOD, truncated [ 1589.263925][T32589] loop5: p83 start 10 is beyond EOD, truncated [ 1589.264926][T32589] loop5: p84 size 100663296 extends beyond EOD, truncated [ 1589.266345][T32589] loop5: p85 start 9 is beyond EOD, truncated [ 1589.267416][T32589] loop5: p86 start 10 is beyond EOD, truncated [ 1589.268513][T32589] loop5: p87 size 100663296 extends beyond EOD, truncated [ 1589.269986][T32589] loop5: p88 start 9 is beyond EOD, truncated [ 1589.270966][T32589] loop5: p89 start 10 is beyond EOD, truncated [ 1589.271850][T32589] loop5: p90 size 100663296 extends beyond EOD, truncated [ 1589.273180][T32589] loop5: p91 start 9 is beyond EOD, truncated [ 1589.274064][T32589] loop5: p92 start 10 is beyond EOD, truncated [ 1589.275063][T32589] loop5: p93 size 100663296 extends beyond EOD, truncated [ 1589.276406][T32589] loop5: p94 start 9 is beyond EOD, truncated [ 1589.277305][T32589] loop5: p95 start 10 is beyond EOD, truncated [ 1589.278217][T32589] loop5: p96 size 100663296 extends beyond EOD, truncated [ 1589.279778][T32589] loop5: p97 start 9 is beyond EOD, truncated [ 1589.280716][T32589] loop5: p98 start 10 is beyond EOD, truncated [ 1589.281624][T32589] loop5: p99 size 100663296 extends beyond EOD, truncated [ 1589.283033][T32589] loop5: p100 start 9 is beyond EOD, truncated [ 1589.283953][T32589] loop5: p101 start 10 is beyond EOD, truncated [ 1589.285261][T32589] loop5: p102 size 100663296 extends beyond EOD, truncated [ 1589.294380][T32589] loop5: p103 start 9 is beyond EOD, truncated [ 1589.295566][T32589] loop5: p104 start 10 is beyond EOD, truncated [ 1589.296631][T32589] loop5: p105 size 100663296 extends beyond EOD, truncated [ 1589.298396][T32589] loop5: p106 start 9 is beyond EOD, truncated [ 1589.299554][T32589] loop5: p107 start 10 is beyond EOD, truncated [ 1589.300609][T32589] loop5: p108 size 100663296 extends beyond EOD, truncated [ 1589.302310][T32589] loop5: p109 start 9 is beyond EOD, truncated [ 1589.303411][T32589] loop5: p110 start 10 is beyond EOD, truncated [ 1589.304594][T32589] loop5: p111 size 100663296 extends beyond EOD, truncated [ 1589.306675][T32589] loop5: p112 start 9 is beyond EOD, truncated [ 1589.307776][T32589] loop5: p113 start 10 is beyond EOD, truncated [ 1589.308752][T32589] loop5: p114 size 100663296 extends beyond EOD, truncated [ 1589.310209][T32589] loop5: p115 start 9 is beyond EOD, truncated [ 1589.311457][T32589] loop5: p116 start 10 is beyond EOD, truncated [ 1589.313029][T32589] loop5: p117 size 100663296 extends beyond EOD, truncated [ 1589.315262][T32589] loop5: p118 start 9 is beyond EOD, truncated [ 1589.316493][T32589] loop5: p119 start 10 is beyond EOD, truncated [ 1589.317668][T32589] loop5: p120 size 100663296 extends beyond EOD, truncated [ 1589.318959][T32589] loop5: p121 start 9 is beyond EOD, truncated [ 1589.319921][T32589] loop5: p122 start 10 is beyond EOD, truncated [ 1589.321025][T32589] loop5: p123 size 100663296 extends beyond EOD, truncated [ 1589.322498][T32589] loop5: p124 start 9 is beyond EOD, truncated [ 1589.323508][T32589] loop5: p125 start 10 is beyond EOD, truncated [ 1589.324687][T32589] loop5: p126 size 100663296 extends beyond EOD, truncated [ 1589.326433][T32589] loop5: p127 start 9 is beyond EOD, truncated [ 1589.327407][T32589] loop5: p128 start 10 is beyond EOD, truncated [ 1589.328473][T32589] loop5: p129 size 100663296 extends beyond EOD, truncated [ 1589.329834][T32589] loop5: p130 start 9 is beyond EOD, truncated [ 1589.330759][T32589] loop5: p131 start 10 is beyond EOD, truncated [ 1589.331731][T32589] loop5: p132 size 100663296 extends beyond EOD, truncated [ 1589.333348][T32589] loop5: p133 start 9 is beyond EOD, truncated [ 1589.334438][T32589] loop5: p134 start 10 is beyond EOD, truncated [ 1589.335411][T32589] loop5: p135 size 100663296 extends beyond EOD, truncated [ 1589.337060][T32589] loop5: p136 start 9 is beyond EOD, truncated [ 1589.338175][T32589] loop5: p137 start 10 is beyond EOD, truncated [ 1589.339561][T32589] loop5: p138 size 100663296 extends beyond EOD, truncated [ 1589.341305][T32589] loop5: p139 start 9 is beyond EOD, truncated [ 1589.342288][T32589] loop5: p140 start 10 is beyond EOD, truncated [ 1589.343256][T32589] loop5: p141 size 100663296 extends beyond EOD, truncated [ 1589.345961][T32589] loop5: p142 start 9 is beyond EOD, truncated [ 1589.347222][T32589] loop5: p143 start 10 is beyond EOD, truncated [ 1589.348307][T32589] loop5: p144 size 100663296 extends beyond EOD, truncated [ 1589.349742][T32589] loop5: p145 start 9 is beyond EOD, truncated [ 1589.350705][T32589] loop5: p146 start 10 is beyond EOD, truncated [ 1589.351576][T32589] loop5: p147 size 100663296 extends beyond EOD, truncated [ 1589.353772][T32589] loop5: p148 start 9 is beyond EOD, truncated [ 1589.355077][T32589] loop5: p149 start 10 is beyond EOD, truncated [ 1589.356067][T32589] loop5: p150 size 100663296 extends beyond EOD, truncated [ 1589.357434][T32589] loop5: p151 start 9 is beyond EOD, truncated [ 1589.358662][T32589] loop5: p152 start 10 is beyond EOD, truncated [ 1589.359629][T32589] loop5: p153 size 100663296 extends beyond EOD, truncated [ 1589.361034][T32589] loop5: p154 start 9 is beyond EOD, truncated [ 1589.361971][T32589] loop5: p155 start 10 is beyond EOD, truncated [ 1589.362822][T32589] loop5: p156 size 100663296 extends beyond EOD, truncated [ 1589.365489][T32589] loop5: p157 start 9 is beyond EOD, truncated [ 1589.366615][T32589] loop5: p158 start 10 is beyond EOD, truncated [ 1589.367729][T32589] loop5: p159 size 100663296 extends beyond EOD, truncated [ 1589.369320][T32589] loop5: p160 start 9 is beyond EOD, truncated [ 1589.370381][T32589] loop5: p161 start 10 is beyond EOD, truncated [ 1589.371365][T32589] loop5: p162 size 100663296 extends beyond EOD, truncated [ 1589.372740][T32589] loop5: p163 start 9 is beyond EOD, truncated [ 1589.373824][T32589] loop5: p164 start 10 is beyond EOD, truncated [ 1589.375073][T32589] loop5: p165 size 100663296 extends beyond EOD, truncated [ 1589.377021][T32589] loop5: p166 start 9 is beyond EOD, truncated [ 1589.378338][T32589] loop5: p167 start 10 is beyond EOD, truncated [ 1589.379615][T32589] loop5: p168 size 100663296 extends beyond EOD, truncated [ 1589.380964][T32589] loop5: p169 start 9 is beyond EOD, truncated [ 1589.381900][T32589] loop5: p170 start 10 is beyond EOD, truncated [ 1589.382863][T32589] loop5: p171 size 100663296 extends beyond EOD, truncated [ 1589.385348][T32589] loop5: p172 start 9 is beyond EOD, truncated [ 1589.386340][T32589] loop5: p173 start 10 is beyond EOD, truncated [ 1589.387313][T32589] loop5: p174 size 100663296 extends beyond EOD, truncated [ 1589.388771][T32589] loop5: p175 start 9 is beyond EOD, truncated [ 1589.389794][T32589] loop5: p176 start 10 is beyond EOD, truncated [ 1589.390713][T32589] loop5: p177 size 100663296 extends beyond EOD, truncated [ 1589.392267][T32589] loop5: p178 start 9 is beyond EOD, truncated [ 1589.393253][T32589] loop5: p179 start 10 is beyond EOD, truncated [ 1589.394112][T32589] loop5: p180 size 100663296 extends beyond EOD, truncated [ 1589.396435][T32589] loop5: p181 start 9 is beyond EOD, truncated [ 1589.397380][T32589] loop5: p182 start 10 is beyond EOD, truncated [ 1589.398366][T32589] loop5: p183 size 100663296 extends beyond EOD, truncated [ 1589.399937][T32589] loop5: p184 start 9 is beyond EOD, truncated [ 1589.400861][T32589] loop5: p185 start 10 is beyond EOD, truncated [ 1589.402005][T32589] loop5: p186 size 100663296 extends beyond EOD, truncated [ 1589.403476][T32589] loop5: p187 start 9 is beyond EOD, truncated [ 1589.404536][T32589] loop5: p188 start 10 is beyond EOD, truncated [ 1589.405608][T32589] loop5: p189 size 100663296 extends beyond EOD, truncated [ 1589.407235][T32589] loop5: p190 start 9 is beyond EOD, truncated [ 1589.408130][T32589] loop5: p191 start 10 is beyond EOD, truncated [ 1589.409493][T32589] loop5: p192 size 100663296 extends beyond EOD, truncated [ 1589.410947][T32589] loop5: p193 start 9 is beyond EOD, truncated [ 1589.411920][T32589] loop5: p194 start 10 is beyond EOD, truncated [ 1589.412821][T32589] loop5: p195 size 100663296 extends beyond EOD, truncated [ 1589.414111][T32589] loop5: p196 start 9 is beyond EOD, truncated [ 1589.415166][T32589] loop5: p197 start 10 is beyond EOD, truncated [ 1589.416161][T32589] loop5: p198 size 100663296 extends beyond EOD, truncated [ 1589.417597][T32589] loop5: p199 start 9 is beyond EOD, truncated [ 1589.418975][T32589] loop5: p200 start 10 is beyond EOD, truncated [ 1589.419983][T32589] loop5: p201 size 100663296 extends beyond EOD, truncated [ 1589.421300][T32589] loop5: p202 start 9 is beyond EOD, truncated [ 1589.422235][T32589] loop5: p203 start 10 is beyond EOD, truncated [ 1589.423094][T32589] loop5: p204 size 100663296 extends beyond EOD, truncated [ 1589.425720][T32589] loop5: p205 start 9 is beyond EOD, truncated [ 1589.426781][T32589] loop5: p206 start 10 is beyond EOD, truncated [ 1589.427707][T32589] loop5: p207 size 100663296 extends beyond EOD, truncated [ 1589.429105][T32589] loop5: p208 start 9 is beyond EOD, truncated [ 1589.430580][T32589] loop5: p209 start 10 is beyond EOD, truncated [ 1589.431533][T32589] loop5: p210 size 100663296 extends beyond EOD, truncated [ 1589.433052][T32589] loop5: p211 start 9 is beyond EOD, truncated [ 1589.434030][T32589] loop5: p212 start 10 is beyond EOD, truncated [ 1589.435043][T32589] loop5: p213 size 100663296 extends beyond EOD, truncated [ 1589.436932][T32589] loop5: p214 start 9 is beyond EOD, truncated [ 1589.437866][T32589] loop5: p215 start 10 is beyond EOD, truncated [ 1589.438808][T32589] loop5: p216 size 100663296 extends beyond EOD, truncated [ 1589.440273][T32589] loop5: p217 start 9 is beyond EOD, truncated [ 1589.441238][T32589] loop5: p218 start 10 is beyond EOD, truncated [ 1589.443437][T32589] loop5: p219 size 100663296 extends beyond EOD, truncated [ 1589.445822][T32589] loop5: p220 start 9 is beyond EOD, truncated [ 1589.446918][T32589] loop5: p221 start 10 is beyond EOD, truncated [ 1589.448729][T32589] loop5: p222 size 100663296 extends beyond EOD, truncated [ 1589.450654][T32589] loop5: p223 start 9 is beyond EOD, truncated [ 1589.451748][T32589] loop5: p224 start 10 is beyond EOD, truncated [ 1589.452717][T32589] loop5: p225 size 100663296 extends beyond EOD, truncated [ 1589.455297][T32589] loop5: p226 start 9 is beyond EOD, truncated [ 1589.456343][T32589] loop5: p227 start 10 is beyond EOD, truncated [ 1589.457251][T32589] loop5: p228 size 100663296 extends beyond EOD, truncated [ 1589.458601][T32589] loop5: p229 start 9 is beyond EOD, truncated [ 1589.459624][T32589] loop5: p230 start 10 is beyond EOD, truncated [ 1589.460675][T32589] loop5: p231 size 100663296 extends beyond EOD, truncated [ 1589.462106][T32589] loop5: p232 start 9 is beyond EOD, truncated [ 1589.463085][T32589] loop5: p233 start 10 is beyond EOD, truncated [ 1589.464184][T32589] loop5: p234 size 100663296 extends beyond EOD, truncated [ 1589.465940][T32589] loop5: p235 start 9 is beyond EOD, truncated [ 1589.467883][T32589] loop5: p236 start 10 is beyond EOD, truncated [ 1589.468773][T32589] loop5: p237 size 100663296 extends beyond EOD, truncated [ 1589.470206][T32589] loop5: p238 start 9 is beyond EOD, truncated [ 1589.471150][T32589] loop5: p239 start 10 is beyond EOD, truncated [ 1589.472000][T32589] loop5: p240 size 100663296 extends beyond EOD, truncated [ 1589.473348][T32589] loop5: p241 start 9 is beyond EOD, truncated [ 1589.474262][T32589] loop5: p242 start 10 is beyond EOD, truncated [ 1589.475272][T32589] loop5: p243 size 100663296 extends beyond EOD, truncated [ 1589.476791][T32589] loop5: p244 start 9 is beyond EOD, truncated [ 1589.478130][T32589] loop5: p245 start 10 is beyond EOD, truncated [ 1589.479148][T32589] loop5: p246 size 100663296 extends beyond EOD, truncated [ 1589.480629][T32589] loop5: p247 start 9 is beyond EOD, truncated [ 1589.481592][T32589] loop5: p248 start 10 is beyond EOD, truncated [ 1589.482564][T32589] loop5: p249 size 100663296 extends beyond EOD, truncated [ 1589.483960][T32589] loop5: p250 start 9 is beyond EOD, truncated [ 1589.484949][T32589] loop5: p251 start 10 is beyond EOD, truncated [ 1589.486026][T32589] loop5: p252 size 100663296 extends beyond EOD, truncated [ 1589.487542][T32589] loop5: p253 start 9 is beyond EOD, truncated [ 1589.488512][T32589] loop5: p254 start 10 is beyond EOD, truncated [ 1589.489487][T32589] loop5: p255 size 100663296 extends beyond EOD, truncated [ 1589.523026][T23983] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 1589.523216][T23983] loop5: p1 start 10 is beyond EOD, truncated [ 1589.537854][T23983] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1589.539868][T23983] loop5: p3 start 9 is beyond EOD, truncated [ 1589.541362][T23983] loop5: p4 size 2 extends beyond EOD, truncated [ 1589.542671][T23983] loop5: p5 start 10 is beyond EOD, truncated [ 1589.543670][T23983] loop5: p6 size 100663296 extends beyond EOD, truncated [ 1589.546101][T23983] loop5: p7 start 9 is beyond EOD, truncated [ 1589.547022][T23983] loop5: p8 start 10 is beyond EOD, truncated [ 1589.548220][T23983] loop5: p9 size 100663296 extends beyond EOD, truncated [ 1589.550370][T23983] loop5: p10 start 9 is beyond EOD, truncated [ 1589.551335][T23983] loop5: p11 start 10 is beyond EOD, truncated [ 1589.552272][T23983] loop5: p12 size 100663296 extends beyond EOD, truncated [ 1589.553749][T23983] loop5: p13 start 9 is beyond EOD, truncated [ 1589.554742][T23983] loop5: p14 start 10 is beyond EOD, truncated [ 1589.555720][T23983] loop5: p15 size 100663296 extends beyond EOD, truncated [ 1589.557191][T23983] loop5: p16 start 9 is beyond EOD, truncated [ 1589.558076][T23983] loop5: p17 start 10 is beyond EOD, truncated [ 1589.558974][T23983] loop5: p18 size 100663296 extends beyond EOD, truncated [ 1589.560222][T23983] loop5: p19 start 9 is beyond EOD, truncated [ 1589.561385][T23983] loop5: p20 start 10 is beyond EOD, truncated [ 1589.562424][T23983] loop5: p21 size 100663296 extends beyond EOD, truncated [ 1589.563976][T23983] loop5: p22 start 9 is beyond EOD, truncated [ 1589.564996][T23983] loop5: p23 start 10 is beyond EOD, truncated [ 1589.566153][T23983] loop5: p24 size 100663296 extends beyond EOD, truncated [ 1589.568014][T23983] loop5: p25 start 9 is beyond EOD, truncated [ 1589.569010][T23983] loop5: p26 start 10 is beyond EOD, truncated [ 1589.569903][T23983] loop5: p27 size 100663296 extends beyond EOD, truncated [ 1589.571213][T23983] loop5: p28 start 9 is beyond EOD, truncated [ 1589.572348][T23983] loop5: p29 start 10 is beyond EOD, truncated [ 1589.573488][T23983] loop5: p30 size 100663296 extends beyond EOD, truncated [ 1589.575064][T23983] loop5: p31 start 9 is beyond EOD, truncated [ 1589.576212][T23983] loop5: p32 start 10 is beyond EOD, truncated [ 1589.577346][T23983] loop5: p33 size 100663296 extends beyond EOD, truncated [ 1589.579112][T23983] loop5: p34 start 9 is beyond EOD, truncated [ 1589.580117][T23983] loop5: p35 start 10 is beyond EOD, truncated [ 1589.581456][T23983] loop5: p36 size 100663296 extends beyond EOD, truncated [ 1589.583413][T23983] loop5: p37 start 9 is beyond EOD, truncated [ 1589.584870][T23983] loop5: p38 start 10 is beyond EOD, truncated [ 1589.586282][T23983] loop5: p39 size 100663296 extends beyond EOD, truncated [ 1589.587782][T23983] loop5: p40 start 9 is beyond EOD, truncated [ 1589.588745][T23983] loop5: p41 start 10 is beyond EOD, truncated [ 1589.589725][T23983] loop5: p42 size 100663296 extends beyond EOD, truncated [ 1589.591102][T23983] loop5: p43 start 9 is beyond EOD, truncated [ 1589.592032][T23983] loop5: p44 start 10 is beyond EOD, truncated [ 1589.592948][T23983] loop5: p45 size 100663296 extends beyond EOD, truncated [ 1589.594459][T23983] loop5: p46 start 9 is beyond EOD, truncated [ 1589.596151][T23983] loop5: p47 start 10 is beyond EOD, truncated [ 1589.597198][T23983] loop5: p48 size 100663296 extends beyond EOD, truncated [ 1589.598638][T23983] loop5: p49 start 9 is beyond EOD, truncated [ 1589.599813][T23983] loop5: p50 start 10 is beyond EOD, truncated [ 1589.600668][T23983] loop5: p51 size 100663296 extends beyond EOD, truncated [ 1589.602120][T23983] loop5: p52 start 9 is beyond EOD, truncated [ 1589.603232][T23983] loop5: p53 start 10 is beyond EOD, truncated [ 1589.604247][T23983] loop5: p54 size 100663296 extends beyond EOD, truncated [ 1589.610172][T23983] loop5: p55 start 9 is beyond EOD, truncated [ 1589.611662][T23983] loop5: p56 start 10 is beyond EOD, truncated [ 1589.612615][T23983] loop5: p57 size 100663296 extends beyond EOD, truncated [ 1589.614016][T23983] loop5: p58 start 9 is beyond EOD, truncated [ 1589.615192][T23983] loop5: p59 start 10 is beyond EOD, truncated [ 1589.616200][T23983] loop5: p60 size 100663296 extends beyond EOD, truncated [ 1589.617625][T23983] loop5: p61 start 9 is beyond EOD, truncated [ 1589.618916][T23983] loop5: p62 start 10 is beyond EOD, truncated [ 1589.619982][T23983] loop5: p63 size 100663296 extends beyond EOD, truncated [ 1589.621868][T23983] loop5: p64 start 9 is beyond EOD, truncated [ 1589.623584][T23983] loop5: p65 start 10 is beyond EOD, truncated [ 1589.625026][T23983] loop5: p66 size 100663296 extends beyond EOD, truncated [ 1589.627407][T23983] loop5: p67 start 9 is beyond EOD, truncated [ 1589.629542][T23983] loop5: p68 start 10 is beyond EOD, truncated [ 1589.631383][T23983] loop5: p69 size 100663296 extends beyond EOD, truncated [ 1589.633569][T23983] loop5: p70 start 9 is beyond EOD, truncated [ 1589.635529][T23983] loop5: p71 start 10 is beyond EOD, truncated [ 1589.637637][T23983] loop5: p72 size 100663296 extends beyond EOD, truncated [ 1589.640490][T23983] loop5: p73 start 9 is beyond EOD, truncated [ 1589.642126][T23983] loop5: p74 start 10 is beyond EOD, truncated [ 1589.643355][T23983] loop5: p75 size 100663296 extends beyond EOD, truncated [ 1589.645926][T23983] loop5: p76 start 9 is beyond EOD, truncated [ 1589.647381][T23983] loop5: p77 start 10 is beyond EOD, truncated [ 1589.648588][T23983] loop5: p78 size 100663296 extends beyond EOD, truncated [ 1589.650277][T23983] loop5: p79 start 9 is beyond EOD, truncated [ 1589.651415][T23983] loop5: p80 start 10 is beyond EOD, truncated [ 1589.652909][T23983] loop5: p81 size 100663296 extends beyond EOD, truncated [ 1589.655047][T23983] loop5: p82 start 9 is beyond EOD, truncated [ 1589.657085][T23983] loop5: p83 start 10 is beyond EOD, truncated [ 1589.658482][T23983] loop5: p84 size 100663296 extends beyond EOD, truncated [ 1589.660313][T23983] loop5: p85 start 9 is beyond EOD, truncated [ 1589.661841][T23983] loop5: p86 start 10 is beyond EOD, truncated [ 1589.663009][T23983] loop5: p87 size 100663296 extends beyond EOD, truncated [ 1589.664616][T23983] loop5: p88 start 9 is beyond EOD, truncated [ 1589.666436][T23983] loop5: p89 start 10 is beyond EOD, truncated [ 1589.667457][T23983] loop5: p90 size 100663296 extends beyond EOD, truncated [ 1589.669274][T23983] loop5: p91 start 9 is beyond EOD, truncated [ 1589.671573][T23983] loop5: p92 start 10 is beyond EOD, truncated [ 1589.673368][T23983] loop5: p93 size 100663296 extends beyond EOD, truncated [ 1589.676550][T23983] loop5: p94 start 9 is beyond EOD, truncated [ 1589.678530][T23983] loop5: p95 start 10 is beyond EOD, truncated [ 1589.680728][T23983] loop5: p96 size 100663296 extends beyond EOD, truncated [ 1589.682628][T23983] loop5: p97 start 9 is beyond EOD, truncated [ 1589.683650][T23983] loop5: p98 start 10 is beyond EOD, truncated [ 1589.684750][T23983] loop5: p99 size 100663296 extends beyond EOD, truncated [ 1589.686992][T23983] loop5: p100 start 9 is beyond EOD, truncated [ 1589.688132][T23983] loop5: p101 start 10 is beyond EOD, truncated [ 1589.689441][T23983] loop5: p102 size 100663296 extends beyond EOD, truncated [ 1589.691443][T23983] loop5: p103 start 9 is beyond EOD, truncated [ 1589.692849][T23983] loop5: p104 start 10 is beyond EOD, truncated [ 1589.694036][T23983] loop5: p105 size 100663296 extends beyond EOD, truncated [ 1589.696205][T23983] loop5: p106 start 9 is beyond EOD, truncated [ 1589.697829][T23983] loop5: p107 start 10 is beyond EOD, truncated [ 1589.699482][T23983] loop5: p108 size 100663296 extends beyond EOD, truncated [ 1589.701186][T23983] loop5: p109 start 9 is beyond EOD, truncated [ 1589.702185][T23983] loop5: p110 start 10 is beyond EOD, truncated [ 1589.703478][T23983] loop5: p111 size 100663296 extends beyond EOD, truncated [ 1589.705587][T23983] loop5: p112 start 9 is beyond EOD, truncated [ 1589.707567][T23983] loop5: p113 start 10 is beyond EOD, truncated [ 1589.708807][T23983] loop5: p114 size 100663296 extends beyond EOD, truncated [ 1589.710456][T23983] loop5: p115 start 9 is beyond EOD, truncated [ 1589.711501][T23983] loop5: p116 start 10 is beyond EOD, truncated [ 1589.712911][T23983] loop5: p117 size 100663296 extends beyond EOD, truncated [ 1589.714553][T23983] loop5: p118 start 9 is beyond EOD, truncated [ 1589.716227][T23983] loop5: p119 start 10 is beyond EOD, truncated [ 1589.718024][T23983] loop5: p120 size 100663296 extends beyond EOD, truncated [ 1589.719971][T23983] loop5: p121 start 9 is beyond EOD, truncated [ 1589.721156][T23983] loop5: p122 start 10 is beyond EOD, truncated [ 1589.722499][T23983] loop5: p123 size 100663296 extends beyond EOD, truncated [ 1589.724391][T23983] loop5: p124 start 9 is beyond EOD, truncated [ 1589.726098][T23983] loop5: p125 start 10 is beyond EOD, truncated [ 1589.727511][T23983] loop5: p126 size 100663296 extends beyond EOD, truncated [ 1589.729697][T23983] loop5: p127 start 9 is beyond EOD, truncated [ 1589.731355][T23983] loop5: p128 start 10 is beyond EOD, truncated [ 1589.732469][T23983] loop5: p129 size 100663296 extends beyond EOD, truncated [ 1589.734816][T23983] loop5: p130 start 9 is beyond EOD, truncated [ 1589.736888][T23983] loop5: p131 start 10 is beyond EOD, truncated [ 1589.737799][T23983] loop5: p132 size 100663296 extends beyond EOD, truncated [ 1589.739845][T23983] loop5: p133 start 9 is beyond EOD, truncated [ 1589.741410][T23983] loop5: p134 start 10 is beyond EOD, truncated [ 1589.742372][T23983] loop5: p135 size 100663296 extends beyond EOD, truncated [ 1589.745146][T23983] loop5: p136 start 9 is beyond EOD, truncated [ 1589.746721][T23983] loop5: p137 start 10 is beyond EOD, truncated [ 1589.748098][T23983] loop5: p138 size 100663296 extends beyond EOD, truncated [ 1589.750132][T23983] loop5: p139 start 9 is beyond EOD, truncated [ 1589.751193][T23983] loop5: p140 start 10 is beyond EOD, truncated [ 1589.752694][T23983] loop5: p141 size 100663296 extends beyond EOD, truncated [ 1589.754488][T23983] loop5: p142 start 9 is beyond EOD, truncated [ 1589.756135][T23983] loop5: p143 start 10 is beyond EOD, truncated [ 1589.757052][T23983] loop5: p144 size 100663296 extends beyond EOD, truncated [ 1589.758888][T23983] loop5: p145 start 9 is beyond EOD, truncated [ 1589.759791][T23983] loop5: p146 start 10 is beyond EOD, truncated [ 1589.761027][T23983] loop5: p147 size 100663296 extends beyond EOD, truncated [ 1589.762401][T23983] loop5: p148 start 9 is beyond EOD, truncated [ 1589.764087][T23983] loop5: p149 start 10 is beyond EOD, truncated [ 1589.765066][T23983] loop5: p150 size 100663296 extends beyond EOD, truncated [ 1589.767290][T23983] loop5: p151 start 9 is beyond EOD, truncated [ 1589.769085][T23983] loop5: p152 start 10 is beyond EOD, truncated [ 1589.770492][T23983] loop5: p153 size 100663296 extends beyond EOD, truncated [ 1589.772304][T23983] loop5: p154 start 9 is beyond EOD, truncated [ 1589.773583][T23983] loop5: p155 start 10 is beyond EOD, truncated [ 1589.775856][T23983] loop5: p156 size 100663296 extends beyond EOD, truncated [ 1589.778567][T23983] loop5: p157 start 9 is beyond EOD, truncated [ 1589.779889][T23983] loop5: p158 start 10 is beyond EOD, truncated [ 1589.780994][T23983] loop5: p159 size 100663296 extends beyond EOD, truncated [ 1589.782493][T23983] loop5: p160 start 9 is beyond EOD, truncated [ 1589.783551][T23983] loop5: p161 start 10 is beyond EOD, truncated [ 1589.784642][T23983] loop5: p162 size 100663296 extends beyond EOD, truncated [ 1589.786515][T23983] loop5: p163 start 9 is beyond EOD, truncated [ 1589.787457][T23983] loop5: p164 start 10 is beyond EOD, truncated [ 1589.788412][T23983] loop5: p165 size 100663296 extends beyond EOD, truncated [ 1589.790267][T23983] loop5: p166 start 9 is beyond EOD, truncated [ 1589.791420][T23983] loop5: p167 start 10 is beyond EOD, truncated [ 1589.792372][T23983] loop5: p168 size 100663296 extends beyond EOD, truncated [ 1589.793870][T23983] loop5: p169 start 9 is beyond EOD, truncated [ 1589.795100][T23983] loop5: p170 start 10 is beyond EOD, truncated [ 1589.796857][T23983] loop5: p171 size 100663296 extends beyond EOD, truncated [ 1589.798586][T23983] loop5: p172 start 9 is beyond EOD, truncated [ 1589.800111][T23983] loop5: p173 start 10 is beyond EOD, truncated [ 1589.801516][T23983] loop5: p174 size 100663296 extends beyond EOD, truncated [ 1589.802885][T23983] loop5: p175 start 9 is beyond EOD, truncated [ 1589.803950][T23983] loop5: p176 start 10 is beyond EOD, truncated [ 1589.805870][T23983] loop5: p177 size 100663296 extends beyond EOD, truncated [ 1589.808155][T23983] loop5: p178 start 9 is beyond EOD, truncated [ 1589.810118][T23983] loop5: p179 start 10 is beyond EOD, truncated [ 1589.811951][T23983] loop5: p180 size 100663296 extends beyond EOD, truncated [ 1589.814432][T23983] loop5: p181 start 9 is beyond EOD, truncated [ 1589.815673][T23983] loop5: p182 start 10 is beyond EOD, truncated [ 1589.816944][T23983] loop5: p183 size 100663296 extends beyond EOD, truncated [ 1589.818941][T23983] loop5: p184 start 9 is beyond EOD, truncated [ 1589.820370][T23983] loop5: p185 start 10 is beyond EOD, truncated [ 1589.821354][T23983] loop5: p186 size 100663296 extends beyond EOD, truncated [ 1589.823015][T23983] loop5: p187 start 9 is beyond EOD, truncated [ 1589.823981][T23983] loop5: p188 start 10 is beyond EOD, truncated [ 1589.825291][T23983] loop5: p189 size 100663296 extends beyond EOD, truncated [ 1589.827259][T23983] loop5: p190 start 9 is beyond EOD, truncated [ 1589.828340][T23983] loop5: p191 start 10 is beyond EOD, truncated [ 1589.829396][T23983] loop5: p192 size 100663296 extends beyond EOD, truncated [ 1589.830979][T23983] loop5: p193 start 9 is beyond EOD, truncated [ 1589.832008][T23983] loop5: p194 start 10 is beyond EOD, truncated [ 1589.832888][T23983] loop5: p195 size 100663296 extends beyond EOD, truncated [ 1589.834352][T23983] loop5: p196 start 9 is beyond EOD, truncated [ 1589.835701][T23983] loop5: p197 start 10 is beyond EOD, truncated [ 1589.837233][T23983] loop5: p198 size 100663296 extends beyond EOD, truncated [ 1589.839692][T23983] loop5: p199 start 9 is beyond EOD, truncated [ 1589.841347][T23983] loop5: p200 start 10 is beyond EOD, truncated [ 1589.843203][T23983] loop5: p201 size 100663296 extends beyond EOD, truncated [ 1589.845849][T23983] loop5: p202 start 9 is beyond EOD, truncated [ 1589.847210][T23983] loop5: p203 start 10 is beyond EOD, truncated [ 1589.848602][T23983] loop5: p204 size 100663296 extends beyond EOD, truncated [ 1589.850707][T23983] loop5: p205 start 9 is beyond EOD, truncated [ 1589.851773][T23983] loop5: p206 start 10 is beyond EOD, truncated [ 1589.853161][T23983] loop5: p207 size 100663296 extends beyond EOD, truncated [ 1589.855929][T23983] loop5: p208 start 9 is beyond EOD, truncated [ 1589.857424][T23983] loop5: p209 start 10 is beyond EOD, truncated [ 1589.858957][T23983] loop5: p210 size 100663296 extends beyond EOD, truncated [ 1589.861173][T23983] loop5: p211 start 9 is beyond EOD, truncated [ 1589.862348][T23983] loop5: p212 start 10 is beyond EOD, truncated [ 1589.863609][T23983] loop5: p213 size 100663296 extends beyond EOD, truncated [ 1589.866342][T23983] loop5: p214 start 9 is beyond EOD, truncated [ 1589.867878][T23983] loop5: p215 start 10 is beyond EOD, truncated [ 1589.869540][T23983] loop5: p216 size 100663296 extends beyond EOD, truncated [ 1589.871621][T23983] loop5: p217 start 9 is beyond EOD, truncated [ 1589.872794][T23983] loop5: p218 start 10 is beyond EOD, truncated [ 1589.874466][T23983] loop5: p219 size 100663296 extends beyond EOD, truncated [ 1589.876435][T23983] loop5: p220 start 9 is beyond EOD, truncated [ 1589.877501][T23983] loop5: p221 start 10 is beyond EOD, truncated [ 1589.878674][T23983] loop5: p222 size 100663296 extends beyond EOD, truncated [ 1589.881226][T23983] loop5: p223 start 9 is beyond EOD, truncated [ 1589.882513][T23983] loop5: p224 start 10 is beyond EOD, truncated [ 1589.883462][T23983] loop5: p225 size 100663296 extends beyond EOD, truncated [ 1589.885242][T23983] loop5: p226 start 9 is beyond EOD, truncated [ 1589.886842][T23983] loop5: p227 start 10 is beyond EOD, truncated [ 1589.888167][T23983] loop5: p228 size 100663296 extends beyond EOD, truncated [ 1589.890148][T23983] loop5: p229 start 9 is beyond EOD, truncated [ 1589.891400][T23983] loop5: p230 start 10 is beyond EOD, truncated [ 1589.892705][T23983] loop5: p231 size 100663296 extends beyond EOD, truncated [ 1589.894599][T23983] loop5: p232 start 9 is beyond EOD, truncated [ 1589.896033][T23983] loop5: p233 start 10 is beyond EOD, truncated [ 1589.897445][T23983] loop5: p234 size 100663296 extends beyond EOD, truncated [ 1589.899318][T23983] loop5: p235 start 9 is beyond EOD, truncated [ 1589.901117][T23983] loop5: p236 start 10 is beyond EOD, truncated [ 1589.903148][T23983] loop5: p237 size 100663296 extends beyond EOD, truncated [ 1589.909003][T23983] loop5: p238 start 9 is beyond EOD, truncated [ 1589.910772][T23983] loop5: p239 start 10 is beyond EOD, truncated [ 1589.912123][T23983] loop5: p240 size 100663296 extends beyond EOD, truncated [ 1589.913867][T23983] loop5: p241 start 9 is beyond EOD, truncated [ 1589.915334][T23983] loop5: p242 start 10 is beyond EOD, truncated [ 1589.916595][T23983] loop5: p243 size 100663296 extends beyond EOD, truncated [ 1589.918112][T23983] loop5: p244 start 9 is beyond EOD, truncated [ 1589.919377][T23983] loop5: p245 start 10 is beyond EOD, truncated [ 1589.920361][T23983] loop5: p246 size 100663296 extends beyond EOD, truncated [ 1589.921914][T23983] loop5: p247 start 9 is beyond EOD, truncated [ 1589.923467][T23983] loop5: p248 start 10 is beyond EOD, truncated [ 1589.925093][T23983] loop5: p249 size 100663296 extends beyond EOD, truncated [ 1589.927859][T23983] loop5: p250 start 9 is beyond EOD, truncated [ 1589.929262][T23983] loop5: p251 start 10 is beyond EOD, truncated [ 1589.930991][T23983] loop5: p252 size 100663296 extends beyond EOD, truncated [ 1589.932708][T23983] loop5: p253 start 9 is beyond EOD, truncated [ 1589.934011][T23983] loop5: p254 start 10 is beyond EOD, truncated [ 1589.935420][T23983] loop5: p255 size 100663296 extends beyond EOD, truncated 11:49:14 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8fd8b06000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:14 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="0201eeffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:14 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="0201a9ffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./`ile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x8}, {r1, 0x40}, {r6, 0x200}], 0x5, 0x5) 11:49:14 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200), 0x0, 0x1c0}]) 11:49:14 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x97ffffff00000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./bile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1590.167770][T24269] loop4: detected capacity change from 0 to 1 11:49:14 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="0201bfffffff0a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:14 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200), 0x0, 0x1c0}]) 11:49:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7400000003060102000000000000000105000100070000000900020073797a32000000000900020073797a31000000000500010007000000050001000700000005000100070000000900020073797a320000000005000100070000000900020073797a30000000000500010007000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000880)=[@ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x89, 0xc, "71bbebe045302683f736"}, @timestamp={0x44, 0x24, 0xec, 0x0, 0x0, [0x5, 0xd074, 0x6, 0x6, 0x57dc1dad, 0x8da, 0x2, 0x6]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010101}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x5f, 0x1, 0x9, [{@local, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@remote, 0x1f}, {@remote, 0xf96}, {@empty, 0x2}]}, @rr={0x7, 0x1b, 0x35, [@multicast2, @empty, @multicast1, @empty, @loopback, @loopback]}]}}}, @ip_ttl={{0x14}}, @ip_retopts={{0x114, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xda, 0x1, 0x5, [{@local, 0x7}]}, @generic={0x7, 0xc, "e65de1a4a1dae89bd15e"}, @cipso={0x86, 0x24, 0xb3440a350a336835, [{0x7, 0x11, "cfce2f991f7b18a9742767a0afa4b1"}, {0x2, 0xd, "4f2a6b71c2f0038e7df1b5"}]}, @timestamp_prespec={0x44, 0xc, 0xcf, 0x3, 0x6, [{@remote, 0xe5ce}]}, @cipso={0x86, 0x36, 0x1, [{0x6, 0xe, "40f4b3fd4ef781a679b8cb59"}, {0x7, 0x10, "0c647af6e0d53336be2e23bf86b6"}, {0x7, 0xb, "06ec39053a6699dec0"}, {0x6, 0x7, "cd2662d026"}]}, @lsrr={0x83, 0x1f, 0x31, [@multicast2, @broadcast, @multicast2, @multicast1, @broadcast, @broadcast, @local]}, @cipso={0x86, 0x44, 0x0, [{0x0, 0xa, "bede3ef28f29ce33"}, {0x2, 0x2}, {0x7, 0x12, "f176900943a12c842c808d21610b0c78"}, {0x2, 0xe, "ffdd84073e56642c56a69d34"}, {0x0, 0x10, "0c4588decce3667b22a180efc927"}, {0x0, 0x2}]}, @timestamp_addr={0x44, 0x4, 0x1d, 0x1, 0x2}, @generic={0x44, 0x10, "70580fdf53732a96f89838427e48"}, @timestamp_addr={0x44, 0xc, 0x25, 0x1, 0x5, [{@remote, 0x4}]}]}}}, @ip_ttl={{0x14}}], 0x220}, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r6 = perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x4, 0x0, 0x1b, 0x28, 0x0, 0x3, 0x40001, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x401, 0x1, @perf_config_ext={0x4}, 0x10386, 0x2, 0x28ab, 0x6, 0x7fffffff, 0x2, 0x2, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0xa, r1, 0x2) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7d, 0x9, 0x4, 0x7, 0x0, 0xa6, 0x8000, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2962dd13, 0x4, @perf_bp={&(0x7f0000000180), 0x7}, 0x8000, 0x9, 0x1, 0x0, 0x6, 0x7, 0x101, 0x0, 0x4, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xe, r6, 0x1) 11:49:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./dile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:14 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x10000, 0x101}, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace_dev_match', 0x0, 0x0) preadv(r1, &(0x7f0000001840)=[{&(0x7f0000000200)=""/251, 0xfb}], 0x1, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x14, 0xcb, 0x10, 0xff, 0x0, 0x80000001, 0x40001, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp, 0xb0a4, 0x7, 0xffff, 0x3, 0x1, 0x2, 0x101, 0x0, 0x7, 0x0, 0x401}, 0xffffffffffffffff, 0x0, r1, 0x9) fcntl$notify(r0, 0x402, 0x3f) fcntl$setownex(r0, 0xf, &(0x7f0000000080)) r4 = socket(0x10, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='schedstat\x00') sendfile(r4, r5, 0x0, 0x6052b11e) [ 1590.259408][T24375] loop5: detected capacity change from 0 to 1 [ 1590.322579][T24389] loop4: detected capacity change from 0 to 1 11:49:14 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff02000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./eile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:14 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xdaffffff00000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./gile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:14 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200), 0x0, 0x1c0}]) 11:49:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x2, 0x1, 0x0, 0x1, 0x0, 0xffffffff80000000, 0x42000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x43b5, 0x4, @perf_bp={&(0x7f0000000180)}, 0x8, 0x7, 0x40, 0x9, 0x1, 0x1f, 0x3, 0x0, 0x4, 0x0, 0x40}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./hile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1590.428891][T24419] loop5: detected capacity change from 0 to 1 11:49:14 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xeb1f000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1590.455812][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1590.457522][T32589] loop5: partition table partially beyond EOD, truncated [ 1590.459735][T32589] loop5: p1 start 2 is beyond EOD, truncated [ 1590.460799][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1590.463435][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1590.465672][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1590.469794][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1590.472815][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1590.475362][T24432] loop4: detected capacity change from 0 to 1 [ 1590.479319][T24419] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1590.480533][T24419] loop5: partition table partially beyond EOD, truncated [ 1590.482537][T24419] loop5: p1 start 2 is beyond EOD, truncated [ 1590.484352][T24419] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1590.492174][T24419] loop5: p3 start 9 is beyond EOD, truncated [ 1590.493795][T24419] loop5: p4 size 2 extends beyond EOD, truncated [ 1590.498010][T24419] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./jile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)={'syz1', "5e9221c94c180846c12de421b581b1a4baffeff4aa76b14eebb4"}, 0x1e) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1590.505305][T24419] loop5: p6 start 9 is beyond EOD, truncated 11:49:14 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ff", 0x20, 0x1c0}]) [ 1590.573834][T24419] loop5: detected capacity change from 0 to 1 [ 1590.595400][T24474] loop4: detected capacity change from 0 to 1 [ 1590.605453][T24419] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1590.607336][T24419] loop5: partition table partially beyond EOD, truncated [ 1590.609355][T24419] loop5: p1 start 2 is beyond EOD, truncated [ 1590.610701][T24419] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1590.613473][T24419] loop5: p3 start 9 is beyond EOD, truncated [ 1590.615470][T24419] loop5: p4 size 2 extends beyond EOD, truncated [ 1590.618716][T24419] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1590.621144][T24419] loop5: p6 start 9 is beyond EOD, truncated [ 1590.687110][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1590.688643][T32589] loop5: partition table partially beyond EOD, truncated [ 1590.690616][T32589] loop5: p1 start 2 is beyond EOD, truncated [ 1590.692313][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1590.694444][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1590.696066][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1590.698333][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1590.700549][T32589] loop5: p6 start 9 is beyond EOD, truncated 11:49:15 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1e3242, 0xc0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 11:49:15 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./lile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:15 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ff", 0x20, 0x1c0}]) 11:49:15 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff03000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./nile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1591.353304][T24518] loop5: detected capacity change from 0 to 1 11:49:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./pile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:15 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000003b80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x811000, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x30100a4, &(0x7f0000000080)=ANY=[@ANYBLOB="646174613d6f72649491d5172c00d730a829a9c48371c3b2f00ca3f0a8db6ccaa0e234e5e1d83cbbb78dba48307e3a06"]) 11:49:15 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xf801000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1591.408737][T24518] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1591.412840][T24518] loop5: partition table partially beyond EOD, truncated [ 1591.416167][T24518] loop5: p1 start 3 is beyond EOD, truncated [ 1591.417336][T24518] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1591.432220][T24518] loop5: p3 start 9 is beyond EOD, truncated [ 1591.433289][T24518] loop5: p4 size 2 extends beyond EOD, truncated [ 1591.437020][T24524] loop4: detected capacity change from 0 to 1 [ 1591.439288][T24518] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1591.454167][T24518] loop5: p6 start 9 is beyond EOD, truncated 11:49:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./rile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc9000000000000a8b72a2fa54401000a3ad3cab8dbc354a6a0bd0cf986e3ab3f9763968fddf1596f5aed49c492c5342f6ce5cd044dd5a7909ca335fefdf40a5c4da2044a746febfd036dfa6ab4c3f946ee6b6f34"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="40020000010201030000000000000000000000070e000600736e6d705f747261700000000600074000020000380002801400018008000100ac1414bb08000200ac14143a1400018008000100ac1414aa080002007f0000010c0002800500010006000000380002800c00028005000100110000000c000280050001003a00000014000180080001000a01010008000200e000000206000a000b00512e39333100000013000b0063616c6c666f7277617264696e67000084010a80300002800c000280050001003a00000014000180080001006401010208000200000000000c000280050001002f000000080001400000000144000280060003400003000006000340000400001400018008000100ff08ffff08000200ac1414bb14000180080001000a01010008000200ffffffff06000340000200000800014000000001b80002800c000280050001001100000006000340000400002c00018014000300fe88000000000000000000000000010114000400fc00000000000000000000000000000014000180080001006401010208000200ffffffff0c00028005000100060000000c00028005000100060000001400018008000100ffffffff01010206000340000400002c000180140003000000000000000000000000003b14000400fc0100000000000000000000000000014400028006000340000300000600034000010000060003400001000006000340000300000c000280050001008400000006000340000200000c00028005000100840000000000000000243dac81223813109ac667a620000000000000000000f673688a6979823acfb3db63a95457fe41cbd243c117524118d492293a1dad75cec668f04caba13b32b26578064649ca453fcd38bdc20929e0c820c0c23df8"], 0x240}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000084) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:15 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ff", 0x20, 0x1c0}]) 11:49:15 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xf901000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1591.542898][T24518] loop5: detected capacity change from 0 to 1 [ 1591.551277][T24550] EXT4-fs (sda1): Unrecognized mount option "data=ord”‘Õ" or missing value [ 1591.572032][T24569] EXT4-fs (sda1): Unrecognized mount option "data=ord”‘Õ" or missing value 11:49:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./tile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0]) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) setns(r0, 0x8000000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) [ 1591.595754][T24518] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1591.596857][T24518] loop5: partition table partially beyond EOD, truncated [ 1591.598279][T24518] loop5: p1 start 3 is beyond EOD, truncated [ 1591.599629][T24518] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1591.604794][T24518] loop5: p3 start 9 is beyond EOD, truncated [ 1591.606103][T24518] loop5: p4 size 2 extends beyond EOD, truncated [ 1591.612581][T24518] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1591.620239][T24518] loop5: p6 start 9 is beyond EOD, truncated 11:49:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./vile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1591.680829][T24588] loop4: detected capacity change from 0 to 1 11:49:15 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff04000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:15 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfa01000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:15 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f720030", 0x30, 0x1c0}]) [ 1591.709169][T24596] tmpfs: Unknown parameter '' [ 1591.715784][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1591.717280][T32589] loop5: partition table partially beyond EOD, truncated [ 1591.718955][T32589] loop5: p1 start 3 is beyond EOD, truncated [ 1591.719998][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1591.721427][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1591.722591][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1591.724124][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1591.725720][T32589] loop5: p6 start 9 is beyond EOD, truncated 11:49:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a04b38d8fc832dcd2d724c8a4fe4150271ef58f772c70a20029713d2120d00ee9f07cf2d8abdb6c277f558deed542ad6fb17c736c24497f326e23b22eb257488feb4d4ff17baca82b8b58babdc5a64e3c80c93b530aa6d6e6a402f8c5eefd4884bc11cc41e4a8c6697eec68e6b158aeaa7dd1e4a3f0e20a61bc14"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x18840, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./xile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1591.824671][T24623] loop5: detected capacity change from 0 to 1 [ 1591.827515][T24622] loop4: detected capacity change from 0 to 1 11:49:15 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfb01000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1591.855629][T24623] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1591.856674][T24623] loop5: partition table partially beyond EOD, truncated [ 1591.857950][T24623] loop5: p1 start 4 is beyond EOD, truncated [ 1591.859001][T24623] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1591.860738][T24623] loop5: p3 start 9 is beyond EOD, truncated [ 1591.862026][T24623] loop5: p4 size 2 extends beyond EOD, truncated [ 1591.865470][T24623] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1591.868030][T24623] loop5: p6 start 9 is beyond EOD, truncated 11:49:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./zile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:15 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f720030", 0x30, 0x1c0}]) 11:49:15 executing program 0: getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)={'security\x00', 0x0, [0x800, 0x1, 0x100, 0x4, 0x1a1]}, &(0x7f00000001c0)=0x54) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0xfffffffffffffe54, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"/302], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x8401, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0xa) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='fdinfo\x00') ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1591.925212][T24623] loop5: detected capacity change from 0 to 1 11:49:16 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfc01000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1591.981067][T24623] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1591.981955][T24623] loop5: partition table partially beyond EOD, truncated [ 1591.983191][T24623] loop5: p1 start 4 is beyond EOD, truncated [ 1591.984400][T24623] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1591.985995][T24623] loop5: p3 start 9 is beyond EOD, truncated [ 1591.987264][T24623] loop5: p4 size 2 extends beyond EOD, truncated [ 1591.988717][T24623] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1591.990533][T24623] loop5: p6 start 9 is beyond EOD, truncated [ 1592.005851][T24658] loop4: detected capacity change from 0 to 1 11:49:16 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="741f616e843d66af6b1bf80d4e20ef", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) poll(&(0x7f0000000180)=[{r0, 0x110}, {r2, 0x7421}, {r0, 0x10000}, {r4, 0x8000}, {r0, 0x780}, {r0, 0x2200}, {r0, 0x6000}, {r5, 0x600}], 0x8, 0xfff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace_dev_match', 0x0, 0x0) preadv(r6, &(0x7f0000001840)=[{&(0x7f0000000200)=""/251, 0xfb}], 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f00000001c0)={0x80000008}) clone3(&(0x7f0000000240)={0x2700c0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x8, &(0x7f0000000080)) 11:49:16 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff05000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./|ile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:16 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfd01000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:16 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f720030", 0x30, 0x1c0}]) 11:49:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) mkdirat(r5, &(0x7f0000000180)='./file0\x00', 0x42) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1592.546221][T24610] tmpfs: Unknown parameter '' 11:49:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./~ile0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:16 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfdffffff00000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f82696c6530"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1592.690984][T24702] loop4: detected capacity change from 0 to 1 [ 1592.695999][T24706] loop5: detected capacity change from 0 to 1 [ 1592.727650][T24706] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1592.728642][T24706] loop5: partition table partially beyond EOD, truncated [ 1592.729933][T24706] loop5: p1 start 5 is beyond EOD, truncated [ 1592.730892][T24706] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1592.734594][T24706] loop5: p3 start 9 is beyond EOD, truncated [ 1592.737013][T24706] loop5: p4 size 2 extends beyond EOD, truncated 11:49:16 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f7200300700050000000000", 0x38, 0x1c0}]) [ 1592.745456][T24706] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1592.751412][T24706] loop5: p6 start 9 is beyond EOD, truncated 11:49:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f84696c6530"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:16 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfeff000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1592.833144][T24706] loop5: detected capacity change from 0 to 1 [ 1592.866135][T24706] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1592.867162][T24706] loop5: partition table partially beyond EOD, truncated [ 1592.868519][T24706] loop5: p1 start 5 is beyond EOD, truncated [ 1592.869755][T24706] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1592.874609][T24706] loop5: p3 start 9 is beyond EOD, truncated [ 1592.875742][T24706] loop5: p4 size 2 extends beyond EOD, truncated [ 1592.881012][T24706] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1592.893938][T24706] loop5: p6 start 9 is beyond EOD, truncated [ 1592.915320][T24755] loop4: detected capacity change from 0 to 1 [ 1592.968715][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1592.969909][T32589] loop5: partition table partially beyond EOD, truncated [ 1592.971152][T32589] loop5: p1 start 5 is beyond EOD, truncated [ 1592.972368][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1592.974147][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1592.975615][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1592.977693][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1592.979218][T32589] loop5: p6 start 9 is beyond EOD, truncated 11:49:17 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="741f616e843d66af6b1bf80d4e20ef", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) poll(&(0x7f0000000180)=[{r0, 0x110}, {r2, 0x7421}, {r0, 0x10000}, {r4, 0x8000}, {r0, 0x780}, {r0, 0x2200}, {r0, 0x6000}, {r5, 0x600}], 0x8, 0xfff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace_dev_match', 0x0, 0x0) preadv(r6, &(0x7f0000001840)=[{&(0x7f0000000200)=""/251, 0xfb}], 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f00000001c0)={0x80000008}) clone3(&(0x7f0000000240)={0x2700c0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x8, &(0x7f0000000080)) 11:49:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f86696c6530"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:17 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfeffffff00000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:17 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff06000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:17 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f7200300700050000000000", 0x38, 0x1c0}]) 11:49:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./f\nle0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1593.659503][T24797] loop5: detected capacity change from 0 to 1 11:49:17 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xff03000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1593.709103][T24797] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1593.710196][T24797] loop5: partition table partially beyond EOD, truncated [ 1593.711478][T24797] loop5: p1 start 6 is beyond EOD, truncated [ 1593.712535][T24797] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1593.715688][T24797] loop5: p3 start 9 is beyond EOD, truncated [ 1593.717076][T24797] loop5: p4 size 2 extends beyond EOD, truncated [ 1593.719301][T24797] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1593.734699][T24804] loop4: detected capacity change from 0 to 1 [ 1593.743967][T24797] loop5: p6 start 9 is beyond EOD, truncated 11:49:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./f%le0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:17 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f7200300700050000000000", 0x38, 0x1c0}]) [ 1593.881022][T24797] loop5: detected capacity change from 0 to 1 11:49:17 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xffff000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fhle0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1593.907432][T24837] loop4: detected capacity change from 0 to 1 [ 1593.916805][T24797] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1593.918645][T24797] loop5: partition table partially beyond EOD, truncated [ 1593.925713][T24797] loop5: p1 start 6 is beyond EOD, truncated [ 1593.927906][T24797] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1593.937187][T24797] loop5: p3 start 9 is beyond EOD, truncated [ 1593.939675][T24797] loop5: p4 size 2 extends beyond EOD, truncated [ 1593.975577][T24797] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:18 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f720030070005000000000000000080", 0x3c, 0x1c0}]) [ 1593.995714][T24797] loop5: p6 start 9 is beyond EOD, truncated [ 1594.077485][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1594.078507][T32589] loop5: partition table partially beyond EOD, truncated [ 1594.079900][T32589] loop5: p1 start 6 is beyond EOD, truncated [ 1594.081985][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1594.084298][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1594.085741][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1594.093889][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1594.095975][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1594.106915][T24865] loop4: detected capacity change from 0 to 1 11:49:18 executing program 2: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="000225bd7000fedbdf2501fd00ccb0b69a000c00030000000000000000ff08000500ac1414bb0c00030069ad77e8fa64249d946b6f87c01405010000000000000008130900040000000c00030001000000000000000c000300ea00000000000000080008000100000008000400ffffffff08000500ac1414aa"], 0x6c}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x7e, 0x0, 0x0, 0x37) r1 = socket$inet6(0x10, 0x2, 0x0) socket$inet6(0xa, 0x80006, 0x8001) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d020afdc5cbdd081d8e828003000000000003a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x45, &(0x7f0000000000)=""/165, &(0x7f0000000140)=0xa5) 11:49:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fjle0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:18 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xffffff7f00000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:18 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff07000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:18 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f720030070005000000000000000080", 0x3c, 0x1c0}]) 11:49:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fi\ne0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1594.581998][T24884] loop5: detected capacity change from 0 to 1 [ 1594.584075][T24889] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1594.596811][T24885] loop4: detected capacity change from 0 to 1 [ 1594.600474][T24889] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 11:49:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fi%e0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:18 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xffffffff00000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1594.627438][T24884] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1594.629388][T24884] loop5: partition table partially beyond EOD, truncated [ 1594.631910][T24884] loop5: p1 start 7 is beyond EOD, truncated [ 1594.633947][T24884] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1594.638029][T24884] loop5: p3 start 9 is beyond EOD, truncated [ 1594.639481][T24884] loop5: p4 size 2 extends beyond EOD, truncated [ 1594.640978][T24897] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1594.644103][T24884] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1594.648701][T24884] loop5: p6 start 9 is beyond EOD, truncated [ 1594.653560][T24889] netlink: 40027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1594.656224][T24889] device lo entered promiscuous mode [ 1594.665533][T24889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 11:49:18 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f720030070005000000000000000080", 0x3c, 0x1c0}]) 11:49:18 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff08000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fi.e0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1594.742066][T24897] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1594.762990][T24917] loop4: detected capacity change from 0 to 1 11:49:18 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca", 0x3e, 0x1c0}]) 11:49:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace_dev_match', 0x0, 0x0) preadv(r2, &(0x7f0000001840)=[{&(0x7f0000000200)=""/251, 0xfb}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x2, 0x2, 0xfffff001, 0x2, 0x8}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x44, 0x0, "374bfd36337da507e54f1a2e507d91b504794984b3d23315bebdad78fa07f1c4bff9b652bfb855ed59ad9cf22d725b6027c0d410caee19f4403ca81e3211b31f0d9eeb878fb28b573d8733395fd9ace1"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x1d, 0x0, "2461758a5264d9a14fb62fe6bce0eeb5025264c73c839e09f5ff08cccc6e3ffd7477f28557a8556964d283b24c2a0e31a1d4a8d735eec48df90a55e5c0b3a337860cfd677448d1258641934ef7302d02"}, 0xd8) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 11:49:18 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xffffffffffffff0f, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fiHe0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1594.846274][T24931] loop4: detected capacity change from 0 to 1 11:49:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fiLe0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1594.916498][T24937] loop5: detected capacity change from 0 to 1 11:49:18 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca", 0x3e, 0x1c0}]) 11:49:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fiNe0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1594.956273][T24937] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1594.958150][T24937] loop5: partition table partially beyond EOD, truncated [ 1594.964714][T24937] loop5: p1 start 8 is beyond EOD, truncated [ 1594.966736][T24937] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1594.970220][T24937] loop5: p3 start 9 is beyond EOD, truncated [ 1594.972041][T24937] loop5: p4 size 2 extends beyond EOD, truncated [ 1594.975939][T24937] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1594.982926][T24937] loop5: p6 start 9 is beyond EOD, truncated 11:49:19 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fiPe0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1595.113547][T24965] loop4: detected capacity change from 0 to 1 [ 1595.114660][T24937] loop5: detected capacity change from 0 to 1 11:49:19 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x5, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x3, 0x6, @dev}, 0x10) close(r0) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x218, 0x13, 0x400, 0x70bd2b, 0x25dfdbfd, {0x2, 0x81, 0x1, 0x3, {0x4e23, 0x4e24, [0x243c931f, 0x3, 0x4, 0x65], [0x0, 0x20, 0x0, 0xff], 0x0, [0x80, 0x1000]}, 0x6, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xf5, 0x1, "24a24627ed3bf564918bbffeef0874416f26484398eee9872dd81df1de051999bbe223ad0891025fe826b252d552e186166ca6d5225e64747772cc18aab6077752edc8ee29a809ca11827d7927c19c49036aef7cd7a59e14eb64113abf5c46fcb70d124254144eb535d189395190674a4cea3cd1ebb48daaa504f8a07d027d6a91be05bc00f59f59841f8d6aa440c95e233b1f13fc34d7a1cfacb4112cce7b9ba8085163d3680cd8b9a7491f81fc71923b5e09c2e123ae74ba1a576c91c6146cc712344b2ef00ce6b88cfa00c508d68d5ba493d987d34563ac13bac8826d92df3f3d66871aa3fe057332017e83ea721de7"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "65e0153d652c27d68d4e891907aac12efd27d03170b9064a880bd79aed434dad46dae6df2db72d63ec334bc2c1c1cbad352978a5b680d9ac977801c185df4b9c8054fcd962d40bef3818424d886e0b5e067bc5c06fc04a7257ab98bfa75b9e56bc7e761337816cac41166afd4bce283fb5bbbc7a42dd85a95c14b8af4419bafa8c298106ad1f5cf68bfee0d473cd458ae7ef4ed82871f14035d50389929a17e6ab697cf26b1646fd70a555750e6f7992bb51e4a7dc7793feda7ccec7dee0b26ed4dbcc4d1867ce16ad3a846a8a33"}]}, 0x218}, 0x1, 0x0, 0x0, 0x60000010}, 0x0) mmap(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x200000c, 0x80010, r1, 0x9439c000) [ 1595.157162][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1595.158683][T32589] loop5: partition table partially beyond EOD, truncated [ 1595.160982][T32589] loop5: p1 start 8 is beyond EOD, truncated [ 1595.163040][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1595.168739][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1595.170780][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1595.173693][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1595.176498][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1595.180587][T24937] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1595.181683][T24937] loop5: partition table partially beyond EOD, truncated [ 1595.184123][T24937] loop5: p1 start 8 is beyond EOD, truncated [ 1595.185716][T24937] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1595.196788][T24937] loop5: p3 start 9 is beyond EOD, truncated [ 1595.199019][T24937] loop5: p4 size 2 extends beyond EOD, truncated 11:49:19 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff09000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:19 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca", 0x3e, 0x1c0}]) 11:49:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fiRe0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:19 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x3, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1595.210811][T24937] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1595.216043][T24937] loop5: p6 start 9 is beyond EOD, truncated 11:49:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x6, &(0x7f0000000640)=[{&(0x7f0000000200)="848f3807a2e69d72b146a6c4873c5e9300f2bfa87826448f61bfb8644085fe1aaa1e44644945143f6c589d2ee7b220097ae98a57b95ad598d48c8be39cd23c96f9f2bface35002e7473d75033ff6ae1b675fad953a", 0x55, 0x2}, {&(0x7f00000002c0)="47f71f643e3865b8d61c19e2b2dbd3dcff00e20cf8a5b5f7d231b90159bb6683df786892239ef1b33aa3e2f82de6f61a2cb38f01db95d24db30e8e7e1f621f6638be90b6e88f111bf22f67a3a564059ea8cf196397775655", 0x58, 0x9}, {&(0x7f00000003c0)="1b0140e9654221b77b044663ce5e5b95f4b801aa264c620d7826fe8261de7fed4990ebe6bfc3c12655ac079d19311afdf68d9d04e00f2e73285722f356079a775a1ab8032d0c89c4b582e5a7583fdf655c4da5ddebf91769bfdbe74949856c0e28321a1b9dd06679da4c762bb7c1623e3c4fb2a3e6542a82689e18abf454a9bdca55be406e9393f03518e758fc6806fd44eae65b486e93df03f99096ddce276b2c30a3e2e16729216f60e7ecd9e5338f2e31f48f976500be4404739d6edf8b3ea7e7ef39fa4f452d2302303734c71a2b27cd52d0132ae2454d52905f606e411e77", 0xe1, 0x7ff}, {&(0x7f00000004c0)="f3c34a3a99a5fdece11aa56e97d32ad5edbb9025ab1125fa9f5b18436ceb239ac9a8022ca4a1520c4176bf68ccb35192ebf1cc4b51c7ac3bb6724f7bc1707df2b8bad346855b65dd8fc6638e8aa006071adb78e67e3265c5a34a3f6479b8a6908fea7397a5983ad9ed3c1e2887986bbfcd2375848f", 0x75, 0x9}, {&(0x7f0000000540)="760990a06d191425a32e7e7349d58b6052aa749fac00fd9536f36aaef363c8979b5df5e73a05ed001dfd6160bcb895e71a25c8f5b89b3c61ff4bcc93793bdfd7a69b82e99702482374ecf3688f36e2d326d29995a4764e989e98cfb42f0e39b6a965088a18b209c67cb9265a08f8b3e3da9ce67ed7c80cc153fec7fa0ae8ca05ea8f289d5578a79ee3445d6e35f45b06196d1b58255f5123e9f2ecf40b4559ded450aa47efcf6e6cf8871026dcac53bdf963bd5553ca02be932780cb75d4995d5980eef474e31fb3416bf460cab74de44e0e248b8037d93665ec93236d45aef29fa593366f", 0xe5, 0x20}, {&(0x7f0000000180)="e2b6bbcef768", 0x6, 0x2}], 0x800000, &(0x7f0000000700)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@uni_xlateno}, {@shortname_lower}, {@shortname_win95}, {@rodir}], [{@smackfshat={'smackfshat', 0x3d, '-'}}, {@appraise}]}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000340)={0x0, r4, 0x7, 0x4, 0x7fffffff, 0x7}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000780)) [ 1595.320083][T25022] loop4: detected capacity change from 0 to 1 11:49:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fiTe0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1595.365709][T25026] loop5: detected capacity change from 0 to 1 11:49:19 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55", 0x3f, 0x1c0}]) 11:49:19 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fiVe0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1595.402419][T25026] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1595.404021][T25026] loop5: partition table partially beyond EOD, truncated [ 1595.406150][T25026] loop5: p1 start 9 is beyond EOD, truncated [ 1595.407930][T25026] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1595.427142][T25026] loop5: p3 start 9 is beyond EOD, truncated [ 1595.428881][T25026] loop5: p4 size 2 extends beyond EOD, truncated [ 1595.432722][T25026] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1595.447535][T25026] loop5: p6 start 9 is beyond EOD, truncated 11:49:19 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff25000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1595.477643][T25049] loop4: detected capacity change from 0 to 1 11:49:19 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55", 0x3f, 0x1c0}]) 11:49:19 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x5, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fiXe0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1595.567096][T25076] loop5: detected capacity change from 0 to 1 [ 1595.581946][T25080] loop4: detected capacity change from 0 to 1 [ 1595.589491][T25076] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1595.590883][T25076] loop5: partition table partially beyond EOD, truncated [ 1595.593265][T25076] loop5: p1 start 37 is beyond EOD, truncated [ 1595.594547][T25076] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1595.597233][T25076] loop5: p3 start 9 is beyond EOD, truncated [ 1595.599416][T25076] loop5: p4 size 2 extends beyond EOD, truncated [ 1595.607589][T25076] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fiZe0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1595.622303][T25076] loop5: p6 start 9 is beyond EOD, truncated 11:49:19 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55", 0x3f, 0x1c0}]) 11:49:19 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x6, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x206044, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1}}, {@cache_none}, {@aname={'aname', 0x3d, '\xa6@\\#.^[^'}}], [{@euid_eq}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/loop-control\x00'}}]}}) setuid(0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000040)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1, &(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0cd6a654f1a2a94c039eb2c988b5dbcde94f73029242c48d82a8b8ebfa33e4400ffd48d834ace08080cb48d5c546146d335205b7a8a016", @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="00000000661d6e829000000000000001000000010000ec", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="c4083b2833f8d5d8838abbd0013934bcc52e85adb33ca8076b05d624a5098c3ce2b8dace47923c1346c8fe2a9d8cbb87a64b7cfafd7043d9d747c486fa8836f8df68a07700640d1410bdf0f95818df38ad880131", @ANYRES32=r1, @ANYRES32=r3], 0xb0, 0x8095}], 0x1, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpgid(r0) quotactl(0x1, &(0x7f0000000300)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000340)="8018daf6a4bc441c76b4040e0163b2") connect$unix(r2, &(0x7f0000000380)=@file={0x1, './bus\x00'}, 0x6e) 11:49:19 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff64000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fi\\e0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:19 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x7, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fi^e0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1595.768529][T25114] loop4: detected capacity change from 0 to 1 11:49:19 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40}]) [ 1595.822963][T25118] loop5: detected capacity change from 0 to 1 [ 1595.858877][T25118] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1595.860491][T25118] loop5: partition table partially beyond EOD, truncated [ 1595.862906][T25118] loop5: p1 start 100 is beyond EOD, truncated [ 1595.865242][T25118] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1595.871472][T25118] loop5: p3 start 9 is beyond EOD, truncated [ 1595.873330][T25118] loop5: p4 size 2 extends beyond EOD, truncated [ 1595.877357][T25118] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1595.881507][T25118] loop5: p6 start 9 is beyond EOD, truncated 11:49:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6}, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:19 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fi`e0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1595.947686][T25118] loop5: detected capacity change from 0 to 1 11:49:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fibe0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1595.989365][T25118] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1595.990998][T25118] loop5: partition table partially beyond EOD, truncated [ 1595.992901][T25118] loop5: p1 start 100 is beyond EOD, truncated [ 1595.993887][T25118] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1596.000068][T25118] loop5: p3 start 9 is beyond EOD, truncated [ 1596.003395][T25118] loop5: p4 size 2 extends beyond EOD, truncated [ 1596.023644][T25118] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:20 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x9, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:20 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40}]) [ 1596.045923][T25118] loop5: p6 start 9 is beyond EOD, truncated 11:49:20 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0}) clock_settime(0x0, &(0x7f0000000080)={r1}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x1, 0x4, 0x0, &(0x7f0000000140)={r2, r3+60000000}, &(0x7f0000000180)=0x1, 0x1) 11:49:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fide0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:20 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff03010000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:20 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40}]) 11:49:20 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xa, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fife0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:20 executing program 4 (fault-call:0 fault-nth:0): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000011", 0x9, 0x4e0}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000003980)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000002", 0x15, 0x6800}, {&(0x7f00000001c0)="ffff01", 0x3, 0x9000}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}, {&(0x7f0000013200)="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", 0x282, 0x11580}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="e7e83ccda78efdc43d4c21118d0d6ef51c7b917fd5df02c59c1c00f1cfdbe8db1637437b331b4da12f8a42d3daf182af977d9f782413e1c12166b2f5f391af"]) 11:49:20 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xb, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1596.727390][T25232] loop5: detected capacity change from 0 to 1 11:49:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fihe0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1596.772825][T25232] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1596.778473][T25232] loop5: partition table partially beyond EOD, truncated [ 1596.803620][T25232] loop5: p1 start 259 is beyond EOD, truncated [ 1596.810249][T25232] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1596.825560][T25262] FAULT_INJECTION: forcing a failure. [ 1596.825560][T25262] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.838247][T25262] CPU: 0 PID: 25262 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1596.849012][T25262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1596.850623][T25232] loop5: p3 start 9 is beyond EOD, [ 1596.859098][T25262] Call Trace: [ 1596.859109][T25262] dump_stack+0x137/0x19d [ 1596.859133][T25262] should_fail+0x23c/0x250 [ 1596.864422][T25232] truncated [ 1596.864428][T25232] loop5: p4 size 2 extends beyond EOD, [ 1596.867692][T25262] ? __se_sys_memfd_create+0xfb/0x390 [ 1596.867719][T25262] __should_failslab+0x81/0x90 [ 1596.872322][T25232] truncated [ 1596.895950][T25232] loop5: p5 size 100663296 extends beyond EOD, [ 1596.896070][T25262] should_failslab+0x5/0x20 [ 1596.899197][T25232] truncated [ 1596.905733][T25262] __kmalloc+0x66/0x340 [ 1596.911968][T25232] loop5: p6 start 9 is beyond EOD, [ 1596.914168][T25262] ? strnlen_user+0x137/0x1c0 [ 1596.914189][T25262] __se_sys_memfd_create+0xfb/0x390 [ 1596.918459][T25232] truncated [ 1596.923616][T25262] __x64_sys_memfd_create+0x2d/0x40 [ 1596.942039][T25262] do_syscall_64+0x4a/0x90 [ 1596.946471][T25262] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1596.952462][T25262] RIP: 0033:0x4665d9 11:49:20 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185fffffff3030000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fije0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:21 executing program 2: r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x40}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x7463, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f00003b2000/0x800000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CLOSE, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) accept(r6, 0x0, &(0x7f0000000100)) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r7, 0x80, &(0x7f0000000180)=@phonet={0x23, 0x1, 0x33, 0x61}}, 0x3de) io_uring_enter(r0, 0x6eba, 0x0, 0x0, 0x0, 0x0) 11:49:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fike0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1596.956372][T25262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1596.977457][T25262] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1596.986186][T25262] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 00000000004665d9 [ 1596.994149][T25262] RDX: 0000000000000380 RSI: 0000000000000000 RDI: 00000000004bee66 [ 1597.002293][T25262] RBP: 0000000000000001 R08: 00000000000001c0 R09: 0000000000000000 [ 1597.010448][T25262] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1597.018422][T25262] R13: 00007ffc111c045f R14: 0000000000000380 R15: 0000000000022000 11:49:21 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xc, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:21 executing program 4 (fault-call:0 fault-nth:1): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fime0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:21 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xd, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1597.057806][T25306] loop5: detected capacity change from 0 to 1 [ 1597.120707][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1597.126236][T32589] loop5: partition table partially beyond EOD, truncated [ 1597.133877][T25329] FAULT_INJECTION: forcing a failure. [ 1597.133877][T25329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1597.148612][T25329] CPU: 0 PID: 25329 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1597.155804][T32589] loop5: p1 start 1011 is beyond EOD, 11:49:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fine0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1597.159432][T25329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1597.159444][T25329] Call Trace: [ 1597.159451][T25329] dump_stack+0x137/0x19d [ 1597.164943][T32589] truncated [ 1597.164948][T32589] loop5: p2 size 100663296 extends beyond EOD, [ 1597.175068][T25329] should_fail+0x23c/0x250 [ 1597.175092][T25329] should_fail_usercopy+0x16/0x20 [ 1597.178574][T32589] truncated [ 1597.182958][T25329] _copy_from_user+0x1c/0xd0 [ 1597.210073][T25329] __se_sys_memfd_create+0x137/0x390 [ 1597.216036][T25329] __x64_sys_memfd_create+0x2d/0x40 11:49:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fipe0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1597.221347][T25329] do_syscall_64+0x4a/0x90 [ 1597.225937][T25329] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1597.231839][T25329] RIP: 0033:0x4665d9 [ 1597.236022][T25329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1597.257521][T25329] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 11:49:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000b20000000000000a1473a57c3d0b48f5db2c0000110052778b26010000000000000000007d11de9994f64f9db34377d16b0bedd24e15c2318bf7c0e531a17530d29c3a86ea2e63f86238b64cd85265bb0000000000000000"], 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001fbab293ba39be24bac3c0000000000000000000000000a140000001100010000001f43fdb771e6e1e115ed1a04c5bf8febee80f0e0a7c6e996a22b091e3a3f905d3e8e3c157390e4c8da0c5b4b455b5c228714ff7b3be16b8c53873712bbb063968befab2469aac65fb2451b556a08e98bc7a0dc21e841a1da05ea42eab83db317154cbfc92c964e418f0edcb48234a1195128c8cf9861370067"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001000000000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001200)={&(0x7f0000000840)={0x98c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfb1a, 0x7, 0x3}, {0x4, 0x5, 0x6, 0x81}, {0x1, 0x5, 0x9, 0x1}, {0x9, 0x80, 0x40, 0x3f}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc41}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfdf}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xca49}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x8, 0x3f, 0xcdc5}, {0x8, 0x6, 0x55, 0x6}, {0x1, 0x5, 0x7, 0x705}, {0x5, 0x1, 0x1, 0x2a41}, {0xfff8, 0x0, 0x5, 0x9}, {0xd31f, 0x63, 0x38, 0x7}, {0x800, 0x40, 0x9, 0x7}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x800, 0x1f, 0x0, 0x20}, {0x1000, 0x1f, 0x7f, 0x4}, {0x0, 0x5, 0x7, 0x9}, {0x1, 0x9f, 0x9, 0x2}]}}}]}}]}, 0x98c}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 11:49:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fire0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1597.266169][T25329] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 00000000004665d9 [ 1597.274260][T25329] RDX: 0000000000000380 RSI: 0000000000000000 RDI: 00000000004bee66 [ 1597.282266][T25329] RBP: 0000000000000001 R08: 00000000000001c0 R09: 0000000000000000 [ 1597.290331][T25329] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1597.298311][T25329] R13: 00007ffc111c045f R14: 0000000000000380 R15: 0000000000022000 [ 1597.313134][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1597.319183][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1597.336257][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1597.349258][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1597.366458][T25306] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1597.372003][T25306] loop5: partition table partially beyond EOD, truncated [ 1597.379967][T25306] loop5: p1 start 1011 is beyond EOD, truncated [ 1597.386604][T25306] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1597.394430][T25306] loop5: p3 start 9 is beyond EOD, truncated [ 1597.400538][T25306] loop5: p4 size 2 extends beyond EOD, truncated [ 1597.407679][T25306] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1597.415318][T25306] loop5: p6 start 9 is beyond EOD, truncated [ 1597.473508][T25306] loop5: detected capacity change from 0 to 1 [ 1597.517662][T25306] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1597.522886][T25306] loop5: partition table partially beyond EOD, truncated [ 1597.530716][T25306] loop5: p1 start 1011 is beyond EOD, truncated [ 1597.537312][T25306] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1597.545685][T25306] loop5: p3 start 9 is beyond EOD, truncated [ 1597.551863][T25306] loop5: p4 size 2 extends beyond EOD, truncated [ 1597.559174][T25306] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:21 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffffc8070000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fite0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1597.566791][T25306] loop5: p6 start 9 is beyond EOD, truncated [ 1597.575016][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1597.580539][T32589] loop5: partition table partially beyond EOD, truncated [ 1597.589407][T32589] loop5: p1 start 1011 is beyond EOD, truncated [ 1597.595725][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1597.603998][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1597.610034][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1597.617151][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1597.624990][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1597.678803][T25399] loop5: detected capacity change from 0 to 1 [ 1597.721833][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1597.727298][T32589] loop5: partition table partially beyond EOD, truncated [ 1597.735111][T32589] loop5: p1 start 1992 is beyond EOD, truncated [ 1597.741482][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1597.749325][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1597.755332][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1597.762513][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1597.770241][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1597.777967][T25399] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1597.783234][T25399] loop5: partition table partially beyond EOD, truncated [ 1597.790772][T25399] loop5: p1 start 1992 is beyond EOD, truncated [ 1597.797030][T25399] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1597.805141][T25399] loop5: p3 start 9 is beyond EOD, truncated [ 1597.811147][T25399] loop5: p4 size 2 extends beyond EOD, truncated [ 1597.818551][T25399] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1597.826367][T25399] loop5: p6 start 9 is beyond EOD, truncated 11:49:21 executing program 2: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x7, &(0x7f0000000000)={0x1000, 0x8000000006}) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[{0x0, 0x0, 0x8}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x600000, 0x40) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x9}], 0x0, 0x0) 11:49:21 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xe, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:21 executing program 4 (fault-call:0 fault-nth:2): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)=@sha1={0x1, "c9415efae613f7d09bf54f7a6ea7a496fdb4ef5a"}, 0x15, 0x3) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x4) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fiue0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:21 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffffcd070000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1597.890789][T25399] loop5: detected capacity change from 0 to 1 11:49:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x7c}, 0x236}, {{&(0x7f00000004c0)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/63, 0x3b}, {0x0}], 0x2}}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000007c0)="30eb2297b18c0a2ada6f46f8341ce63ccdab668e820dabde", 0x41395563) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3, 0x100000000, 0x0, 0x0, 0x0, 0x1}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000340)=0x5) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x1f, 0xe5}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000380)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a", 0x8c}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 1597.956109][T25432] FAULT_INJECTION: forcing a failure. [ 1597.956109][T25432] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.968813][T25432] CPU: 0 PID: 25432 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1597.980283][T25432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1597.990476][T25432] Call Trace: [ 1597.993921][T25432] dump_stack+0x137/0x19d [ 1597.998267][T25432] should_fail+0x23c/0x250 11:49:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./five0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fixe0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1598.003077][T25432] ? shmem_alloc_inode+0x22/0x30 [ 1598.008740][T25432] __should_failslab+0x81/0x90 [ 1598.014181][T25432] ? shmem_match+0xa0/0xa0 [ 1598.019245][T25432] should_failslab+0x5/0x20 [ 1598.023754][T25432] kmem_cache_alloc+0x46/0x2f0 [ 1598.028844][T25432] ? do_anonymous_page+0x411/0x8b0 [ 1598.034081][T25432] ? fsnotify_perm+0x59/0x2e0 [ 1598.038811][T25432] ? shmem_match+0xa0/0xa0 [ 1598.043288][T25432] shmem_alloc_inode+0x22/0x30 [ 1598.048062][T25432] new_inode_pseudo+0x38/0x1c0 11:49:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fize0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fi|e0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1598.052835][T25432] new_inode+0x21/0x120 [ 1598.057001][T25432] shmem_get_inode+0xa1/0x480 [ 1598.061700][T25432] __shmem_file_setup+0xf1/0x1d0 [ 1598.066781][T25432] shmem_file_setup+0x37/0x40 [ 1598.071544][T25432] __se_sys_memfd_create+0x1eb/0x390 [ 1598.076892][T25432] __x64_sys_memfd_create+0x2d/0x40 [ 1598.082124][T25432] do_syscall_64+0x4a/0x90 [ 1598.086625][T25432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1598.092634][T25432] RIP: 0033:0x4665d9 [ 1598.096540][T25432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1598.117628][T25432] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1598.126298][T25432] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 00000000004665d9 [ 1598.134264][T25432] RDX: 0000000000000380 RSI: 0000000000000000 RDI: 00000000004bee66 [ 1598.142231][T25432] RBP: 0000000000000001 R08: 00000000000001c0 R09: 0000000000000000 11:49:22 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1598.150185][T25432] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1598.158147][T25432] R13: 00007ffc111c045f R14: 0000000000000380 R15: 0000000000022000 11:49:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fi~e0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:22 executing program 4 (fault-call:0 fault-nth:3): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:22 executing program 0: getpeername$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000980)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x12d2e1fe, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd4}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000002c0)="aec6799871a01f8852441d568665420c679ccda3634bb8f00655cce4cf9ec415093707636e2c2e0c8872c871a1a16c6f59bbe82d89e5d6b83aa5381650bb6aa2107548e6581afe0b7157870e0eb46c35655fc8", 0x53}, {&(0x7f0000000340)="d36750862ef3184e9a0f5668e490eb8046b5b262b190d7c2c4525c45f085ea7c6027012851738cd5dd90f85c2a80fec9df611f36f090d190adf57863497c4896aaa1755625eeab168f7c", 0x4a}, {&(0x7f0000000480)="19ef703928f3e8f1425e174b95b3d1037d63901b90c60e08c55172b37e05288baa1bd748bfb42389e8c9a63c674fb4d1ab661aa66af83f8b653720bb82353002b6718490f5c1dde19bea4b666de438cf15fe41b89518f389dfadc0b38580cbb6a9eb0e6f6d3c64ef01882f572bbce3849ecc6179199bfd56c48881baa5c43865f3cef489ed3c1f", 0x87}, {&(0x7f00000003c0)="96c86f4d0a7422dbb39c2d1a1668623e986a0a6aacbbf4041eb409dd3e0fdc4b059d03ba89d2916c7e9b5d438beb8b01f793cdb9a909a50afc1fce9b446fe8c7520767f8cf26ef958b5ff2feb9b2a5737d2900", 0x53}, {&(0x7f0000000540)="b37a6f98999913d4e554ac6802d1c5c299b4a8d906a33b7923793186765639e85f21b1a1961aca3fa5ce9d57cc997451da8f46e055fbe833d7224b122df9485b955e5e0d5c33ab43a364acb6a70b6b44b5346eff28a71a28d22391529e993b9061dd992ebbb598216a1e899d084275044e2c0e5b2770fbc6cae1a981e8fb9f232d7ed995f75d84c68b0783c263fdf08ff8df978e116381c7a24dca01397b2ee0cbe0e9c9e42915", 0xa7}, {&(0x7f0000000600)="98b445420583e3dc066edc9d874393826e047b3961e6eae422af12038146508534ffdb16d7e745bcb54d38ab69b4b71229584bc9342144318c07eda260e171f14404fb6a864c6df1c2ed262467283f878b68119e0033951cc497e764c62a5447e0ed82bcfa", 0x65}, {&(0x7f0000000680)="5028d33ed12924a0bf4e78771aab1bb3b2b34b5e2b4988d7e567ebd51ec2eaa9f518f21c48be58f368acad357d053c5aa65bcb2a4ef4ed35e79d6f73e9ce4612be850f84841ecf78423caf0435ec427e13cf1e5e97aaf962d186ca01e2b7d9f8883ba311da87cd81ad06d96dca8ef4be65364e10623e25e22c3f34baff1c86be99695b05664a17fdba01c88c889baad027564235ed6991498a", 0x99}, {&(0x7f0000000740)="4dda47e58654c123b47aa861201be97545bbf5676dfb2fba7f232edfe9dbe9b40877e42b9db7c8068c60f31038ba80a6cc80d3532b22899d9b6a3de76954142f4ed2eea5aba6a3ebf8246af2ace9c833d0791a627ab02946b5407cd550fbb61c13230e48b8f1b1fecc2869edb2eb572e77ef984f4d5905114eae75293ec209014aac17994e10f7d749b64b7f6bb32094dfc3cde7c9c4b3368b3186aafbcfa57d5b6d9bc8bac7fa4c6952ec88c3e7b0d51a9d48b6aa581e225869737ce1440e74c7cfa0ea581a735ad7ba242be847dc04ea42d98a9a1e556e5180566ad97a9f4ebfa41d3b9fba3137433a6170f4", 0xed}], 0x8, &(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000088000000000000002900000039000000880e013b0000000000000000000000000000000000000001fc00000000000000000000000000000120010000000000000000000000000002fe800000000000000000000000000024fe80000000000000000000000000000afc01000000000000000000000000000100"/140], 0x1f0}}, {{&(0x7f0000000bc0)={0xa, 0x4e20, 0x1f, @mcast1, 0xd6a}, 0x1c, &(0x7f0000001300), 0x0, &(0x7f00000013c0)}}, {{&(0x7f0000001400)={0xa, 0x4e21, 0x82, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5e}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000001440)="a33cda8f24cbf016e97426415bff2db7d63dd93c6e8864ba66e187848b09ea3a118fac116db649669f1f6cc6c3d4d0c0782ac5a1ee129c1ac92bb7b657a3341881bb5657e15d6c", 0x47}, {&(0x7f00000014c0)="8baba9540dbc594b677803cdda2c500ea00684a1061ed65477c3c0e46e5848df7723b1d79fd9c3a4ecc5767e9fb117fda1eefc7e895b82a618ce394f91288690a85050079d0dcbc1b38d16c3dec96bd4f39722a45ad34b5fdaa0e92284fe44a68441d3d68cfdcbbd5ea4eac21e1cae027a7264837a9b421d105dbc0721d181ef12cb7d7d7a1c8d9e76f4682b146c8556", 0x90}], 0x2, &(0x7f0000001f00)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}, @hopopts_2292={{0x1130, 0x29, 0x36, {0x2b, 0x222, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x9, 0x4, [0x2, 0x1f, 0x1000, 0x7]}}, @ra={0x5, 0x2, 0xe000}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0xd6, "c0e4aab1a81497bcd56f4a87fcc35f1c147063a21e813f552d64a843f2aa8d62cc860ccfa505acc19ebf886d94418ef90f369bf17da9d4c4d2636281a0fff854c7eb8ed96a2b192118ed58624e07843c08750a24b634c51687b532ea8bf793bf1125fdee087fa671f40446419347ed55b3fc2b1f22ad02112936a9b7dcb198b5e6217eacf277f7c63b831daa406bb9ab902cd096eaf7b24d6795584e7ae44d7786ca6a5419eac6dd8520e39f6003ba1410ca649a4a9e43bdccfb815a9c2a9b0ca815460bccff0e3739300c7b50efa2251900cb7aac19"}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x40, 0x1000, "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"}, @pad1]}}}], 0x1158}}], 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 11:49:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f6669826530"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1598.234643][T25479] loop5: detected capacity change from 0 to 1 [ 1598.282392][T25479] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1598.287652][T25479] loop5: partition table partially beyond EOD, truncated [ 1598.294861][T25479] loop5: p1 start 1997 is beyond EOD, truncated [ 1598.301138][T25479] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1598.309950][T25479] loop5: p3 start 9 is beyond EOD, truncated [ 1598.317123][T25479] loop5: p4 size 2 extends beyond EOD, truncated 11:49:22 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x11, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1598.329403][T25499] FAULT_INJECTION: forcing a failure. [ 1598.329403][T25499] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.342255][T25499] CPU: 0 PID: 25499 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1598.353339][T25499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1598.363488][T25499] Call Trace: [ 1598.366760][T25499] dump_stack+0x137/0x19d [ 1598.370948][T25479] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1598.371186][T25499] should_fail+0x23c/0x250 [ 1598.383492][T25499] ? security_inode_alloc+0x30/0x180 [ 1598.388966][T25499] __should_failslab+0x81/0x90 [ 1598.393125][T25479] loop5: p6 start 9 is beyond EOD, [ 1598.393846][T25499] should_failslab+0x5/0x20 [ 1598.393867][T25499] kmem_cache_alloc+0x46/0x2f0 [ 1598.399189][T25479] truncated [ 1598.403647][T25499] security_inode_alloc+0x30/0x180 [ 1598.416844][T25499] inode_init_always+0x20b/0x420 [ 1598.421803][T25499] ? shmem_match+0xa0/0xa0 [ 1598.426292][T25499] new_inode_pseudo+0x73/0x1c0 11:49:22 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffffc9360000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1598.431061][T25499] new_inode+0x21/0x120 [ 1598.435229][T25499] shmem_get_inode+0xa1/0x480 [ 1598.439920][T25499] __shmem_file_setup+0xf1/0x1d0 [ 1598.444924][T25499] shmem_file_setup+0x37/0x40 [ 1598.449692][T25499] __se_sys_memfd_create+0x1eb/0x390 [ 1598.455064][T25499] __x64_sys_memfd_create+0x2d/0x40 [ 1598.460349][T25499] do_syscall_64+0x4a/0x90 [ 1598.464775][T25499] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1598.470685][T25499] RIP: 0033:0x4665d9 [ 1598.474725][T25499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1598.494393][T25499] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1598.502876][T25499] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 00000000004665d9 [ 1598.510932][T25499] RDX: 0000000000000380 RSI: 0000000000000000 RDI: 00000000004bee66 [ 1598.519354][T25499] RBP: 0000000000000001 R08: 00000000000001c0 R09: 0000000000000000 [ 1598.527422][T25499] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1598.535472][T25499] R13: 00007ffc111c045f R14: 0000000000000380 R15: 0000000000022000 [ 1598.594420][T25526] loop5: detected capacity change from 0 to 1 [ 1598.649146][T25526] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1598.654415][T25526] loop5: partition table partially beyond EOD, truncated [ 1598.662903][T25526] loop5: p1 start 14025 is beyond EOD, truncated [ 1598.669320][T25526] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1598.687820][T25526] loop5: p3 start 9 is beyond EOD, truncated [ 1598.693869][T25526] loop5: p4 size 2 extends beyond EOD, truncated [ 1598.702183][T25526] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1598.710705][T25526] loop5: p6 start 9 is beyond EOD, truncated [ 1598.804428][T25526] loop5: detected capacity change from 0 to 1 11:49:22 executing program 4 (fault-call:0 fault-nth:4): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f6669846530"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:22 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x12, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1598.868111][T25526] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1598.873537][T25526] loop5: partition table partially beyond EOD, truncated [ 1598.898625][T25526] loop5: p1 start 14025 is beyond EOD, truncated [ 1598.905015][T25526] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1598.925444][T25544] FAULT_INJECTION: forcing a failure. [ 1598.925444][T25544] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.938323][T25544] CPU: 1 PID: 25544 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1598.948769][T25544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1598.949075][T25526] loop5: p3 start 9 is beyond EOD, [ 1598.958833][T25544] Call Trace: [ 1598.958846][T25544] dump_stack+0x137/0x19d [ 1598.964083][T25526] truncated [ 1598.964089][T25526] loop5: p4 size 2 extends beyond EOD, [ 1598.967352][T25544] should_fail+0x23c/0x250 [ 1598.967377][T25544] ? __d_alloc+0x36/0x370 [ 1598.971947][T25526] truncated [ 1598.975150][T25544] __should_failslab+0x81/0x90 [ 1598.998185][T25544] should_failslab+0x5/0x20 [ 1599.002913][T25544] kmem_cache_alloc+0x46/0x2f0 [ 1599.007913][T25544] ? __init_rwsem+0x59/0x70 [ 1599.012513][T25544] __d_alloc+0x36/0x370 [ 1599.016748][T25544] ? current_time+0xdb/0x190 [ 1599.021498][T25544] d_alloc_pseudo+0x1a/0x50 [ 1599.026006][T25544] alloc_file_pseudo+0x63/0x130 [ 1599.030894][T25544] __shmem_file_setup+0x14c/0x1d0 [ 1599.035979][T25544] shmem_file_setup+0x37/0x40 [ 1599.040681][T25544] __se_sys_memfd_create+0x1eb/0x390 [ 1599.041677][T25526] loop5: p5 size 100663296 extends beyond EOD, [ 1599.046062][T25544] __x64_sys_memfd_create+0x2d/0x40 [ 1599.046088][T25544] do_syscall_64+0x4a/0x90 [ 1599.052503][T25526] truncated [ 1599.057652][T25544] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1599.071088][T25544] RIP: 0033:0x4665d9 11:49:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYRES64], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c00048008000140000001ffff000040000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c0002800500010088000000065b0340000400000c000280050001003a0008000000010073797a300020000008000640fd000001e67b6ab7ee365e625e07fb174472c1b32772e396d1b256b9fbf64a9e"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0c002dfddbdf2501000000000000000141000000200017305f766972745f776966690000000000000000000000000000000000f2886d4c69eee4ad18c43c87a7d9dea6422f37489ef456185accca2660f9ebb970c93b90834dab12ba2ca268645cdd19c5ec594f470065c0561444bd970f2e448226534b59794596383497453253752dea7743c17668095281720e7d878180fe65e4a18385969f2b1197bbfa75d1a86f75bd945e6f1b883793e90563884f05177e9e6b"], 0x3c}}, 0x4024884) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x72}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2010}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1599.074982][T25544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1599.095364][T25544] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1599.103953][T25544] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 00000000004665d9 [ 1599.112014][T25544] RDX: 0000000000000380 RSI: 0000000000000000 RDI: 00000000004bee66 [ 1599.116710][T25526] loop5: p6 start 9 is beyond EOD, 11:49:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f6669866530"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:23 executing program 4 (fault-call:0 fault-nth:5): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1599.121376][T25544] RBP: 0000000000000001 R08: 00000000000001c0 R09: 0000000000000000 [ 1599.121390][T25544] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1599.126618][T25526] truncated [ 1599.134557][T25544] R13: 00007ffc111c045f R14: 0000000000000380 R15: 0000000000022000 11:49:23 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x22, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f6669886530"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c00028005000100880000000600034000040c000280050001003a0000000900010073797a300000000008000640000000010000"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3dc14181aa7eefcf0f322aec98e7567be4a819b4d32eb2b3def417b1000000000000", @ANYRESHEX, @ANYBLOB=',\x00']) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f00000002c0)=""/152, 0xfffffe93, 0x3ff, 0x71f9}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1599.263171][T25575] FAULT_INJECTION: forcing a failure. [ 1599.263171][T25575] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.275829][T25575] CPU: 1 PID: 25575 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1599.286082][T25575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1599.296322][T25575] Call Trace: [ 1599.299609][T25575] dump_stack+0x137/0x19d [ 1599.303951][T25575] should_fail+0x23c/0x250 [ 1599.308484][T25575] ? __alloc_file+0x2e/0x1a0 11:49:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af3", 0x2a, 0x1600}], 0x81, &(0x7f0000000080)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x2000da3, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) r4 = getegid() r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010003000000000014ea5d9f", @ANYRES32=0x0, @ANYBLOB="040000000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=0xee01, @ANYBLOB="08000200", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB="10000200000000002000030000000000"], 0x64, 0x0) removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') pwritev(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) [ 1599.313109][T25575] __should_failslab+0x81/0x90 [ 1599.318180][T25575] should_failslab+0x5/0x20 [ 1599.322718][T25575] kmem_cache_alloc+0x46/0x2f0 [ 1599.327678][T25575] ? inode_doinit_with_dentry+0x382/0x950 [ 1599.333463][T25575] __alloc_file+0x2e/0x1a0 [ 1599.337889][T25575] alloc_empty_file+0xcd/0x1c0 [ 1599.342670][T25575] alloc_file+0x3a/0x280 [ 1599.346984][T25575] alloc_file_pseudo+0xe2/0x130 [ 1599.352060][T25575] __shmem_file_setup+0x14c/0x1d0 [ 1599.357469][T25575] shmem_file_setup+0x37/0x40 11:49:23 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x25, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1599.362227][T25575] __se_sys_memfd_create+0x1eb/0x390 [ 1599.367579][T25575] __x64_sys_memfd_create+0x2d/0x40 [ 1599.372789][T25575] do_syscall_64+0x4a/0x90 [ 1599.377315][T25575] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1599.383244][T25575] RIP: 0033:0x4665d9 [ 1599.387144][T25575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:49:23 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffffca360000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66698a6530"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1599.406938][T25575] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1599.415528][T25575] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 00000000004665d9 [ 1599.423618][T25575] RDX: 0000000000000380 RSI: 0000000000000000 RDI: 00000000004bee66 [ 1599.431687][T25575] RBP: 0000000000000001 R08: 00000000000001c0 R09: 0000000000000000 [ 1599.439762][T25575] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1599.447741][T25575] R13: 00007ffc111c045f R14: 0000000000000380 R15: 0000000000022000 11:49:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) write$vga_arbiter(r1, &(0x7f0000000180)=@other={'lock', ' ', 'mem'}, 0x9) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 11:49:23 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1f8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66698c6530"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af3", 0x2a, 0x1600}], 0x81, &(0x7f0000000080)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x2000da3, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) r4 = getegid() r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010003000000000014ea5d9f", @ANYRES32=0x0, @ANYBLOB="040000000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=0xee01, @ANYBLOB="08000200", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB="10000200000000002000030000000000"], 0x64, 0x0) removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') pwritev(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) 11:49:23 executing program 4 (fault-call:0 fault-nth:6): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:23 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1f9, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fil\n0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='attr/exec\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x100, 0xb, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x40}, [@IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}]}, @IPSET_ATTR_ADT={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008001) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af3", 0x2a, 0x1600}], 0x81, &(0x7f0000000080)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x2000da3, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) r4 = getegid() r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010003000000000014ea5d9f", @ANYRES32=0x0, @ANYBLOB="040000000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=0xee01, @ANYBLOB="08000200", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB="10000200000000002000030000000000"], 0x64, 0x0) removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') pwritev(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) [ 1599.605423][T25622] loop5: detected capacity change from 0 to 1 11:49:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fil%0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1599.672449][T25639] FAULT_INJECTION: forcing a failure. [ 1599.672449][T25639] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.685120][T25639] CPU: 1 PID: 25639 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1599.695401][T25639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1599.705478][T25639] Call Trace: [ 1599.708755][T25639] dump_stack+0x137/0x19d [ 1599.713097][T25639] should_fail+0x23c/0x250 [ 1599.717518][T25639] ? security_file_alloc+0x30/0x190 [ 1599.722714][T25639] __should_failslab+0x81/0x90 [ 1599.727757][T25639] should_failslab+0x5/0x20 [ 1599.732266][T25639] kmem_cache_alloc+0x46/0x2f0 [ 1599.737249][T25639] ? __alloc_file+0x2e/0x1a0 [ 1599.741846][T25639] security_file_alloc+0x30/0x190 [ 1599.746877][T25639] __alloc_file+0x83/0x1a0 [ 1599.751322][T25639] alloc_empty_file+0xcd/0x1c0 [ 1599.756148][T25639] alloc_file+0x3a/0x280 [ 1599.757984][T25622] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1599.760394][T25639] alloc_file_pseudo+0xe2/0x130 [ 1599.765609][T25622] loop5: partition table partially beyond EOD, [ 1599.770463][T25639] __shmem_file_setup+0x14c/0x1d0 [ 1599.776726][T25622] truncated [ 1599.781730][T25639] shmem_file_setup+0x37/0x40 [ 1599.790082][T25639] __se_sys_memfd_create+0x1eb/0x390 [ 1599.795477][T25639] __x64_sys_memfd_create+0x2d/0x40 [ 1599.800773][T25639] do_syscall_64+0x4a/0x90 [ 1599.805196][T25639] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1599.811106][T25639] RIP: 0033:0x4665d9 [ 1599.814980][T25639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1599.838059][T25639] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1599.846475][T25639] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 00000000004665d9 [ 1599.854648][T25639] RDX: 0000000000000380 RSI: 0000000000000000 RDI: 00000000004bee66 [ 1599.862782][T25639] RBP: 0000000000000001 R08: 00000000000001c0 R09: 0000000000000000 [ 1599.870869][T25639] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1599.878833][T25639] R13: 00007ffc111c045f R14: 0000000000000380 R15: 0000000000022000 [ 1599.912413][T25622] loop5: p1 start 14026 is beyond EOD, truncated [ 1599.918849][T25622] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1599.929487][T25622] loop5: p3 start 9 is beyond EOD, truncated [ 1599.935505][T25622] loop5: p4 size 2 extends beyond EOD, truncated [ 1599.942591][T25622] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1599.950420][T25622] loop5: p6 start 9 is beyond EOD, truncated [ 1600.009703][T25622] loop5: detected capacity change from 0 to 1 [ 1600.048266][T25622] loop5: p1 < > p2 p3 p4 < p5 p6 > 11:49:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af3", 0x2a, 0x1600}], 0x81, &(0x7f0000000080)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x2000da3, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) r4 = getegid() r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010003000000000014ea5d9f", @ANYRES32=0x0, @ANYBLOB="040000000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=0xee01, @ANYBLOB="08000200", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB="10000200000000002000030000000000"], 0x64, 0x0) removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') pwritev(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) 11:49:24 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1fa, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:24 executing program 4 (fault-call:0 fault-nth:7): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:24 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffffcb360000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fild0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)) close(0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1600.054897][T25622] loop5: partition table partially beyond EOD, truncated [ 1600.063751][T25622] loop5: p1 start 14026 is beyond EOD, truncated [ 1600.070605][T25622] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1600.077998][T25622] loop5: p3 start 9 is beyond EOD, truncated [ 1600.083982][T25622] loop5: p4 size 2 extends beyond EOD, truncated [ 1600.093043][T25622] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1600.101171][T25622] loop5: p6 start 9 is beyond EOD, truncated [ 1600.153463][T25678] FAULT_INJECTION: forcing a failure. [ 1600.153463][T25678] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1600.167021][T25678] CPU: 1 PID: 25678 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1600.177300][T25678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1600.187467][T25678] Call Trace: [ 1600.190971][T25678] dump_stack+0x137/0x19d [ 1600.195299][T25678] should_fail+0x23c/0x250 [ 1600.199710][T25678] __alloc_pages+0x102/0x320 [ 1600.204492][T25678] alloc_pages_vma+0x391/0x660 [ 1600.209280][T25678] shmem_getpage_gfp+0x980/0x1410 [ 1600.214314][T25678] ? mls_context_isvalid+0x76/0x1e0 [ 1600.219880][T25678] shmem_write_begin+0x7e/0x100 [ 1600.225649][T25678] generic_perform_write+0x196/0x3a0 [ 1600.231040][T25678] ? file_update_time+0x1bd/0x3e0 [ 1600.236057][T25678] __generic_file_write_iter+0x161/0x300 [ 1600.241819][T25678] ? generic_write_checks+0x250/0x290 [ 1600.247174][T25678] generic_file_write_iter+0x75/0x130 [ 1600.252541][T25678] vfs_write+0x69d/0x770 [ 1600.256853][T25678] __x64_sys_pwrite64+0xf5/0x150 [ 1600.261959][T25678] do_syscall_64+0x4a/0x90 [ 1600.266411][T25678] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1600.272464][T25678] RIP: 0033:0x419777 [ 1600.276344][T25678] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b 11:49:24 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1fb, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0400000010000100fffffffffffffffa000000000000008000000000000000000a00000000000000b1f1f49cc09e0cae0000000000000000eedc8671f675e4f26662bf92684074ebdba41c6a06"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./filf0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1600.296107][T25678] RSP: 002b:00007f6f1c761e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1600.304600][T25678] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000419777 [ 1600.312825][T25678] RDX: 0000000000000040 RSI: 0000000020000200 RDI: 0000000000000004 [ 1600.321053][T25678] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1600.329094][T25678] R10: 00000000000001c0 R11: 0000000000000293 R12: 0000000000000004 [ 1600.337396][T25678] R13: 0000000000000004 R14: 00000000200001c0 R15: 0000000000000000 11:49:24 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1fc, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:24 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40) close(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x480800) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='\x00', r1) 11:49:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66696c6513"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1600.416654][T25678] loop4: detected capacity change from 0 to 1 11:49:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0xa8}, 0x1, 0x0, 0x0, 0x8845}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000005c0)="57099609c7602a8f1f4b9e0ec11f8fd5f94206bf270e1ec6f9db474af9f8a09b5582c37193df0e7b626c22fd306ea7bbcb00a4387a0c7759b6cbc0cbc98c17ff9d82b1b87b2e26d0d40a85dcc60b4b424e32888468965a6548efde5faa5dc2a1ae03a8192f60dcaac309d397c7c69f951dc507721eb2f7cf50d67fe7acf62ccde84e8d02ec0fe6af63db9ebf9eb59c0172705d180e5d0d175ec08125df9cb82e76e8481e2e0498e02dd57ce716a0e962ad4377fb973909b20482dffb3251bc329479b990c216eff99847c11b9fd3b5ccf744f6973663c0c14cc758ff", 0xffffffffffffffd0, 0x6}, {&(0x7f00000003c0)="835f234754e6411e8483280ed2a6040419804a5c0667d7c349af1bf132be874c4bc774b3e7cb97f84bce098fab25d4d63f9fb7e23350dfcd9b26be08ce7651edd3d46a8d6b74bf30648c251e55a8106c836590694863b886969f7123168a1d01ed5edeef", 0xfffffffffffffef0}], 0x1281080, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x114, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x2, 0x5, 0x0, 0x5, 0x3f, 0x0, 0xea]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x99a}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x242f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x95}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0xe4, 0x2000fff, 0x2718, 0x80000001, 0x0]}, @CTA_NAT_DST={0x5c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x48c0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file\"'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1600.471322][T25705] loop5: detected capacity change from 0 to 1 [ 1600.532583][T25705] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1600.538308][T25705] loop5: partition table partially beyond EOD, truncated [ 1600.550831][T25705] loop5: p1 start 14027 is beyond EOD, truncated [ 1600.557244][T25705] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1600.573024][T25705] loop5: p3 start 9 is beyond EOD, truncated [ 1600.579063][T25705] loop5: p4 size 2 extends beyond EOD, truncated [ 1600.586289][T25705] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1600.594324][T25705] loop5: p6 start 9 is beyond EOD, truncated [ 1600.664323][T25705] loop5: detected capacity change from 0 to 1 [ 1600.721381][T25705] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1600.728307][T25705] loop5: partition table partially beyond EOD, truncated [ 1600.735880][T25705] loop5: p1 start 14027 is beyond EOD, truncated [ 1600.742365][T25705] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1600.751183][T25705] loop5: p3 start 9 is beyond EOD, truncated [ 1600.757226][T25705] loop5: p4 size 2 extends beyond EOD, truncated [ 1600.764927][T25705] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1600.772898][T25705] loop5: p6 start 9 is beyond EOD, truncated [ 1600.811688][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > 11:49:24 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffffcc360000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:24 executing program 4 (fault-call:0 fault-nth:8): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:24 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1fd, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 11:49:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file#'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) r1 = gettid() tkill(r1, 0x34) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1600.816947][T32589] loop5: partition table partially beyond EOD, truncated [ 1600.824742][T32589] loop5: p1 start 14027 is beyond EOD, truncated [ 1600.831143][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1600.863765][T25772] FAULT_INJECTION: forcing a failure. [ 1600.863765][T25772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1600.876962][T25772] CPU: 0 PID: 25772 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1600.887366][T25772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1600.897425][T25772] Call Trace: [ 1600.900730][T25772] dump_stack+0x137/0x19d [ 1600.905071][T25772] should_fail+0x23c/0x250 [ 1600.909564][T25772] should_fail_usercopy+0x16/0x20 [ 1600.914592][T25772] iov_iter_copy_from_user_atomic+0x281/0xb60 [ 1600.920956][T25772] ? shmem_write_begin+0x7e/0x100 [ 1600.925992][T25772] generic_perform_write+0x1e4/0x3a0 [ 1600.931286][T25772] ? file_update_time+0x1bd/0x3e0 [ 1600.936402][T25772] __generic_file_write_iter+0x161/0x300 [ 1600.942051][T25772] ? generic_write_checks+0x250/0x290 [ 1600.947676][T25772] generic_file_write_iter+0x75/0x130 [ 1600.953126][T25772] vfs_write+0x69d/0x770 [ 1600.957480][T25772] __x64_sys_pwrite64+0xf5/0x150 11:49:24 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x226, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:24 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x227, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:24 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x300, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1600.963059][T25772] do_syscall_64+0x4a/0x90 [ 1600.967487][T25772] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1600.974006][T25772] RIP: 0033:0x419777 [ 1600.978797][T25772] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1600.993752][T32589] loop5: p3 start 9 is beyond EOD, [ 1600.998958][T25772] RSP: 002b:00007f6f1c761e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1600.998979][T25772] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000419777 [ 1601.004570][T32589] truncated [ 1601.004579][T32589] loop5: p4 size 2 extends beyond EOD, [ 1601.013081][T25772] RDX: 0000000000000040 RSI: 0000000020000200 RDI: 0000000000000004 [ 1601.013120][T25772] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1601.021191][T32589] truncated [ 1601.024278][T25772] R10: 00000000000001c0 R11: 0000000000000293 R12: 0000000000000004 11:49:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x8000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file$'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1601.057033][T25772] R13: 0000000000000004 R14: 00000000200001c0 R15: 0000000000000000 [ 1601.058391][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:25 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x500, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1601.104873][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1601.169182][T25772] loop4: detected capacity change from 0 to 1 [ 1601.184327][T25823] loop5: detected capacity change from 0 to 1 [ 1601.218516][T25772] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1601.223736][T25772] loop4: partition table partially beyond EOD, truncated [ 1601.231306][T25823] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1601.236605][T25823] loop5: partition table partially beyond EOD, truncated [ 1601.240861][T25772] loop4: p1 start 10 is beyond EOD, truncated [ 1601.244419][T25823] loop5: p1 start 14028 is beyond EOD, [ 1601.249740][T25772] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1601.250929][T25772] loop4: p3 start 9 is beyond EOD, [ 1601.255346][T25823] truncated [ 1601.255352][T25823] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1601.256451][T25823] loop5: p3 start 9 is beyond EOD, [ 1601.262424][T25772] truncated [ 1601.262430][T25772] loop4: p4 size 2 extends beyond EOD, [ 1601.267617][T25823] truncated [ 1601.267622][T25823] loop5: p4 size 2 extends beyond EOD, [ 1601.270724][T25772] truncated [ 1601.273533][T25772] loop4: p5 size 100663296 extends beyond EOD, [ 1601.277732][T25823] truncated [ 1601.278690][T25823] loop5: p5 size 100663296 extends beyond EOD, [ 1601.282975][T25772] truncated [ 1601.286076][T25823] truncated [ 1601.286682][T25823] loop5: p6 start 9 is beyond EOD, [ 1601.293334][T25772] loop4: p6 start 9 is beyond EOD, [ 1601.294801][T25823] truncated [ 1601.304340][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1601.309718][T25772] truncated [ 1601.350921][T32589] loop5: partition table partially beyond EOD, truncated [ 1601.358112][T32589] loop5: p1 start 14028 is beyond EOD, truncated [ 1601.364929][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1601.373164][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1601.379455][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1601.386348][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1601.394358][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1601.429929][T25823] loop5: detected capacity change from 0 to 1 [ 1601.477309][T25823] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1601.482569][T25823] loop5: partition table partially beyond EOD, truncated [ 1601.489781][T25823] loop5: p1 start 14028 is beyond EOD, truncated [ 1601.496435][T25823] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1601.504944][T25823] loop5: p3 start 9 is beyond EOD, truncated [ 1601.511332][T25823] loop5: p4 size 2 extends beyond EOD, truncated [ 1601.518580][T25823] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:25 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff11480000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file&'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 11:49:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYRES64], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:25 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x600, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:25 executing program 4 (fault-call:0 fault-nth:9): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1601.526131][T25823] loop5: p6 start 9 is beyond EOD, truncated [ 1601.567535][T25866] FAULT_INJECTION: forcing a failure. [ 1601.567535][T25866] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.580562][T25866] CPU: 1 PID: 25866 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1601.590905][T25866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1601.603483][T25866] Call Trace: [ 1601.607027][T25866] dump_stack+0x137/0x19d [ 1601.611364][T25866] should_fail+0x23c/0x250 [ 1601.615802][T25866] ? getname_flags+0x84/0x3d0 [ 1601.620492][T25866] __should_failslab+0x81/0x90 [ 1601.626086][T25866] should_failslab+0x5/0x20 [ 1601.630888][T25866] kmem_cache_alloc+0x46/0x2f0 [ 1601.635935][T25866] getname_flags+0x84/0x3d0 [ 1601.640748][T25866] ? vfs_write+0x50c/0x770 [ 1601.645171][T25866] getname+0x15/0x20 [ 1601.649075][T25866] do_sys_openat2+0x5b/0x250 [ 1601.653776][T25866] __x64_sys_openat+0xef/0x110 [ 1601.658551][T25866] do_syscall_64+0x4a/0x90 [ 1601.665503][T25866] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1601.671540][T25866] RIP: 0033:0x4196c4 [ 1601.675452][T25866] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1601.696294][T25866] RSP: 002b:00007f6f1c761e20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1601.704742][T25866] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 11:49:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file('], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:25 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x700, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000005580)=[{0x0, 0x0, 0x0}], 0x1, 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) 11:49:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file*'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:25 executing program 4 (fault-call:0 fault-nth:10): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:25 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x900, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1601.712973][T25866] RDX: 0000000000000002 RSI: 00007f6f1c761f40 RDI: 00000000ffffff9c [ 1601.721368][T25866] RBP: 00007f6f1c761f40 R08: 0000000000000000 R09: 0000000000000000 [ 1601.729526][T25866] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1601.737522][T25866] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 [ 1601.860342][T25912] FAULT_INJECTION: forcing a failure. [ 1601.860342][T25912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1601.873436][T25912] CPU: 1 PID: 25912 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1601.883668][T25912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1601.893727][T25912] Call Trace: [ 1601.897026][T25912] dump_stack+0x137/0x19d [ 1601.901455][T25912] should_fail+0x23c/0x250 [ 1601.905909][T25912] should_fail_usercopy+0x16/0x20 [ 1601.910960][T25912] strncpy_from_user+0x21/0x250 [ 1601.915833][T25912] getname_flags+0xb8/0x3d0 [ 1601.920349][T25912] ? vfs_write+0x50c/0x770 [ 1601.924773][T25912] getname+0x15/0x20 [ 1601.928679][T25912] do_sys_openat2+0x5b/0x250 [ 1601.933321][T25912] __x64_sys_openat+0xef/0x110 [ 1601.938113][T25912] do_syscall_64+0x4a/0x90 [ 1601.942593][T25912] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1601.948552][T25912] RIP: 0033:0x4196c4 [ 1601.952452][T25912] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1601.972068][T25912] RSP: 002b:00007f6f1c761e20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1601.980675][T25912] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 1601.988731][T25912] RDX: 0000000000000002 RSI: 00007f6f1c761f40 RDI: 00000000ffffff9c [ 1601.996854][T25912] RBP: 00007f6f1c761f40 R08: 0000000000000000 R09: 0000000000000000 [ 1602.005812][T25912] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1602.010239][T25911] loop5: detected capacity change from 0 to 1 [ 1602.013899][T25912] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 [ 1602.088730][T25911] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1602.093953][T25911] loop5: partition table partially beyond EOD, truncated [ 1602.105195][T25911] loop5: p1 start 18449 is beyond EOD, truncated [ 1602.111758][T25911] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1602.119191][T25911] loop5: p3 start 9 is beyond EOD, truncated [ 1602.125357][T25911] loop5: p4 size 2 extends beyond EOD, truncated [ 1602.132192][T25911] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1602.140058][T25911] loop5: p6 start 9 is beyond EOD, truncated [ 1602.206658][T25911] loop5: detected capacity change from 0 to 1 [ 1602.259020][T25911] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1602.264451][T25911] loop5: partition table partially beyond EOD, truncated [ 1602.271801][T25911] loop5: p1 start 18449 is beyond EOD, truncated [ 1602.278471][T25911] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1602.286067][T25911] loop5: p3 start 9 is beyond EOD, truncated [ 1602.292092][T25911] loop5: p4 size 2 extends beyond EOD, truncated [ 1602.299062][T25911] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:26 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffffd64b0900ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file+'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x60002, 0x8) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="a800000000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a3000000000080006400000000179f1ecb37f80b3ad79b9782889a35e44ae4cc87e1d309cd3c341f2ec789c73364014c93ff67096ff538e471ad6849943766953d6b351a030adea2e40f94a07bd85673b2673a14e2c139b71fc3b486c5124decbe2218f4b66fc5ae04cd1c8c279a1c7d20f1915eae0b44b31027fb82dd7f1a0302cda62a17179e275a968cbaa936d8d17ad518a5e6d91d96df282564a49d08373e5a8a01933700b8cd5e46a139725cc16b76b77a5f6c9ec458fdaf595a62e831acb9664d70a62090502f8369d6cdc9217f9290512ec60914c6eeb3c1fba55434090ccaa7c5e82357632520a7d6fad5a7d48260d5accf9973b9ceb4d5c0d94bddcf4d389e406acb51675d56da1a723b26d59121098418f17b7c310da8a0116e12336b406ac6faa941652d151ccb50601483e51cbbe45b0018de8a577252cd7335f8bb26f9194f488f241fc817d504a360894416f83de81721751cefcefdd1ccd458327c99a11c9bfac1dad7c405484f361acb2cf06cd9105f2c98b481ad255ea47d15e4fca7bfdb37811c88ff1820aa0ba34a20eac"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@other={'lock', ' ', 'mem'}, 0x9) 11:49:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000005580)=[{0x0, 0x0, 0x0}], 0x1, 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) 11:49:26 executing program 4 (fault-call:0 fault-nth:11): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:26 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xa00, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1602.306987][T25911] loop5: p6 start 9 is beyond EOD, truncated 11:49:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file,'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1602.354791][T25950] FAULT_INJECTION: forcing a failure. [ 1602.354791][T25950] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.367555][T25950] CPU: 1 PID: 25950 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1602.377717][T25950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1602.387780][T25950] Call Trace: [ 1602.391124][T25950] dump_stack+0x137/0x19d [ 1602.395463][T25950] should_fail+0x23c/0x250 [ 1602.399884][T25950] ? __alloc_file+0x2e/0x1a0 11:49:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file-'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file.'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1602.404919][T25950] __should_failslab+0x81/0x90 [ 1602.409692][T25950] should_failslab+0x5/0x20 [ 1602.414202][T25950] kmem_cache_alloc+0x46/0x2f0 [ 1602.419047][T25950] __alloc_file+0x2e/0x1a0 [ 1602.423478][T25950] alloc_empty_file+0xcd/0x1c0 [ 1602.428340][T25950] path_openat+0x6a/0x20b0 [ 1602.432778][T25950] ? iov_iter_advance+0x291/0xe10 [ 1602.437896][T25950] ? shmem_write_end+0x37d/0x3d0 [ 1602.443273][T25950] ? balance_dirty_pages_ratelimited+0xb1/0x280 [ 1602.449653][T25950] ? generic_perform_write+0x332/0x3a0 11:49:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file/'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1602.455183][T25950] do_filp_open+0xd9/0x1f0 [ 1602.459605][T25950] ? __virt_addr_valid+0x15a/0x1a0 [ 1602.464747][T25950] ? __check_object_size+0x253/0x310 [ 1602.470073][T25950] ? _find_next_bit+0x16a/0x190 [ 1602.474939][T25950] ? alloc_fd+0x388/0x3e0 [ 1602.479319][T25950] do_sys_openat2+0xa3/0x250 [ 1602.483937][T25950] __x64_sys_openat+0xef/0x110 [ 1602.488944][T25950] do_syscall_64+0x4a/0x90 [ 1602.493466][T25950] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1602.499484][T25950] RIP: 0033:0x4196c4 11:49:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file1'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file2'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1602.503398][T25950] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1602.523091][T25950] RSP: 002b:00007f6f1c761e20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1602.531514][T25950] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 1602.539657][T25950] RDX: 0000000000000002 RSI: 00007f6f1c761f40 RDI: 00000000ffffff9c [ 1602.547633][T25950] RBP: 00007f6f1c761f40 R08: 0000000000000000 R09: 0000000000000000 [ 1602.556038][T25950] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1602.564014][T25950] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 [ 1602.645420][T26004] loop5: detected capacity change from 0 to 1 [ 1602.691122][T26004] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1602.696402][T26004] loop5: partition table partially beyond EOD, truncated [ 1602.703799][T26004] loop5: p1 start 609238 is beyond EOD, truncated [ 1602.710391][T26004] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1602.717742][T26004] loop5: p3 start 9 is beyond EOD, truncated [ 1602.723832][T26004] loop5: p4 size 2 extends beyond EOD, truncated [ 1602.730453][T26004] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1602.737815][T26004] loop5: p6 start 9 is beyond EOD, truncated [ 1602.808437][T26004] loop5: detected capacity change from 0 to 1 [ 1602.858868][T26004] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1602.864542][T26004] loop5: partition table partially beyond EOD, truncated [ 1602.872244][T26004] loop5: p1 start 609238 is beyond EOD, truncated [ 1602.878970][T26004] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1602.886261][T26004] loop5: p3 start 9 is beyond EOD, truncated [ 1602.892524][T26004] loop5: p4 size 2 extends beyond EOD, truncated [ 1602.899518][T26004] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1602.907181][T26004] loop5: p6 start 9 is beyond EOD, truncated 11:49:26 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff62600900ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:26 executing program 4 (fault-call:0 fault-nth:12): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file4'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:26 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xb00, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000005580)=[{0x0, 0x0, 0x0}], 0x1, 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) 11:49:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xffffffffffffff04, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x202000, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=@unlock_all, 0xb) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1602.949743][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1602.955174][T32589] loop5: partition table partially beyond EOD, truncated [ 1602.965447][T32589] loop5: p1 start 609238 is beyond EOD, truncated [ 1602.971941][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1603.004450][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1603.010898][T26039] FAULT_INJECTION: forcing a failure. [ 1603.010898][T26039] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.010983][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1603.023748][T26039] CPU: 1 PID: 26039 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1603.040430][T26039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 11:49:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000005580)=[{0x0, 0x0, 0x0}], 0x1, 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) 11:49:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file6'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1603.050350][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1603.050491][T26039] Call Trace: [ 1603.050500][T26039] dump_stack+0x137/0x19d [ 1603.065109][T26039] should_fail+0x23c/0x250 [ 1603.069529][T26039] ? security_file_alloc+0x30/0x190 [ 1603.071397][T32589] loop5: p6 start 9 is beyond EOD, [ 1603.074828][T26039] __should_failslab+0x81/0x90 [ 1603.074842][T32589] truncated [ 1603.074856][T26039] should_failslab+0x5/0x20 [ 1603.092466][T26039] kmem_cache_alloc+0x46/0x2f0 [ 1603.097306][T26039] ? __alloc_file+0x2e/0x1a0 11:49:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file8'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000005580)=[{0x0, 0x0, 0x0}], 0x1, 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) [ 1603.101988][T26039] security_file_alloc+0x30/0x190 [ 1603.107132][T26039] __alloc_file+0x83/0x1a0 [ 1603.111608][T26039] alloc_empty_file+0xcd/0x1c0 [ 1603.116378][T26039] path_openat+0x6a/0x20b0 [ 1603.120802][T26039] ? iov_iter_advance+0x291/0xe10 [ 1603.125827][T26039] ? shmem_write_end+0x37d/0x3d0 [ 1603.131055][T26039] ? balance_dirty_pages_ratelimited+0xb1/0x280 [ 1603.137544][T26039] ? generic_perform_write+0x332/0x3a0 [ 1603.143383][T26039] do_filp_open+0xd9/0x1f0 [ 1603.147812][T26039] ? __virt_addr_valid+0x15a/0x1a0 11:49:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005580)=[{0x0, 0x0, 0x0}], 0x1, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r1) [ 1603.152939][T26039] ? __check_object_size+0x253/0x310 [ 1603.158282][T26039] ? _find_next_bit+0x16a/0x190 [ 1603.163144][T26039] ? alloc_fd+0x388/0x3e0 [ 1603.167570][T26039] do_sys_openat2+0xa3/0x250 [ 1603.172278][T26039] __x64_sys_openat+0xef/0x110 [ 1603.177134][T26039] do_syscall_64+0x4a/0x90 [ 1603.181587][T26039] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1603.187512][T26039] RIP: 0033:0x4196c4 [ 1603.191404][T26039] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1603.211187][T26039] RSP: 002b:00007f6f1c761e20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1603.219698][T26039] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 1603.227668][T26039] RDX: 0000000000000002 RSI: 00007f6f1c761f40 RDI: 00000000ffffff9c [ 1603.235770][T26039] RBP: 00007f6f1c761f40 R08: 0000000000000000 R09: 0000000000000000 [ 1603.243832][T26039] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1603.251809][T26039] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 [ 1603.355240][T26080] loop5: detected capacity change from 0 to 1 [ 1603.412181][T26080] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1603.417405][T26080] loop5: partition table partially beyond EOD, truncated [ 1603.424640][T26080] loop5: p1 start 614498 is beyond EOD, truncated [ 1603.431096][T26080] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1603.438512][T26080] loop5: p3 start 9 is beyond EOD, truncated [ 1603.444554][T26080] loop5: p4 size 2 extends beyond EOD, truncated [ 1603.451290][T26080] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1603.458772][T26080] loop5: p6 start 9 is beyond EOD, truncated [ 1603.510310][T26080] loop5: detected capacity change from 0 to 1 [ 1603.529152][T26080] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1603.534543][T26080] loop5: partition table partially beyond EOD, truncated [ 1603.541977][T26080] loop5: p1 start 614498 is beyond EOD, truncated [ 1603.548407][T26080] loop5: p2 size 100663296 extends beyond EOD, truncated 11:49:27 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff577d0900ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c00028005000100880000a4cffee42d0006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001d4a30fa478023312985e5eaddfec9b99f2ed2cbdbe5b6c87a4cc16832f95ea53bb5efb35dc8e85064712845b34106e67c755"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005580)=[{0x0, 0x0, 0x0}], 0x1, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r1) 11:49:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file:'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:27 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xc00, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:27 executing program 4 (fault-call:0 fault-nth:13): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file<'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1603.556380][T26080] loop5: p3 start 9 is beyond EOD, truncated [ 1603.562445][T26080] loop5: p4 size 2 extends beyond EOD, truncated [ 1603.569231][T26080] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1603.576709][T26080] loop5: p6 start 9 is beyond EOD, truncated 11:49:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file>'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005580)=[{0x0, 0x0, 0x0}], 0x1, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, 0x0, 0x0) [ 1603.631530][T26112] FAULT_INJECTION: forcing a failure. [ 1603.631530][T26112] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.644616][T26112] CPU: 1 PID: 26112 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1603.654772][T26112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1603.664828][T26112] Call Trace: [ 1603.668106][T26112] dump_stack+0x137/0x19d [ 1603.672515][T26112] should_fail+0x23c/0x250 11:49:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005580)=[{0x0, 0x0, 0x0}], 0x1, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') [ 1603.677017][T26112] ? loop_set_status_from_info+0x3a0/0x3a0 [ 1603.682829][T26112] __should_failslab+0x81/0x90 [ 1603.687678][T26112] ? __kthread_create_on_node+0x7a/0x290 [ 1603.693314][T26112] should_failslab+0x5/0x20 [ 1603.697809][T26112] kmem_cache_alloc_trace+0x49/0x310 [ 1603.703117][T26112] ? loop_set_status_from_info+0x3a0/0x3a0 [ 1603.709027][T26112] __kthread_create_on_node+0x7a/0x290 [ 1603.714675][T26112] ? kcsan_setup_watchpoint+0x26e/0x470 [ 1603.720233][T26112] ? loop_set_status_from_info+0x3a0/0x3a0 [ 1603.726051][T26112] kthread_create_on_node+0x72/0xa0 11:49:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fileB'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005580)=[{0x0, 0x0, 0x0}], 0x1, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) [ 1603.731333][T26112] loop_configure+0x597/0xcb0 [ 1603.736018][T26112] ? mntput+0x45/0x70 [ 1603.740002][T26112] lo_ioctl+0x555/0x11f0 [ 1603.744436][T26112] ? path_openat+0x19ab/0x20b0 [ 1603.749201][T26112] ? putname+0xa5/0xc0 [ 1603.753387][T26112] ? ___cache_free+0x3c/0x300 [ 1603.758098][T26112] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1603.763555][T26112] ? selinux_file_ioctl+0x8e0/0x970 [ 1603.768945][T26112] ? lo_release+0x120/0x120 [ 1603.773459][T26112] blkdev_ioctl+0x1d0/0x3c0 [ 1603.778051][T26112] block_ioctl+0x6d/0x80 [ 1603.782338][T26112] ? blkdev_iopoll+0x70/0x70 [ 1603.786926][T26112] __se_sys_ioctl+0xcb/0x140 [ 1603.791522][T26112] __x64_sys_ioctl+0x3f/0x50 [ 1603.796229][T26112] do_syscall_64+0x4a/0x90 [ 1603.800648][T26112] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1603.806548][T26112] RIP: 0033:0x466397 [ 1603.810474][T26112] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1603.830129][T26112] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1603.838620][T26112] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 1603.846781][T26112] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1603.854733][T26112] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1603.862704][T26112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1603.872421][T26112] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 [ 1603.977617][T26152] loop5: detected capacity change from 0 to 1 [ 1604.019110][T26152] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1604.024414][T26152] loop5: partition table partially beyond EOD, truncated [ 1604.031921][T26152] loop5: p1 start 621911 is beyond EOD, truncated [ 1604.038394][T26152] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1604.045913][T26152] loop5: p3 start 9 is beyond EOD, truncated [ 1604.051937][T26152] loop5: p4 size 2 extends beyond EOD, truncated [ 1604.059097][T26152] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1604.066824][T26152] loop5: p6 start 9 is beyond EOD, truncated [ 1604.117980][T26152] loop5: detected capacity change from 0 to 1 [ 1604.139156][T26152] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1604.144411][T26152] loop5: partition table partially beyond EOD, truncated [ 1604.151624][T26152] loop5: p1 start 621911 is beyond EOD, truncated [ 1604.158064][T26152] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1604.166141][T26152] loop5: p3 start 9 is beyond EOD, truncated [ 1604.172190][T26152] loop5: p4 size 2 extends beyond EOD, truncated [ 1604.179882][T26152] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1604.187655][T26152] loop5: p6 start 9 is beyond EOD, truncated [ 1604.219336][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1604.224558][T32589] loop5: partition table partially beyond EOD, truncated [ 1604.232911][T32589] loop5: p1 start 621911 is beyond EOD, truncated [ 1604.239390][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1604.247603][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1604.253640][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1604.261304][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:28 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff4e950900ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005580)=[{0x0, 0x0, 0x0}], 0x1, 0x1) 11:49:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fileD'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:28 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xd00, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:28 executing program 4 (fault-call:0 fault-nth:14): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1604.269505][T32589] loop5: p6 start 9 is beyond EOD, truncated 11:49:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fileF'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1604.345916][T26185] FAULT_INJECTION: forcing a failure. [ 1604.345916][T26185] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.358574][T26185] CPU: 1 PID: 26185 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1604.368766][T26185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1604.378890][T26185] Call Trace: [ 1604.382286][T26185] dump_stack+0x137/0x19d [ 1604.386707][T26185] should_fail+0x23c/0x250 [ 1604.391129][T26185] ? __kernfs_new_node+0x6a/0x330 [ 1604.396195][T26185] __should_failslab+0x81/0x90 [ 1604.400991][T26185] should_failslab+0x5/0x20 [ 1604.405496][T26185] kmem_cache_alloc+0x46/0x2f0 [ 1604.410265][T26185] ? kvm_sched_clock_read+0xd/0x20 [ 1604.415381][T26185] __kernfs_new_node+0x6a/0x330 [ 1604.420259][T26185] ? select_task_rq_fair+0x186/0xc00 [ 1604.425640][T26185] ? rb_insert_color+0x7e/0x310 [ 1604.430559][T26185] kernfs_create_dir_ns+0x5e/0x140 [ 1604.435722][T26185] internal_create_group+0x138/0x850 [ 1604.441177][T26185] ? check_preempt_wakeup+0x22f/0x360 [ 1604.446557][T26185] sysfs_create_group+0x1b/0x20 [ 1604.451496][T26185] loop_configure+0xa21/0xcb0 [ 1604.456174][T26185] lo_ioctl+0x555/0x11f0 [ 1604.460415][T26185] ? path_openat+0x19ab/0x20b0 [ 1604.465188][T26185] ? putname+0xa5/0xc0 [ 1604.469331][T26185] ? ___cache_free+0x3c/0x300 [ 1604.474129][T26185] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1604.479611][T26185] ? selinux_file_ioctl+0x8e0/0x970 [ 1604.484821][T26185] ? lo_release+0x120/0x120 [ 1604.489370][T26185] blkdev_ioctl+0x1d0/0x3c0 [ 1604.493894][T26185] block_ioctl+0x6d/0x80 [ 1604.498150][T26185] ? blkdev_iopoll+0x70/0x70 [ 1604.502746][T26185] __se_sys_ioctl+0xcb/0x140 [ 1604.507428][T26185] __x64_sys_ioctl+0x3f/0x50 [ 1604.512212][T26185] do_syscall_64+0x4a/0x90 [ 1604.516796][T26185] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1604.522711][T26185] RIP: 0033:0x466397 [ 1604.526600][T26185] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1604.546414][T26185] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1604.554920][T26185] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 1604.562983][T26185] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1604.570980][T26185] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1604.579071][T26185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1604.587057][T26185] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 11:49:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005580)=[{0x0, 0x0, 0x0}], 0x1, 0x1) 11:49:28 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xe00, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1604.595075][T26185] loop4: detected capacity change from 0 to 1 11:49:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fileH'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) [ 1604.642461][T26206] loop5: detected capacity change from 0 to 1 11:49:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fileJ'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1604.699257][T26206] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1604.704557][T26206] loop5: partition table partially beyond EOD, truncated [ 1604.709168][T26185] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1604.711757][T26206] loop5: p1 start 628046 is beyond EOD, truncated [ 1604.716873][T26185] loop4: partition table partially beyond EOD, truncated [ 1604.718433][T26185] loop4: p1 start 10 is beyond EOD, [ 1604.723319][T26206] loop5: p2 size 100663296 extends beyond EOD, [ 1604.730350][T26185] truncated 11:49:28 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1020, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1604.730356][T26185] loop4: p2 size 100663296 extends beyond EOD, [ 1604.735613][T26206] truncated [ 1604.736410][T26206] loop5: p3 start 9 is beyond EOD, [ 1604.741900][T26185] truncated [ 1604.762859][T26206] truncated [ 1604.765959][T26206] loop5: p4 size 2 extends beyond EOD, truncated [ 1604.773047][T26206] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1604.789336][T26206] loop5: p6 start 9 is beyond EOD, truncated [ 1604.847748][T26185] loop4: p3 start 9 is beyond EOD, truncated [ 1604.853819][T26185] loop4: p4 size 2 extends beyond EOD, truncated [ 1604.866666][T26185] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1604.886460][T26206] loop5: detected capacity change from 0 to 1 [ 1604.914952][T26185] loop4: p6 start 9 is beyond EOD, truncated [ 1604.933847][T26206] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1604.939106][T26206] loop5: partition table partially beyond EOD, truncated [ 1604.948337][T26206] loop5: p1 start 628046 is beyond EOD, truncated [ 1604.954979][T26206] loop5: p2 size 100663296 extends beyond EOD, truncated 11:49:29 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff81b50900ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fileL'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:29 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1100, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:29 executing program 4 (fault-call:0 fault-nth:15): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1604.980317][T26206] loop5: p3 start 9 is beyond EOD, truncated [ 1604.986523][T26206] loop5: p4 size 2 extends beyond EOD, truncated [ 1604.994102][T26206] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1605.002183][T26206] loop5: p6 start 9 is beyond EOD, truncated 11:49:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fileN'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:29 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1200, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1605.103696][T26266] FAULT_INJECTION: forcing a failure. [ 1605.103696][T26266] name failslab, interval 1, probability 0, space 0, times 0 [ 1605.116438][T26266] CPU: 1 PID: 26266 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1605.126878][T26266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1605.137040][T26266] Call Trace: [ 1605.140327][T26266] dump_stack+0x137/0x19d [ 1605.144666][T26266] should_fail+0x23c/0x250 11:49:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./fileP'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1605.149093][T26266] ? radix_tree_node_alloc+0x154/0x1f0 [ 1605.154564][T26266] __should_failslab+0x81/0x90 [ 1605.160341][T26266] should_failslab+0x5/0x20 [ 1605.165060][T26266] kmem_cache_alloc+0x46/0x2f0 [ 1605.170142][T26266] ? kvm_sched_clock_read+0xd/0x20 [ 1605.175528][T26266] ? sched_clock_cpu+0x11/0x180 [ 1605.180476][T26266] radix_tree_node_alloc+0x154/0x1f0 [ 1605.186474][T26266] idr_get_free+0x22a/0x5d0 [ 1605.191097][T26266] idr_alloc_cyclic+0xe3/0x2d0 [ 1605.196044][T26266] ? __radix_tree_preload+0x16f/0x190 11:49:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) unshare(0x8000400) 11:49:29 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1feb, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1605.201591][T26266] __kernfs_new_node+0xb4/0x330 [ 1605.206882][T26266] ? select_task_rq_fair+0x186/0xc00 [ 1605.212451][T26266] ? rb_insert_color+0x7e/0x310 [ 1605.217387][T26266] kernfs_create_dir_ns+0x5e/0x140 [ 1605.222678][T26266] internal_create_group+0x138/0x850 [ 1605.228072][T26266] ? check_preempt_wakeup+0x1bb/0x360 [ 1605.233721][T26266] sysfs_create_group+0x1b/0x20 [ 1605.238879][T26266] loop_configure+0xa21/0xcb0 [ 1605.244221][T26266] lo_ioctl+0x555/0x11f0 [ 1605.248788][T26266] ? path_openat+0x19ab/0x20b0 [ 1605.253778][T26266] ? putname+0xa5/0xc0 [ 1605.257964][T26266] ? ___cache_free+0x3c/0x300 [ 1605.262847][T26266] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1605.268436][T26266] ? selinux_file_ioctl+0x8e0/0x970 [ 1605.273782][T26266] ? lo_release+0x120/0x120 [ 1605.278386][T26266] blkdev_ioctl+0x1d0/0x3c0 [ 1605.283242][T26266] block_ioctl+0x6d/0x80 [ 1605.287502][T26266] ? blkdev_iopoll+0x70/0x70 [ 1605.292105][T26266] __se_sys_ioctl+0xcb/0x140 [ 1605.296756][T26266] __x64_sys_ioctl+0x3f/0x50 [ 1605.301372][T26266] do_syscall_64+0x4a/0x90 [ 1605.305995][T26266] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1605.312081][T26266] RIP: 0033:0x466397 [ 1605.316198][T26266] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1605.335901][T26266] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1605.344321][T26266] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 11:49:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80000000009050000000000000000000700000001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000300021700000c000080050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006003a0000000900010073797a3000000000080006400000000100"/162], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000030}, 0x4040) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1605.352316][T26266] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1605.360305][T26266] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1605.368314][T26266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1605.376486][T26266] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 [ 1605.415474][T26266] loop4: detected capacity change from 0 to 1 [ 1605.432718][T26279] loop5: detected capacity change from 0 to 1 [ 1605.459489][T26266] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1605.464945][T26266] loop4: partition table partially beyond EOD, truncated [ 1605.472721][T26266] loop4: p1 start 10 is beyond EOD, truncated [ 1605.478910][T26266] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1605.487478][T26266] loop4: p3 start 9 is beyond EOD, truncated [ 1605.487896][T26279] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1605.493816][T26266] loop4: p4 size 2 extends beyond EOD, truncated [ 1605.499176][T26279] loop5: partition table partially beyond EOD, truncated [ 1605.505885][T26266] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1605.522009][T26266] loop4: p6 start 9 is beyond EOD, truncated [ 1605.541951][T26279] loop5: p1 start 636289 is beyond EOD, truncated [ 1605.548415][T26279] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1605.556301][T26279] loop5: p3 start 9 is beyond EOD, truncated [ 1605.562369][T26279] loop5: p4 size 2 extends beyond EOD, truncated [ 1605.569541][T26279] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1605.577513][T26279] loop5: p6 start 9 is beyond EOD, truncated [ 1605.650018][T26279] loop5: detected capacity change from 0 to 1 [ 1605.699547][T26279] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1605.704770][T26279] loop5: partition table partially beyond EOD, truncated [ 1605.711942][T26279] loop5: p1 start 636289 is beyond EOD, truncated [ 1605.718367][T26279] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1605.725936][T26279] loop5: p3 start 9 is beyond EOD, truncated [ 1605.731949][T26279] loop5: p4 size 2 extends beyond EOD, truncated [ 1605.738576][T26279] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1605.746144][T26279] loop5: p6 start 9 is beyond EOD, truncated [ 1605.754841][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1605.760257][T32589] loop5: partition table partially beyond EOD, truncated [ 1605.768036][T32589] loop5: p1 start 636289 is beyond EOD, truncated [ 1605.776455][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1605.783810][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1605.790427][T32589] loop5: p4 size 2 extends beyond EOD, truncated 11:49:29 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff62cd0900ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66696c65fe"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) unshare(0x8000400) 11:49:29 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100000000000010000000005c091473a57c3d8bc938da0000001100010000000000000000000000000adaacf925e73c85cd2eee3fe07a1063417ee676cd9a8aec9e3bd023e7074d8a42"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) sendto$inet6(r6, &(0x7f00000002c0)="aa9b44be4cec634553733098d65be0a146fbb13047d8df26804f00748ce6d1b11726403ed01fce08cb042f270959f52726c4f29c690ce6f25de7151ac71b8e9a82deca7d9ab1e2d5f51281ec4ab4d97ba160ba71bd12cb6e34ff65b98cba30aaed501699b2f770c988addb71de8600cd83f3e060a0863bec2a74", 0x7a, 0x20008044, &(0x7f00000001c0)={0xa, 0x4e21, 0x1000, @private1, 0x401}, 0x1c) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:29 executing program 4 (fault-call:0 fault-nth:16): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1605.797036][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1605.805063][T32589] loop5: p6 start 9 is beyond EOD, truncated 11:49:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) unshare(0x8000400) 11:49:29 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2010, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000180)) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1605.864877][T26351] FAULT_INJECTION: forcing a failure. [ 1605.864877][T26351] name failslab, interval 1, probability 0, space 0, times 0 [ 1605.877741][T26351] CPU: 0 PID: 26351 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1605.888214][T26351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1605.898270][T26351] Call Trace: [ 1605.901561][T26351] dump_stack+0x137/0x19d [ 1605.905896][T26351] should_fail+0x23c/0x250 11:49:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1605.910335][T26351] ? __kernfs_new_node+0x6a/0x330 [ 1605.915434][T26351] __should_failslab+0x81/0x90 [ 1605.920195][T26351] should_failslab+0x5/0x20 [ 1605.924835][T26351] kmem_cache_alloc+0x46/0x2f0 [ 1605.929601][T26351] __kernfs_new_node+0x6a/0x330 [ 1605.934543][T26351] ? __cond_resched+0x11/0x40 [ 1605.939226][T26351] ? mutex_lock+0x9/0x30 [ 1605.943467][T26351] kernfs_new_node+0x5b/0xd0 [ 1605.948104][T26351] __kernfs_create_file+0x45/0x1a0 [ 1605.953219][T26351] sysfs_add_file_mode_ns+0x1c1/0x250 [ 1605.958700][T26351] internal_create_group+0x2e4/0x850 11:49:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66696c6506"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1605.964012][T26351] sysfs_create_group+0x1b/0x20 [ 1605.968889][T26351] loop_configure+0xa21/0xcb0 [ 1605.973720][T26351] lo_ioctl+0x555/0x11f0 [ 1605.977964][T26351] ? path_openat+0x19ab/0x20b0 [ 1605.982773][T26351] ? putname+0xa5/0xc0 [ 1605.987208][T26351] ? ___cache_free+0x3c/0x300 [ 1605.992010][T26351] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1605.997414][T26351] ? selinux_file_ioctl+0x8e0/0x970 [ 1606.003195][T26351] ? lo_release+0x120/0x120 [ 1606.007698][T26351] blkdev_ioctl+0x1d0/0x3c0 [ 1606.012477][T26351] block_ioctl+0x6d/0x80 [ 1606.019353][T26351] ? blkdev_iopoll+0x70/0x70 [ 1606.024127][T26351] __se_sys_ioctl+0xcb/0x140 [ 1606.028729][T26351] __x64_sys_ioctl+0x3f/0x50 [ 1606.033382][T26351] do_syscall_64+0x4a/0x90 [ 1606.037893][T26351] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1606.043824][T26351] RIP: 0033:0x466397 [ 1606.047740][T26351] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1606.068387][T26351] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1606.076794][T26351] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 1606.085177][T26351] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1606.093135][T26351] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1606.101224][T26351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1606.109302][T26351] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 [ 1606.118204][T26351] loop4: detected capacity change from 0 to 1 [ 1606.157728][T26351] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1606.163194][T26351] loop4: partition table partially beyond EOD, truncated [ 1606.171153][T26351] loop4: p1 start 10 is beyond EOD, truncated [ 1606.177344][T26351] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1606.190161][T26351] loop4: p3 start 9 is beyond EOD, truncated [ 1606.196221][T26351] loop4: p4 size 2 extends beyond EOD, truncated [ 1606.207292][T26351] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1606.215695][T26386] loop5: detected capacity change from 0 to 1 [ 1606.223097][T26351] loop4: p6 start 9 is beyond EOD, truncated [ 1606.290004][T26386] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1606.295425][T26386] loop5: partition table partially beyond EOD, truncated [ 1606.303235][T26386] loop5: p1 start 642402 is beyond EOD, truncated [ 1606.309787][T26386] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1606.317639][T26386] loop5: p3 start 9 is beyond EOD, truncated [ 1606.323860][T26386] loop5: p4 size 2 extends beyond EOD, truncated [ 1606.331205][T26386] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1606.338778][T26386] loop5: p6 start 9 is beyond EOD, truncated [ 1606.408686][T26386] loop5: detected capacity change from 0 to 1 [ 1606.461224][T26386] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1606.466506][T26386] loop5: partition table partially beyond EOD, truncated [ 1606.473933][T26386] loop5: p1 start 642402 is beyond EOD, truncated [ 1606.480392][T26386] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1606.487867][T26386] loop5: p3 start 9 is beyond EOD, truncated [ 1606.493919][T26386] loop5: p4 size 2 extends beyond EOD, truncated [ 1606.500643][T26386] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:30 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff7de90900ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:30 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2200, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66696c6584"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010001000000000000000000f8ffffff0000"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:30 executing program 4 (fault-call:0 fault-nth:17): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1606.508696][T26386] loop5: p6 start 9 is beyond EOD, truncated 11:49:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66696c6585"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1606.568437][T26418] FAULT_INJECTION: forcing a failure. [ 1606.568437][T26418] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.581200][T26418] CPU: 0 PID: 26418 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1606.591521][T26418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1606.601572][T26418] Call Trace: [ 1606.605110][T26418] dump_stack+0x137/0x19d [ 1606.609479][T26418] should_fail+0x23c/0x250 [ 1606.613887][T26418] ? __kernfs_new_node+0x6a/0x330 11:49:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:30 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2500, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66696c6586"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1606.618908][T26418] __should_failslab+0x81/0x90 [ 1606.623672][T26418] should_failslab+0x5/0x20 [ 1606.628181][T26418] kmem_cache_alloc+0x46/0x2f0 [ 1606.632949][T26418] __kernfs_new_node+0x6a/0x330 [ 1606.637804][T26418] ? __cond_resched+0x11/0x40 [ 1606.642482][T26418] ? mutex_lock+0x9/0x30 [ 1606.646878][T26418] kernfs_new_node+0x5b/0xd0 [ 1606.651507][T26418] __kernfs_create_file+0x45/0x1a0 [ 1606.656648][T26418] sysfs_add_file_mode_ns+0x1c1/0x250 [ 1606.662028][T26418] internal_create_group+0x2e4/0x850 11:49:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1606.667329][T26418] sysfs_create_group+0x1b/0x20 [ 1606.672220][T26418] loop_configure+0xa21/0xcb0 [ 1606.676901][T26418] lo_ioctl+0x555/0x11f0 [ 1606.681142][T26418] ? path_openat+0x19ab/0x20b0 [ 1606.685903][T26418] ? putname+0xa5/0xc0 [ 1606.689964][T26418] ? ___cache_free+0x3c/0x300 [ 1606.694648][T26418] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1606.700162][T26418] ? selinux_file_ioctl+0x8e0/0x970 [ 1606.705384][T26418] ? lo_release+0x120/0x120 [ 1606.709881][T26418] blkdev_ioctl+0x1d0/0x3c0 [ 1606.714391][T26418] block_ioctl+0x6d/0x80 [ 1606.718856][T26418] ? blkdev_iopoll+0x70/0x70 [ 1606.723459][T26418] __se_sys_ioctl+0xcb/0x140 [ 1606.728048][T26418] __x64_sys_ioctl+0x3f/0x50 [ 1606.732635][T26418] do_syscall_64+0x4a/0x90 [ 1606.737051][T26418] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1606.742975][T26418] RIP: 0033:0x466397 [ 1606.746859][T26418] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1606.766669][T26418] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1606.775076][T26418] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 1606.783133][T26418] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1606.791194][T26418] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1606.799590][T26418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1606.807584][T26418] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 [ 1606.821514][T26418] loop4: detected capacity change from 0 to 1 [ 1606.858569][T26418] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1606.863896][T26418] loop4: partition table partially beyond EOD, truncated [ 1606.867738][T26459] loop5: detected capacity change from 0 to 1 [ 1606.878486][T26418] loop4: p1 start 10 is beyond EOD, truncated [ 1606.884625][T26418] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1606.892301][T26418] loop4: p3 start 9 is beyond EOD, truncated [ 1606.898316][T26418] loop4: p4 size 2 extends beyond EOD, truncated [ 1606.905139][T26418] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1606.912796][T26418] loop4: p6 start 9 is beyond EOD, truncated [ 1606.933782][T26459] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1606.939019][T26459] loop5: partition table partially beyond EOD, truncated [ 1606.946329][T26459] loop5: p1 start 649597 is beyond EOD, truncated [ 1606.953028][T26459] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1606.962218][T26459] loop5: p3 start 9 is beyond EOD, truncated [ 1606.968221][T26459] loop5: p4 size 2 extends beyond EOD, truncated [ 1606.975207][T26459] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:31 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff34080a00ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:31 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2602, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66696c6587"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473713fe69184e1831b00001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:31 executing program 4 (fault-call:0 fault-nth:18): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1606.983520][T26459] loop5: p6 start 9 is beyond EOD, truncated 11:49:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66696c65b7"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) [ 1607.034205][T26481] FAULT_INJECTION: forcing a failure. [ 1607.034205][T26481] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.047322][T26481] CPU: 0 PID: 26481 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1607.058213][T26481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1607.068273][T26481] Call Trace: [ 1607.071554][T26481] dump_stack+0x137/0x19d [ 1607.075992][T26481] should_fail+0x23c/0x250 11:49:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1607.080438][T26481] ? __kernfs_new_node+0x6a/0x330 [ 1607.085690][T26481] __should_failslab+0x81/0x90 [ 1607.092043][T26481] should_failslab+0x5/0x20 [ 1607.096603][T26481] kmem_cache_alloc+0x46/0x2f0 [ 1607.101435][T26481] __kernfs_new_node+0x6a/0x330 [ 1607.106292][T26481] ? __cond_resched+0x11/0x40 [ 1607.111234][T26481] ? mutex_lock+0x9/0x30 [ 1607.115567][T26481] kernfs_new_node+0x5b/0xd0 [ 1607.120190][T26481] __kernfs_create_file+0x45/0x1a0 [ 1607.125401][T26481] sysfs_add_file_mode_ns+0x1c1/0x250 11:49:31 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2702, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66696c65e5"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f00000002c0)={0x5, 0xdd, 0x80, 0x8a, 0xd6, 0x20, 0x0, 0x1, 0x4200, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000180)}, 0x80a, 0x2, 0x7, 0x4, 0x9, 0x1, 0x1, 0x0, 0x2, 0x0, 0x8000000000000000}, 0x0, 0x4, r6, 0x1) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1607.130797][T26481] internal_create_group+0x2e4/0x850 [ 1607.136115][T26481] sysfs_create_group+0x1b/0x20 [ 1607.140975][T26481] loop_configure+0xa21/0xcb0 [ 1607.145788][T26481] lo_ioctl+0x555/0x11f0 [ 1607.150027][T26481] ? path_openat+0x19ab/0x20b0 [ 1607.154788][T26481] ? putname+0xa5/0xc0 [ 1607.158874][T26481] ? ___cache_free+0x3c/0x300 [ 1607.163726][T26481] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1607.169102][T26481] ? selinux_file_ioctl+0x8e0/0x970 [ 1607.174318][T26481] ? lo_release+0x120/0x120 [ 1607.178818][T26481] blkdev_ioctl+0x1d0/0x3c0 [ 1607.183393][T26481] block_ioctl+0x6d/0x80 [ 1607.187649][T26481] ? blkdev_iopoll+0x70/0x70 [ 1607.192262][T26481] __se_sys_ioctl+0xcb/0x140 [ 1607.196888][T26481] __x64_sys_ioctl+0x3f/0x50 [ 1607.201516][T26481] do_syscall_64+0x4a/0x90 [ 1607.206094][T26481] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1607.211990][T26481] RIP: 0033:0x466397 11:49:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1607.215882][T26481] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1607.235710][T26481] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1607.244123][T26481] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 1607.252221][T26481] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1607.260214][T26481] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1607.268186][T26481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1607.276245][T26481] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 [ 1607.284597][T26481] loop4: detected capacity change from 0 to 1 [ 1607.337249][T26481] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1607.342876][T26481] loop4: partition table partially beyond EOD, truncated [ 1607.350117][T26481] loop4: p1 start 10 is beyond EOD, truncated [ 1607.351901][T26531] loop5: detected capacity change from 0 to 1 [ 1607.356197][T26481] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1607.356894][T26481] loop4: p3 start 9 is beyond EOD, truncated [ 1607.375313][T26481] loop4: p4 size 2 extends beyond EOD, truncated [ 1607.382370][T26481] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1607.389969][T26531] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1607.390792][T26481] loop4: p6 start 9 is beyond EOD, [ 1607.395351][T26531] loop5: partition table partially beyond EOD, truncated [ 1607.395405][T26531] loop5: p1 start 657460 is beyond EOD, [ 1607.400611][T26481] truncated [ 1607.407593][T26531] truncated [ 1607.407598][T26531] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1607.430494][T26531] loop5: p3 start 9 is beyond EOD, truncated [ 1607.436520][T26531] loop5: p4 size 2 extends beyond EOD, truncated [ 1607.443623][T26531] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1607.451150][T26531] loop5: p6 start 9 is beyond EOD, truncated [ 1607.499442][T26531] loop5: detected capacity change from 0 to 1 [ 1607.564392][T26531] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1607.569657][T26531] loop5: partition table partially beyond EOD, truncated [ 1607.577025][T26531] loop5: p1 start 657460 is beyond EOD, truncated [ 1607.583688][T26531] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1607.591025][T26531] loop5: p3 start 9 is beyond EOD, truncated [ 1607.597369][T26531] loop5: p4 size 2 extends beyond EOD, truncated [ 1607.604191][T26531] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1607.611889][T26531] loop5: p6 start 9 is beyond EOD, truncated 11:49:31 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffffffe0f505ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66696c65fe"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:31 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x3f00, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:31 executing program 4 (fault-call:0 fault-nth:19): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1607.660903][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1607.666128][T32589] loop5: partition table partially beyond EOD, truncated [ 1607.679155][T32589] loop5: p1 start 657460 is beyond EOD, truncated [ 1607.685670][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated 11:49:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66696c65fe"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:31 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1607.717408][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1607.723595][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1607.739254][T26575] FAULT_INJECTION: forcing a failure. [ 1607.739254][T26575] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.751924][T26575] CPU: 0 PID: 26575 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 11:49:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1607.762082][T26575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1607.772144][T26575] Call Trace: [ 1607.775508][T26575] dump_stack+0x137/0x19d [ 1607.779872][T26575] should_fail+0x23c/0x250 [ 1607.784288][T26575] ? __kernfs_new_node+0x6a/0x330 [ 1607.789353][T26575] __should_failslab+0x81/0x90 [ 1607.794303][T26575] should_failslab+0x5/0x20 [ 1607.798934][T26575] kmem_cache_alloc+0x46/0x2f0 [ 1607.804009][T26575] __kernfs_new_node+0x6a/0x330 [ 1607.808863][T26575] ? __cond_resched+0x11/0x40 [ 1607.813533][T26575] ? mutex_lock+0x9/0x30 [ 1607.814774][T32589] loop5: p5 size 100663296 extends beyond EOD, [ 1607.817805][T26575] kernfs_new_node+0x5b/0xd0 [ 1607.824076][T32589] truncated [ 1607.828623][T26575] __kernfs_create_file+0x45/0x1a0 [ 1607.836887][T26575] sysfs_add_file_mode_ns+0x1c1/0x250 [ 1607.837999][T32589] loop5: p6 start 9 is beyond EOD, [ 1607.842302][T26575] internal_create_group+0x2e4/0x850 [ 1607.842330][T26575] sysfs_create_group+0x1b/0x20 [ 1607.847567][T32589] truncated [ 1607.860798][T26575] loop_configure+0xa21/0xcb0 [ 1607.865468][T26575] lo_ioctl+0x555/0x11f0 [ 1607.869695][T26575] ? path_openat+0x19ab/0x20b0 [ 1607.874442][T26575] ? putname+0xa5/0xc0 [ 1607.878490][T26575] ? ___cache_free+0x3c/0x300 [ 1607.883151][T26575] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1607.888650][T26575] ? selinux_file_ioctl+0x8e0/0x970 [ 1607.894038][T26575] ? lo_release+0x120/0x120 [ 1607.898587][T26575] blkdev_ioctl+0x1d0/0x3c0 [ 1607.903101][T26575] block_ioctl+0x6d/0x80 [ 1607.907349][T26575] ? blkdev_iopoll+0x70/0x70 [ 1607.911924][T26575] __se_sys_ioctl+0xcb/0x140 [ 1607.916586][T26575] __x64_sys_ioctl+0x3f/0x50 [ 1607.921159][T26575] do_syscall_64+0x4a/0x90 [ 1607.925790][T26575] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1607.931799][T26575] RIP: 0033:0x466397 [ 1607.935674][T26575] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1607.955342][T26575] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:49:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66696c65fe"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x9, 0xff, 0x2, 0x0, 0x0, 0x200, 0x6000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0xd}, 0x14000, 0x4, 0x3, 0x2, 0x2, 0xffffff29, 0x400, 0x0, 0x80, 0x0, 0x2}, 0x0, 0x7, r1, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x181042, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1607.963836][T26575] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 1607.971830][T26575] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1607.979789][T26575] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1607.987764][T26575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1607.996266][T26575] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 [ 1608.040635][T26575] loop4: detected capacity change from 0 to 1 [ 1608.080104][T26575] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1608.085498][T26575] loop4: partition table partially beyond EOD, truncated [ 1608.093576][T26606] loop5: detected capacity change from 0 to 1 [ 1608.102893][T26575] loop4: p1 start 10 is beyond EOD, truncated [ 1608.108995][T26575] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1608.119330][T26575] loop4: p3 start 9 is beyond EOD, truncated [ 1608.125398][T26575] loop4: p4 size 2 extends beyond EOD, truncated [ 1608.132686][T26575] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1608.143364][T26575] loop4: p6 start 9 is beyond EOD, truncated [ 1608.143557][T26606] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1608.154703][T26606] loop5: partition table partially beyond EOD, truncated [ 1608.170744][T26606] loop5: p1 start 99999999 is beyond EOD, truncated [ 1608.177387][T26606] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1608.185176][T26606] loop5: p3 start 9 is beyond EOD, truncated [ 1608.191247][T26606] loop5: p4 size 2 extends beyond EOD, truncated [ 1608.197933][T26606] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1608.205757][T26606] loop5: p6 start 9 is beyond EOD, truncated [ 1608.268542][T26606] loop5: detected capacity change from 0 to 1 [ 1608.300131][T26606] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1608.305404][T26606] loop5: partition table partially beyond EOD, truncated 11:49:32 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff00000006ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66696c65ff"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 11:49:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:32 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xeb1f, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8b1bb166315ead01ae010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7a92d1ab17929992}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xc}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x10040844) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:32 executing program 4 (fault-call:0 fault-nth:20): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1608.313060][T26606] loop5: p1 start 99999999 is beyond EOD, truncated [ 1608.319812][T26606] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1608.329458][T26606] loop5: p3 start 9 is beyond EOD, truncated [ 1608.335488][T26606] loop5: p4 size 2 extends beyond EOD, truncated [ 1608.342170][T26606] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1608.349650][T26606] loop5: p6 start 9 is beyond EOD, truncated 11:49:32 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xedc0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x2, 0x0) 11:49:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x3, 0x0) [ 1608.473809][T26668] FAULT_INJECTION: forcing a failure. [ 1608.473809][T26668] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.486475][T26668] CPU: 1 PID: 26668 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1608.496737][T26668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1608.506800][T26668] Call Trace: [ 1608.510123][T26668] dump_stack+0x137/0x19d [ 1608.514543][T26668] should_fail+0x23c/0x250 [ 1608.518973][T26668] ? __kernfs_new_node+0x6a/0x330 [ 1608.524008][T26668] __should_failslab+0x81/0x90 [ 1608.528882][T26668] should_failslab+0x5/0x20 [ 1608.534711][T26668] kmem_cache_alloc+0x46/0x2f0 [ 1608.539963][T26668] __kernfs_new_node+0x6a/0x330 [ 1608.544909][T26668] ? __cond_resched+0x11/0x40 [ 1608.550054][T26668] ? mutex_lock+0x9/0x30 [ 1608.554313][T26668] kernfs_new_node+0x5b/0xd0 [ 1608.559024][T26668] __kernfs_create_file+0x45/0x1a0 [ 1608.564372][T26668] sysfs_add_file_mode_ns+0x1c1/0x250 [ 1608.569881][T26668] internal_create_group+0x2e4/0x850 [ 1608.575204][T26668] sysfs_create_group+0x1b/0x20 [ 1608.580246][T26668] loop_configure+0xa21/0xcb0 [ 1608.584952][T26668] lo_ioctl+0x555/0x11f0 [ 1608.589524][T26668] ? path_openat+0x19ab/0x20b0 [ 1608.593740][T26693] ISOFS: Unable to identify CD-ROM format. [ 1608.594408][T26668] ? putname+0xa5/0xc0 [ 1608.604521][T26668] ? ___cache_free+0x3c/0x300 [ 1608.609379][T26668] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1608.615330][T26668] ? selinux_file_ioctl+0x8e0/0x970 11:49:32 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xf801, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8000000000905000000000000000000070007000000000000000140000001000800054000000418090001007379c7a5000000000900010073797a30000000005400020006000300000080000600034000170dcc78e2b0640f00000c000280050001008408000062593e805e6e22fe6405010064335f2effffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001f44013f1dcbe1b4b04c3a739fdf791db1c968271252083992a1e8dc6278863510ae8c21921"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)) dup2(0xffffffffffffffff, r0) r2 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = signalfd4(r1, &(0x7f0000000180)={[0x7]}, 0x8, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') ioctl$LOOP_CTL_ADD(r7, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r5) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1608.621158][T26668] ? lo_release+0x120/0x120 [ 1608.625943][T26668] blkdev_ioctl+0x1d0/0x3c0 [ 1608.630473][T26668] block_ioctl+0x6d/0x80 [ 1608.635070][T26668] ? blkdev_iopoll+0x70/0x70 [ 1608.639714][T26695] ISOFS: Unable to identify CD-ROM format. [ 1608.639821][T26668] __se_sys_ioctl+0xcb/0x140 [ 1608.650349][T26668] __x64_sys_ioctl+0x3f/0x50 [ 1608.654950][T26668] do_syscall_64+0x4a/0x90 [ 1608.659370][T26668] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1608.665503][T26668] RIP: 0033:0x466397 [ 1608.670364][T26668] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1608.673922][T26698] loop5: detected capacity change from 0 to 1 [ 1608.690070][T26668] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1608.690094][T26668] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 1608.690108][T26668] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1608.690118][T26668] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1608.690128][T26668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1608.690139][T26668] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 [ 1608.746024][T26668] loop4: detected capacity change from 0 to 1 [ 1608.775441][T26698] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1608.775454][T26668] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1608.780696][T26698] loop5: partition table partially beyond EOD, truncated [ 1608.785871][T26668] loop4: partition table partially beyond EOD, truncated [ 1608.785998][T26668] loop4: p1 start 10 is beyond EOD, truncated [ 1608.803102][T26698] loop5: p1 start 100663296 is beyond EOD, [ 1608.806064][T26668] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1608.806843][T26668] loop4: p3 start 9 is beyond EOD, [ 1608.811990][T26698] truncated [ 1608.811995][T26698] loop5: p2 size 100663296 extends beyond EOD, [ 1608.819169][T26668] truncated [ 1608.819175][T26668] loop4: p4 size 2 extends beyond EOD, [ 1608.824367][T26698] truncated [ 1608.827798][T26698] loop5: p3 start 9 is beyond EOD, [ 1608.833770][T26668] truncated [ 1608.834576][T26668] loop4: p5 size 100663296 extends beyond EOD, [ 1608.836901][T26698] truncated [ 1608.836907][T26698] loop5: p4 size 2 extends beyond EOD, truncated [ 1608.838050][T26698] loop5: p5 size 100663296 extends beyond EOD, [ 1608.842470][T26668] truncated [ 1608.844428][T26668] loop4: p6 start 9 is beyond EOD, [ 1608.845596][T26698] truncated [ 1608.846528][T26698] loop5: p6 start 9 is beyond EOD, [ 1608.850940][T26668] truncated [ 1608.854025][T26698] truncated [ 1608.925359][T26698] loop5: detected capacity change from 0 to 1 [ 1608.962430][T26698] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1608.967888][T26698] loop5: partition table partially beyond EOD, truncated 11:49:33 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a020000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:33 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xf901, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1473a57c3d8bc938da0000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000004000d0800007a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a3000000000080006400000000100000000000000008e00"/162], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x222a83, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000007240)='fdinfo\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 11:49:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x4, 0x0) 11:49:33 executing program 4 (fault-call:0 fault-nth:21): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1608.981110][T26698] loop5: p1 start 100663296 is beyond EOD, truncated [ 1608.987852][T26698] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1608.995740][T26698] loop5: p3 start 9 is beyond EOD, truncated [ 1609.002044][T26698] loop5: p4 size 2 extends beyond EOD, truncated [ 1609.008999][T26698] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1609.016574][T26698] loop5: p6 start 9 is beyond EOD, truncated 11:49:33 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfa01, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x5, 0x0) [ 1609.066297][T26748] loop4: detected capacity change from 0 to 1 [ 1609.073973][T26748] FAULT_INJECTION: forcing a failure. [ 1609.073973][T26748] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.086994][T26748] CPU: 0 PID: 26748 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1609.097530][T26748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1609.108326][T26748] Call Trace: [ 1609.111678][T26748] dump_stack+0x137/0x19d [ 1609.116239][T26748] should_fail+0x23c/0x250 [ 1609.120723][T26748] __should_failslab+0x81/0x90 [ 1609.125579][T26748] ? kobject_uevent_env+0x1a7/0xc40 [ 1609.131361][T26748] should_failslab+0x5/0x20 [ 1609.135875][T26748] kmem_cache_alloc_trace+0x49/0x310 [ 1609.141220][T26748] ? dev_uevent_filter+0x70/0x70 [ 1609.146173][T26748] kobject_uevent_env+0x1a7/0xc40 [ 1609.151302][T26748] kobject_uevent+0x18/0x20 [ 1609.155810][T26748] loop_configure+0xb3c/0xcb0 [ 1609.160524][T26748] lo_ioctl+0x555/0x11f0 11:49:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000000905000000000000000000070000080c000480080001400000010008000540000004180900010073797a31000000000900010073797a300000000054000200060003000000800006000340001700000c000280050001008400000014000180080001006401010008000200ffffffff0c000280050001008800000006000340000400000c000280050001003a0000000900010073797a30000000000800064000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x40010c1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:33 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfb01, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1609.165333][T26748] ? path_openat+0x19ab/0x20b0 [ 1609.170195][T26748] ? putname+0xa5/0xc0 [ 1609.174264][T26748] ? ___cache_free+0x3c/0x300 [ 1609.179041][T26748] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1609.184434][T26748] ? selinux_file_ioctl+0x8e0/0x970 [ 1609.189642][T26748] ? lo_release+0x120/0x120 [ 1609.194169][T26748] blkdev_ioctl+0x1d0/0x3c0 [ 1609.198835][T26748] block_ioctl+0x6d/0x80 [ 1609.203119][T26748] ? blkdev_iopoll+0x70/0x70 [ 1609.207723][T26748] __se_sys_ioctl+0xcb/0x140 [ 1609.212328][T26748] __x64_sys_ioctl+0x3f/0x50 11:49:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1609.217283][T26748] do_syscall_64+0x4a/0x90 [ 1609.221708][T26748] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1609.227738][T26748] RIP: 0033:0x466397 [ 1609.232343][T26748] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1609.252400][T26748] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1609.260983][T26748] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 1609.269168][T26748] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1609.277274][T26748] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1609.285234][T26748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1609.293226][T26748] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 [ 1609.342303][T26748] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1609.347554][T26748] loop4: partition table partially beyond EOD, truncated [ 1609.362887][T26754] ISOFS: Unable to identify CD-ROM format. [ 1609.367987][T26748] loop4: p1 start 10 is beyond EOD, truncated [ 1609.374425][T26764] ISOFS: Unable to identify CD-ROM format. [ 1609.374860][T26748] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1609.383098][T26761] ISOFS: Unable to identify CD-ROM format. [ 1609.388134][T26748] loop4: p3 start 9 is beyond EOD, truncated [ 1609.399470][T26748] loop4: p4 size 2 extends beyond EOD, truncated [ 1609.406656][T26748] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1609.414638][T26748] loop4: p6 start 9 is beyond EOD, truncated [ 1609.417055][T26784] loop5: detected capacity change from 0 to 1 [ 1609.460256][T26784] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1609.465497][T26784] loop5: partition table partially beyond EOD, truncated [ 1609.474990][T26784] loop5: p1 start 522 is beyond EOD, truncated [ 1609.481210][T26784] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1609.496576][T26784] loop5: p3 start 9 is beyond EOD, truncated [ 1609.502958][T26784] loop5: p4 size 2 extends beyond EOD, truncated [ 1609.509890][T26784] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1609.517683][T26784] loop5: p6 start 9 is beyond EOD, truncated [ 1609.577884][T26784] loop5: detected capacity change from 0 to 1 [ 1609.620389][T26784] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1609.625676][T26784] loop5: partition table partially beyond EOD, truncated [ 1609.633150][T26784] loop5: p1 start 522 is beyond EOD, truncated [ 1609.639474][T26784] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1609.647507][T26784] loop5: p3 start 9 is beyond EOD, truncated [ 1609.653654][T26784] loop5: p4 size 2 extends beyond EOD, truncated [ 1609.660755][T26784] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:33 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a030000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:33 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfc01, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:33 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f400000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001010100000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c7, 0x0) chdir(&(0x7f0000000000)='./file0/file0\x00') mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ext4\x00', 0x0, 0x0) 11:49:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x6, 0x0) 11:49:33 executing program 4 (fault-call:0 fault-nth:22): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1609.668641][T26784] loop5: p6 start 9 is beyond EOD, truncated 11:49:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x7, 0x0) 11:49:33 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfd01, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:33 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1609.751826][T26824] ISOFS: Unable to identify CD-ROM format. [ 1609.757799][T26820] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1609.765016][T26819] loop4: detected capacity change from 0 to 1 [ 1609.771418][T26819] FAULT_INJECTION: forcing a failure. [ 1609.771418][T26819] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.784102][T26819] CPU: 0 PID: 26819 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1609.794256][T26819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1609.804338][T26819] Call Trace: [ 1609.807647][T26819] dump_stack+0x137/0x19d [ 1609.812069][T26819] should_fail+0x23c/0x250 [ 1609.816497][T26819] __should_failslab+0x81/0x90 [ 1609.821647][T26819] ? kobject_uevent_env+0x1a7/0xc40 [ 1609.826945][T26819] should_failslab+0x5/0x20 [ 1609.831536][T26819] kmem_cache_alloc_trace+0x49/0x310 [ 1609.836853][T26819] ? dev_uevent_filter+0x70/0x70 [ 1609.841851][T26819] kobject_uevent_env+0x1a7/0xc40 [ 1609.846982][T26819] kobject_uevent+0x18/0x20 11:49:33 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:33 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfeff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1609.851707][T26819] loop_configure+0xb3c/0xcb0 [ 1609.856388][T26819] lo_ioctl+0x555/0x11f0 [ 1609.860633][T26819] ? path_openat+0x19ab/0x20b0 [ 1609.865497][T26819] ? putname+0xa5/0xc0 [ 1609.869606][T26819] ? ___cache_free+0x3c/0x300 [ 1609.874311][T26819] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1609.879763][T26819] ? selinux_file_ioctl+0x8e0/0x970 [ 1609.884960][T26819] ? lo_release+0x120/0x120 [ 1609.889477][T26819] blkdev_ioctl+0x1d0/0x3c0 [ 1609.894032][T26819] block_ioctl+0x6d/0x80 11:49:33 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1609.898324][T26819] ? blkdev_iopoll+0x70/0x70 [ 1609.902908][T26819] __se_sys_ioctl+0xcb/0x140 [ 1609.907505][T26819] __x64_sys_ioctl+0x3f/0x50 [ 1609.912096][T26819] do_syscall_64+0x4a/0x90 [ 1609.916577][T26819] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1609.922490][T26819] RIP: 0033:0x466397 [ 1609.926632][T26819] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1609.946796][T26819] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1609.955210][T26819] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 1609.963348][T26819] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1609.971671][T26819] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1609.979826][T26819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1609.987838][T26819] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 [ 1609.990656][T26844] loop5: detected capacity change from 0 to 1 [ 1610.010526][T26819] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1610.015871][T26819] loop4: partition table partially beyond EOD, truncated [ 1610.026332][T26844] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1610.031591][T26844] loop5: partition table partially beyond EOD, truncated [ 1610.032909][T26840] ISOFS: Unable to identify CD-ROM format. [ 1610.039016][T26819] loop4: p1 start 10 is beyond EOD, truncated [ 1610.050837][T26819] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1610.051825][T26844] loop5: p1 start 778 is beyond EOD, truncated [ 1610.058603][T26819] loop4: p3 start 9 is beyond EOD, truncated [ 1610.064089][T26844] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1610.070057][T26819] loop4: p4 size 2 extends beyond EOD, truncated [ 1610.082347][T26844] loop5: p3 start 9 is beyond EOD, truncated [ 1610.084558][T26819] loop4: p5 size 100663296 extends beyond EOD, [ 1610.089404][T26844] loop5: p4 size 2 extends beyond EOD, truncated [ 1610.095804][T26819] truncated [ 1610.096649][T26819] loop4: p6 start 9 is beyond EOD, [ 1610.104769][T26844] loop5: p5 size 100663296 extends beyond EOD, [ 1610.105848][T26819] truncated [ 1610.120700][T26844] truncated [ 1610.124344][T26844] loop5: p6 start 9 is beyond EOD, truncated [ 1610.183158][T26844] loop5: detected capacity change from 0 to 1 [ 1610.220593][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1610.225874][T32589] loop5: partition table partially beyond EOD, truncated [ 1610.233080][T32589] loop5: p1 start 778 is beyond EOD, truncated [ 1610.239250][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1610.246836][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1610.252892][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1610.259682][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1610.267105][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1610.275012][T26844] loop5: p1 < > p2 p3 p4 < p5 p6 > 11:49:34 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a040000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:34 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xff03, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:34 executing program 0: set_mempolicy(0x2, &(0x7f0000000000)=0x3fd, 0x7) r0 = epoll_create1(0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xe0000019}) clone3(&(0x7f0000000300)={0x211700, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0xa}, &(0x7f0000000180)=""/5, 0x5, &(0x7f00000001c0)=""/216, &(0x7f00000002c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) open_tree(r2, &(0x7f0000000380)='./file0\x00', 0x801) pidfd_send_signal(0xffffffffffffffff, 0x4, &(0x7f0000000480)={0x9, 0x0, 0x2}, 0x0) fstat(r2, &(0x7f0000000400)) 11:49:34 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="faff21001000010000000000000000000000000a1473a53c3d8bc938da0000001100010000000000000000000000000aa9374062f518"], 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x8, 0x0) 11:49:34 executing program 4 (fault-call:0 fault-nth:23): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1610.280247][T26844] loop5: partition table partially beyond EOD, truncated [ 1610.287508][T26844] loop5: p1 start 778 is beyond EOD, truncated [ 1610.293753][T26844] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1610.301284][T26844] loop5: p3 start 9 is beyond EOD, truncated [ 1610.307272][T26844] loop5: p4 size 2 extends beyond EOD, truncated [ 1610.313892][T26844] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1610.321718][T26844] loop5: p6 start 9 is beyond EOD, truncated 11:49:34 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:34 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000300)={0x3ff, {{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, 0x1, 0x6, [{{0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x38}, 0x4}}, {{0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, {{0xa, 0x4e20, 0x1, @loopback, 0x7f}}, {{0xa, 0x4e23, 0x7fff, @remote, 0x4}}, {{0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}}, {{0xa, 0x4e24, 0xf11, @empty, 0x8}}]}, 0x390) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x3, 0x4) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 11:49:34 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1610.414116][T26918] loop4: detected capacity change from 0 to 1 [ 1610.429515][T26918] FAULT_INJECTION: forcing a failure. [ 1610.429515][T26918] name failslab, interval 1, probability 0, space 0, times 0 [ 1610.442407][T26918] CPU: 0 PID: 26918 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1610.452564][T26918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1610.458467][T26927] ISOFS: Unable to identify CD-ROM format. [ 1610.462682][T26918] Call Trace: [ 1610.462694][T26918] dump_stack+0x137/0x19d [ 1610.476362][T26918] should_fail+0x23c/0x250 [ 1610.480774][T26918] __should_failslab+0x81/0x90 [ 1610.485714][T26918] should_failslab+0x5/0x20 [ 1610.490271][T26918] kmem_cache_alloc_node+0x58/0x2b0 [ 1610.495455][T26918] ? __alloc_skb+0xed/0x420 [ 1610.499973][T26918] __alloc_skb+0xed/0x420 [ 1610.504562][T26918] alloc_uevent_skb+0x5b/0x120 [ 1610.509690][T26918] kobject_uevent_env+0x863/0xc40 [ 1610.514700][T26918] kobject_uevent+0x18/0x20 [ 1610.519224][T26918] loop_configure+0xb3c/0xcb0 [ 1610.523884][T26918] lo_ioctl+0x555/0x11f0 [ 1610.528116][T26918] ? path_openat+0x19ab/0x20b0 [ 1610.532884][T26918] ? putname+0xa5/0xc0 [ 1610.536953][T26918] ? ___cache_free+0x3c/0x300 [ 1610.541613][T26918] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1610.547010][T26918] ? selinux_file_ioctl+0x8e0/0x970 [ 1610.552194][T26918] ? lo_release+0x120/0x120 [ 1610.556677][T26918] blkdev_ioctl+0x1d0/0x3c0 [ 1610.561228][T26918] block_ioctl+0x6d/0x80 [ 1610.565567][T26918] ? blkdev_iopoll+0x70/0x70 [ 1610.570141][T26918] __se_sys_ioctl+0xcb/0x140 [ 1610.574836][T26918] __x64_sys_ioctl+0x3f/0x50 [ 1610.579508][T26918] do_syscall_64+0x4a/0x90 [ 1610.584000][T26918] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1610.589893][T26918] RIP: 0033:0x466397 [ 1610.593792][T26918] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1610.613932][T26918] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1610.622326][T26918] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 1610.630292][T26918] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1610.638765][T26918] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1610.646937][T26918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1610.655013][T26918] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 11:49:34 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfffe, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x9, 0x0) [ 1610.666495][T26928] loop5: detected capacity change from 0 to 1 [ 1610.696416][T26918] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1610.701672][T26918] loop4: partition table partially beyond EOD, truncated [ 1610.709130][T26928] loop5: p1 < > p2 p3 p4 < p5 p6 > 11:49:34 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1610.714548][T26928] loop5: partition table partially beyond EOD, truncated [ 1610.716212][T26918] loop4: p1 start 10 is beyond EOD, truncated [ 1610.727660][T26918] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1610.733046][T26931] ISOFS: Unable to identify CD-ROM format. [ 1610.754068][T26928] loop5: p1 start 1034 is beyond EOD, truncated [ 1610.760499][T26928] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1610.768431][T26928] loop5: p3 start 9 is beyond EOD, truncated [ 1610.774583][T26928] loop5: p4 size 2 extends beyond EOD, truncated [ 1610.781719][T26928] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1610.783444][T26918] loop4: p3 start 9 is beyond EOD, truncated [ 1610.795010][T26918] loop4: p4 size 2 extends beyond EOD, truncated [ 1610.798718][T26948] ISOFS: Unable to identify CD-ROM format. [ 1610.802670][T26928] loop5: p6 start 9 is beyond EOD, truncated [ 1610.813359][T26918] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1610.813712][T26951] ISOFS: Unable to identify CD-ROM format. [ 1610.820813][T26918] loop4: p6 start 9 is beyond EOD, truncated [ 1610.840578][T26959] netlink: 1276 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1610.907148][T26928] loop5: detected capacity change from 0 to 1 [ 1610.950795][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1610.956028][T32589] loop5: partition table partially beyond EOD, truncated [ 1610.963636][T32589] loop5: p1 start 1034 is beyond EOD, truncated [ 1610.970015][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1610.977616][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1610.983872][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1610.990744][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1610.998349][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1611.006204][T26928] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1611.011517][T26928] loop5: partition table partially beyond EOD, truncated [ 1611.018962][T26928] loop5: p1 start 1034 is beyond EOD, truncated [ 1611.025884][T26928] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1611.033587][T26928] loop5: p3 start 9 is beyond EOD, truncated [ 1611.039742][T26928] loop5: p4 size 2 extends beyond EOD, truncated [ 1611.046570][T26928] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1611.054095][T26928] loop5: p6 start 9 is beyond EOD, truncated 11:49:35 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:35 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0xa, 0x0) 11:49:35 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a050000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:35 executing program 4 (fault-call:0 fault-nth:24): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:35 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1611.143845][T26991] ISOFS: Unable to identify CD-ROM format. [ 1611.154041][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1611.155967][T26994] loop4: detected capacity change from 0 to 1 [ 1611.159268][T32589] loop5: partition table partially beyond EOD, truncated [ 1611.165382][T26994] FAULT_INJECTION: forcing a failure. [ 1611.165382][T26994] name failslab, interval 1, probability 0, space 0, times 0 11:49:35 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x100000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1611.185179][T26994] CPU: 0 PID: 26994 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1611.195321][T26994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1611.205572][T26994] Call Trace: [ 1611.208963][T26994] dump_stack+0x137/0x19d [ 1611.213385][T26994] should_fail+0x23c/0x250 [ 1611.217856][T26994] __should_failslab+0x81/0x90 [ 1611.222619][T26994] should_failslab+0x5/0x20 [ 1611.227110][T26994] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1611.232904][T26994] ? __kmalloc_node_track_caller+0x30/0x40 [ 1611.238823][T26994] ? kmem_cache_alloc_node+0x1da/0x2b0 [ 1611.244288][T26994] __kmalloc_node_track_caller+0x30/0x40 [ 1611.250046][T26994] ? alloc_uevent_skb+0x5b/0x120 [ 1611.255018][T26994] __alloc_skb+0x187/0x420 [ 1611.259421][T26994] alloc_uevent_skb+0x5b/0x120 [ 1611.264218][T26994] kobject_uevent_env+0x863/0xc40 [ 1611.269437][T26994] kobject_uevent+0x18/0x20 [ 1611.274010][T26994] loop_configure+0xb3c/0xcb0 [ 1611.278688][T26994] lo_ioctl+0x555/0x11f0 [ 1611.282935][T26994] ? path_openat+0x19ab/0x20b0 [ 1611.287842][T26994] ? putname+0xa5/0xc0 [ 1611.291909][T26994] ? ___cache_free+0x3c/0x300 [ 1611.296756][T26994] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1611.302237][T26994] ? selinux_file_ioctl+0x8e0/0x970 [ 1611.307527][T26994] ? lo_release+0x120/0x120 [ 1611.312038][T26994] blkdev_ioctl+0x1d0/0x3c0 [ 1611.316556][T26994] block_ioctl+0x6d/0x80 [ 1611.320836][T26994] ? blkdev_iopoll+0x70/0x70 [ 1611.325491][T26994] __se_sys_ioctl+0xcb/0x140 [ 1611.330073][T26994] __x64_sys_ioctl+0x3f/0x50 [ 1611.334649][T26994] do_syscall_64+0x4a/0x90 [ 1611.339264][T26994] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1611.345282][T26994] RIP: 0033:0x466397 [ 1611.350028][T26994] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1611.369809][T26994] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1611.378333][T26994] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 1611.386324][T26994] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1611.394280][T26994] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1611.402249][T26994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1611.410570][T26994] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 [ 1611.419500][T32589] loop5: p1 start 1034 is beyond EOD, truncated [ 1611.425807][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1611.437182][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1611.441932][T26992] ISOFS: Unable to identify CD-ROM format. [ 1611.443230][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1611.456541][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1611.464249][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1611.490781][T26994] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1611.496307][T26994] loop4: partition table partially beyond EOD, truncated [ 1611.504891][T26994] loop4: p1 start 10 is beyond EOD, truncated [ 1611.511115][T27013] loop5: detected capacity change from 0 to 1 [ 1611.511309][T26994] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1611.527925][T26994] loop4: p3 start 9 is beyond EOD, truncated [ 1611.534448][T26994] loop4: p4 size 2 extends beyond EOD, truncated [ 1611.541451][T26994] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1611.548734][T26994] loop4: p6 start 9 is beyond EOD, truncated [ 1611.562586][T27013] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1611.567797][T27013] loop5: partition table partially beyond EOD, truncated [ 1611.579046][T27013] loop5: p1 start 1290 is beyond EOD, truncated 11:49:35 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000300)={0x3ff, {{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, 0x1, 0x6, [{{0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x38}, 0x4}}, {{0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, {{0xa, 0x4e20, 0x1, @loopback, 0x7f}}, {{0xa, 0x4e23, 0x7fff, @remote, 0x4}}, {{0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}}, {{0xa, 0x4e24, 0xf11, @empty, 0x8}}]}, 0x390) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x3, 0x4) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 11:49:35 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:35 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfeffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0xb, 0x0) 11:49:35 executing program 4 (fault-call:0 fault-nth:25): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1611.585350][T27013] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1611.602060][T27013] loop5: p3 start 9 is beyond EOD, truncated [ 1611.608165][T27013] loop5: p4 size 2 extends beyond EOD, truncated [ 1611.615601][T27013] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1611.623727][T27013] loop5: p6 start 9 is beyond EOD, truncated 11:49:35 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0xc, 0x0) 11:49:35 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1611.654722][T27042] ISOFS: Unable to identify CD-ROM format. [ 1611.666029][T27045] loop4: detected capacity change from 0 to 1 [ 1611.668677][T27046] ISOFS: Unable to identify CD-ROM format. [ 1611.678422][T27045] FAULT_INJECTION: forcing a failure. [ 1611.678422][T27045] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.691253][T27045] CPU: 1 PID: 27045 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1611.701537][T27045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1611.712542][T27045] Call Trace: [ 1611.715816][T27045] dump_stack+0x137/0x19d [ 1611.720166][T27045] should_fail+0x23c/0x250 [ 1611.724601][T27045] ? skb_clone+0x12c/0x1f0 [ 1611.728999][T27045] __should_failslab+0x81/0x90 [ 1611.733823][T27045] should_failslab+0x5/0x20 [ 1611.738316][T27045] kmem_cache_alloc+0x46/0x2f0 [ 1611.743060][T27045] skb_clone+0x12c/0x1f0 [ 1611.747295][T27045] netlink_broadcast_filtered+0x50d/0xb90 [ 1611.753015][T27045] ? skb_put+0xb9/0xf0 [ 1611.757083][T27045] netlink_broadcast+0x35/0x50 [ 1611.761847][T27045] kobject_uevent_env+0x8c9/0xc40 [ 1611.766865][T27045] kobject_uevent+0x18/0x20 [ 1611.771489][T27045] loop_configure+0xb3c/0xcb0 [ 1611.776184][T27045] lo_ioctl+0x555/0x11f0 [ 1611.780415][T27045] ? path_openat+0x19ab/0x20b0 [ 1611.785159][T27045] ? putname+0xa5/0xc0 [ 1611.789206][T27045] ? ___cache_free+0x3c/0x300 [ 1611.793934][T27045] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1611.799291][T27045] ? selinux_file_ioctl+0x8e0/0x970 [ 1611.804575][T27045] ? lo_release+0x120/0x120 [ 1611.809069][T27045] blkdev_ioctl+0x1d0/0x3c0 [ 1611.813715][T27045] block_ioctl+0x6d/0x80 [ 1611.818089][T27045] ? blkdev_iopoll+0x70/0x70 [ 1611.822688][T27045] __se_sys_ioctl+0xcb/0x140 [ 1611.827385][T27045] __x64_sys_ioctl+0x3f/0x50 [ 1611.832055][T27045] do_syscall_64+0x4a/0x90 [ 1611.836643][T27045] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1611.842667][T27045] RIP: 0033:0x466397 [ 1611.846626][T27045] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1611.866501][T27045] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1611.874954][T27045] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 1611.883600][T27045] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1611.891738][T27045] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 11:49:35 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a060000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:35 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1611.899850][T27045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1611.907957][T27045] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 [ 1611.936668][T27061] netlink: 1276 bytes leftover after parsing attributes in process `syz-executor.0'. 11:49:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0xd, 0x0) [ 1611.967305][T27056] ISOFS: Unable to identify CD-ROM format. [ 1611.979512][T27058] ISOFS: Unable to identify CD-ROM format. [ 1611.985750][T27045] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1611.991049][T27045] loop4: partition table partially beyond EOD, truncated [ 1612.004131][T27045] loop4: p1 start 10 is beyond EOD, truncated 11:49:36 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1612.012489][T27045] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1612.022212][T27077] loop5: detected capacity change from 0 to 1 [ 1612.037565][T27082] ISOFS: Unable to identify CD-ROM format. [ 1612.044076][T27083] ISOFS: Unable to identify CD-ROM format. [ 1612.044485][T27045] loop4: p3 start 9 is beyond EOD, truncated [ 1612.056108][T27045] loop4: p4 size 2 extends beyond EOD, truncated [ 1612.063197][T27077] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1612.068395][T27077] loop5: partition table partially beyond EOD, truncated [ 1612.070919][T27045] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1612.075539][T27077] loop5: p1 start 1546 is beyond EOD, truncated [ 1612.089304][T27077] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1612.096977][T27077] loop5: p3 start 9 is beyond EOD, truncated [ 1612.103008][T27077] loop5: p4 size 2 extends beyond EOD, truncated [ 1612.109126][T27045] loop4: p6 start 9 is beyond EOD, truncated [ 1612.109849][T27077] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1612.123042][T27077] loop5: p6 start 9 is beyond EOD, truncated [ 1612.191712][T27077] loop5: detected capacity change from 0 to 1 [ 1612.231216][T27077] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1612.236455][T27077] loop5: partition table partially beyond EOD, truncated [ 1612.243986][T27077] loop5: p1 start 1546 is beyond EOD, truncated [ 1612.250497][T27077] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1612.258357][T27077] loop5: p3 start 9 is beyond EOD, truncated [ 1612.264535][T27077] loop5: p4 size 2 extends beyond EOD, truncated [ 1612.271253][T27077] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1612.278924][T27077] loop5: p6 start 9 is beyond EOD, truncated [ 1612.321884][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1612.327125][T32589] loop5: partition table partially beyond EOD, truncated [ 1612.334719][T32589] loop5: p1 start 1546 is beyond EOD, truncated [ 1612.341434][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1612.349007][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1612.355535][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1612.362336][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1612.370260][T32589] loop5: p6 start 9 is beyond EOD, truncated 11:49:36 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000300)={0x3ff, {{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, 0x1, 0x6, [{{0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x38}, 0x4}}, {{0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, {{0xa, 0x4e20, 0x1, @loopback, 0x7f}}, {{0xa, 0x4e23, 0x7fff, @remote, 0x4}}, {{0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}}, {{0xa, 0x4e24, 0xf11, @empty, 0x8}}]}, 0x390) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x3, 0x4) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 11:49:36 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0xe, 0x0) 11:49:36 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x3000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:36 executing program 4 (fault-call:0 fault-nth:26): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:36 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a070000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:36 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0xf, 0x0) [ 1612.548502][T27139] loop5: detected capacity change from 0 to 1 [ 1612.554970][T27137] ISOFS: Unable to identify CD-ROM format. [ 1612.562534][T27140] loop4: detected capacity change from 0 to 1 [ 1612.563567][T27141] ISOFS: Unable to identify CD-ROM format. [ 1612.582211][T27140] FAULT_INJECTION: forcing a failure. [ 1612.582211][T27140] name failslab, interval 1, probability 0, space 0, times 0 [ 1612.588227][T27155] netlink: 1272 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1612.595889][T27140] CPU: 1 PID: 27140 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1612.595914][T27140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1612.595923][T27140] Call Trace: [ 1612.595932][T27140] dump_stack+0x137/0x19d [ 1612.633427][T27140] should_fail+0x23c/0x250 [ 1612.638089][T27140] __should_failslab+0x81/0x90 [ 1612.642858][T27140] ? call_usermodehelper_setup+0x81/0x160 11:49:36 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1612.648585][T27140] should_failslab+0x5/0x20 [ 1612.651111][T27139] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1612.653219][T27140] kmem_cache_alloc_trace+0x49/0x310 [ 1612.653246][T27140] ? add_uevent_var+0x16e/0x1c0 [ 1612.653266][T27140] ? __kfree_skb+0xfe/0x150 [ 1612.658489][T27139] loop5: partition table partially beyond EOD, [ 1612.663757][T27140] call_usermodehelper_setup+0x81/0x160 [ 1612.668627][T27139] truncated [ 1612.678107][T27139] loop5: p1 start 1802 is beyond EOD, [ 1612.679330][T27140] ? add_uevent_var+0x1c0/0x1c0 11:49:36 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1612.679358][T27140] kobject_uevent_env+0xb29/0xc40 [ 1612.684913][T27139] truncated [ 1612.687973][T27140] kobject_uevent+0x18/0x20 [ 1612.693703][T27139] loop5: p2 size 100663296 extends beyond EOD, [ 1612.698499][T27140] loop_configure+0xb3c/0xcb0 [ 1612.703574][T27139] truncated [ 1612.711452][T27139] loop5: p3 start 9 is beyond EOD, [ 1612.717688][T27140] lo_ioctl+0x555/0x11f0 [ 1612.717710][T27140] ? path_openat+0x19ab/0x20b0 [ 1612.722400][T27139] truncated [ 1612.725493][T27140] ? putname+0xa5/0xc0 11:49:36 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1612.730662][T27139] loop5: p4 size 2 extends beyond EOD, truncated [ 1612.733055][T27139] loop5: p5 size 100663296 extends beyond EOD, [ 1612.735009][T27140] ? ___cache_free+0x3c/0x300 [ 1612.739771][T27139] truncated [ 1612.740441][T27139] loop5: p6 start 9 is beyond EOD, [ 1612.742858][T27140] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1612.742916][T27140] ? selinux_file_ioctl+0x8e0/0x970 [ 1612.747021][T27139] truncated [ 1612.753313][T27140] ? lo_release+0x120/0x120 [ 1612.753332][T27140] blkdev_ioctl+0x1d0/0x3c0 [ 1612.795105][T27140] block_ioctl+0x6d/0x80 11:49:36 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1612.799348][T27140] ? blkdev_iopoll+0x70/0x70 [ 1612.803981][T27140] __se_sys_ioctl+0xcb/0x140 [ 1612.808653][T27140] __x64_sys_ioctl+0x3f/0x50 [ 1612.813300][T27140] do_syscall_64+0x4a/0x90 [ 1612.817889][T27140] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1612.823795][T27140] RIP: 0033:0x466397 [ 1612.827789][T27140] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1612.847574][T27140] RSP: 002b:00007f6f1c761e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1612.856114][T27140] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 1612.864077][T27140] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1612.872036][T27140] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1612.880095][T27140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1612.888119][T27140] R13: 0000000000000004 R14: 00000000200001d8 R15: 0000000000000001 [ 1612.926446][T27161] ISOFS: Unable to identify CD-ROM format. [ 1612.930880][T27139] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 1612.945201][T27140] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1612.950743][T27140] loop4: partition table partially beyond EOD, truncated [ 1612.955720][T27139] loop5: detected capacity change from 0 to 1 [ 1612.958393][T27140] loop4: p1 start 10 is beyond EOD, truncated [ 1612.970208][T27140] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1612.977614][T27140] loop4: p3 start 9 is beyond EOD, truncated [ 1612.983718][T27140] loop4: p4 size 2 extends beyond EOD, truncated [ 1612.987224][T27139] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1612.991179][T27140] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1612.995295][T27139] loop5: partition table partially beyond EOD, truncated [ 1613.004338][T27140] loop4: p6 start 9 is beyond EOD, truncated [ 1613.011414][T27139] loop5: p1 start 1802 is beyond EOD, truncated [ 1613.022503][T27139] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1613.030355][T27139] loop5: p3 start 9 is beyond EOD, truncated [ 1613.036523][T27139] loop5: p4 size 2 extends beyond EOD, truncated [ 1613.044774][T27139] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1613.055184][T27139] loop5: p6 start 9 is beyond EOD, truncated 11:49:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a00)={'lo\x00', &(0x7f00000009c0)=@ethtool_ringparam={0x2c}}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) r2 = getpgrp(0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x40800, 0x0) r5 = syz_io_uring_complete(0x0) r6 = socket$unix(0x1, 0x1, 0x0) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) sendmsg$netlink(r0, &(0x7f0000000980)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xc, &(0x7f0000000900)=[{&(0x7f0000000080)={0x83c, 0x26, 0x200, 0x70bd26, 0x25dfdbfd, "", [@typed={0xde, 0x5f, 0x0, 0x0, @binary="aceec00c9961563cf7290d700e959f12a37e18bbe3bb212aa5f9b64a1b06740519191711e8c23309d2285d3868442779072190a6154ee8b2b4c40f683112cd66e5d2985f66bd43fa13dd331e6b3110f867ddc4f0d6f4ba173d72aca6b8cd6079584308674ea0c1cfe4a2e1d0cc07ffc3b9551f469a7f6791b73589e5fbc1baaa14e4cba430f9c9d4d9299b7217b20fe9d2322f9ca50ba137189ac25b95303ceb27137ab52bfac034d0bc23e3b6495dc5902fcb9b05041e2c4f60dead489e64fae5d4d1f47bfff2d4019b0b558e0b7f30fd055470b1779798df14"}, @nested={0x1fe, 0x79, 0x0, 0x1, [@generic="3435a01af1e7efbf7e482562879299de000554880ce891613f2d5da3393284b4c8bd9bb30abd15be87963f425e5ba9a49136e1692bc5", @generic="d5292d419a9e958e2d9ffee95da790d616e83812bb2f1fedb310f4e3cea6cc67dac012674c5e34cefc0a5c5aac6b10cbe3709b5e18382c42b2a73342ead01f5cf4f6e13102cd", @typed={0x4, 0x53}, @typed={0x8, 0x4e, 0x0, 0x0, @fd=r1}, @typed={0x4, 0x8}, @generic="dd0c93fc56bbc783daa42912a294dbf22ef39db6dabe796a73a7057a155836aec14e45005417df9421077ae3531b4a9e659dfa4bdf3f185a4c39663f449b779b7bffb41ddf47cd134d055e71fa4acf8c78e6052b3ded01cb0068adbf93408235d117ad672e50ba40fff7a7c592a58f046b67d0311a2b01d517d46a4b8a00b082e97ba2054816dde3fc88b600199e4ff4469d4735f5c6930b68e516ac7bf34b0a494c8c3467a03b4b8c31895846b245dbc856c1a4628f36069b2c1c6545c7d75541459d50484646e669e9da3fb0170bd6fc8394e4b5a2eeb698ffa7b04e0061da5324e317498feb47a45e5d", @generic="3737c84746af666228a6c7da26bd3de9065f2b604690ccb70d81270901dc88b1a0be5d89b34ccab7341fc6e20c77b26464c0940fc36abdd98232c092ed9ff97ce9eee34a3340c10fc2f479ecacaadc1df024c8001011fdee28eb8c7cd50c4be6d290353d5a4a4d1c32f527c8bb896cbb7fa0489cc9bb749ab391facc03b2c4b26dd196"]}, @typed={0x8, 0x24, 0x0, 0x0, @u32=0x3}, @nested={0x32d, 0x58, 0x0, 0x1, [@generic="9890971e7fed1bd43bce21adaf4ba97a7b092a7ad3e750e7ae83cbe62d3c0e0385e5", @typed={0x8, 0x87, 0x0, 0x0, @u32=0xbb79}, @generic="c25ba7a32381f9d37c7fba740c55f7afbe046df2b1a96b8ab133e29eff95476f168fe8", @typed={0x8, 0x28, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x77, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x23}}, @typed={0xb7, 0x45, 0x0, 0x0, @binary="6d082638e13467351cb58f6dd9cfbb8f2b6b43142bdcfd5c50e94f2589257c8021cc629fc801820404bbd06c51b6296b1d4bed9bb62618396efc920fcc94cbd1b09cc93ab105159f0c9951da5e1e47adae93e652a37aed0526380046180bfa612e20dbb0190de5286ca88fb33f3f0f23df2e9ac19b9e55f4a83841ab89b73abd148f4c3b5f35e9e889d3801faa967806f3ef30a510d551b2aeeb78a5c17c913957fd97b1813178b387c45591f18c8a83513160"}, @generic="21306f4d5c58250cfd9bd8c495975808ddaeafd8a2bce6f847b2bfa6fa76aa687a5d1b9283346c04dd87763e944778e9c29d647fd0fc2597ec2d3ba7e143c7abc0d2f9035e30f0428429be5b330af50bc77bc3af0fc88fb0f09c0aee83221ece1c5c40bc", @typed={0xcb, 0x3e, 0x0, 0x0, @binary="4401af46f3070c5db348691312052b2a29ccdfe18daa3bbc88977e917e686e349a6077fd6e977d34892e3a4f150468393466efa6c98dc2820742bd56500f7dfc20c6b826a04095f5e94579541b7128d0d9a1595439905d3034ebdf3eacbf8ac74081240d4df66f8acbf251ea96897b67de0f518f0a8b6515184f8fb9eb1aab88e2ad7bee2b6a74e962cf06c18db6147c19c858b0785576061b24c7eec0fec8e4591ed0654c326ff5e8bc2a7d89f498d1657ab68cf958521ec511721a9a108da8fa754ea8992996"}, @generic="33b21d1525b522855fffb5c6b428018a93142e8f8cce832ea1a681b2ea1500a978d03f5fecba868030a1c172fa3aa2cfed8c83b8653d33ec281d94c190252643678a1758580de964aa51dcf31fdfae651ec63abedf5f9d77e5453cfb1504917f437810123be476f5", @typed={0x70, 0x31, 0x0, 0x0, @binary="9e56e9f55d7f984952ad7386d1812c0cda4d0915deafc6bc1617b6a7181c1df42dd59471c5a6f0b9c94e80d87bf5d3d7c3353c1334dae2c2403a67bb8b9b9b9e1a7478612ced28d313c3ac36e25d6608b1af1badc1073665d51783abb6db9b9c3ce8c1570cf0b86599e549be"}]}, @generic="ee046c2d09780965dcbfdd805b39fad5378fd15912b541182a6f624057e5eef46915bacf5f17edffb199ac65a5d97a461311ea8306f715e92f13ed5893b0bd3dd08af9cc8eaf86eec43e0f28483d9b6a5e22ed88b9b9acfa48ca6437eb32c258c56f5d89999e179b65d7ae02011bf5726934a77674e04d1a5546618e", @nested={0x196, 0x15, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @ipv4=@empty}, @generic="2e5f61b46d8a6c7346351959c8df36fcc2e12f3bf451dcfd5009e6bb23705e80c9b91e48481df9b476fe70e1ac4260cc1257e463077124ad3a82cc57174c6f75b7d19003d5d381641e2abaafabdb56810386f1db63287768414e029d2b4e1a90d7c728036b76de4115919d4de89a84c5886b491426933db19fad725e8e371f5a629fef5727bc90adc805619da5eaa9a26f2d", @generic="44edd2d4195edeff1d9f66d97ab6c515c52efd89f39c8a1805a7cee5d5e7f7f847766316096f407fe289b82c0fe25d1075a3ffca94c2b141b2992bd4470ad6725ead3adb5b825b7778dfe8ce80cf17f5c428b73d7ad268ea6d2a9ce1d7ae6a75f11bb402e1f94857c8209481e83bbdf2ad5ad55f37d7c7c766da1b34fe4ded3725f0aaa6325e37ee896f5b230648b9534ca9e9e7b4b4379817903d2e2fd8e58307fc5952ede4b51da858645d919a5c731aad082430ad1d88b9dec5e8e81cfda12cbc76c19ec30302584edc5285b3feb5b1318d46f014bfb34204c2a9f4e41c31410a5007bc815717361a5d417d3e20d85cd051e67990349e"]}]}, 0x83c}, {&(0x7f0000000a40)={0x33c, 0x1f, 0x800, 0x70bd28, 0x25dfdbfd, "", [@generic="165302fe87850a7aab0223fe4f66586f343ab485d9d5df050ddc6d895b921e08cebfde6baf9ed50123940b5468db43ffb66c16ca439c2f45713c2bd78fcce87f197b7d9a9da2fe518cbcecf164408510eb9cc208a2d8f2d36cf315e577a68245274be63bebf53fbe5ac44f802087167dc8b1252258b2026ca1bcc0872887f688ddf7bc55689e5c50e95bad0cf8dd58837539736986afb1f4c4faec9c2897284b44e8ca8ef364b04a36a2fe6a4c0c25499c89870d", @nested={0x1d3, 0x3, 0x0, 0x1, [@typed={0x8, 0x1c, 0x0, 0x0, @uid=0xee01}, @generic="2c392af6804e779d2e9977032cb426e04692fd0a0bd3b3d1a7800e3e57ad76011060f300531c9566d80f06ea9a6676a8f763ff10a1ea96797b12cea7", @generic="b882c9e0409d16a7c7949ca8c4d7d1a1845acef137798352639c148de3be320e60f57b6e1978a3369ec87eb4f6d70876d5afb1049c17b58e23705aca3e69479f452f40ab98", @typed={0x5, 0x6d, 0x0, 0x0, @str='\x00'}, @generic="d69e9ea4b665a337c18a3ab589026f9b77e8acf4cf20543b10d35d330e85c81934a070f707c6a0d3bbe40ca6192eb8d3c9d8a8dab407edeb2a8e1e8890ab3c1bc30d30a97f630937962464539b8711fd09d985810a7237d4af77b745350a11e51553947917063b14f4f97b95364b644450bf50f1fd54acbf343683486e332dbad6f1dc61bd4e8254603f052e3c81d15a615ed3263fc973a23c1d6ac1f1df9968315ee33d1f1a745da8948d5692fe562dbe1690516cf661e9c3d331485998fedecbb605055510c25db79e431ef313860265b469c9bb6c9bd291b061f32ed06b4f3115937ba49cb15d5711a031", @generic="d687fb155b1d5ef2482ec831a2a1419dffa311f917ba49a8bc69bd0e4bbdef3f81753131bdad852581a3712810b6ad977befe0c4f0f4858d6b05536f8c7880c2f3f1c46d597721411d6d59860bf8a5eaa4c4"]}, @generic="b0f3cd66115bfd9f51013bb3b3efa7aff0738119a412f54c607e2a609bffd3245df7072abab1d7c7d26d3dda8b02f5fdf76a5d98d7e61fa71151489ca975738d2028bae5353d332e1957ff8904ac02364ce354a3b5787224cfc4ad6bf870dc53fbb0db20169ce96b7ca1876fa1bfe0c1c5ef571624833f37853f81e50c18a9239a14b9547fc0f6c69856cee3b92b3556555ac1aa16d1c4bb0710a40b1740bd7dfcc691"]}, 0x33c}, {&(0x7f00000008c0)={0x20, 0x33, 0x400, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0x2d, 0x0, 0x0, @u32=0x362}, @typed={0x8, 0x78, 0x0, 0x0, @fd=r0}]}, 0x20}], 0x3, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r3, r0, r0, r4]}}, @rights={{0x24, 0x1, 0x1, [r5, r0, r6, r9, r0]}}], 0x68, 0x4004001}, 0x4a004) 11:49:37 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x10, 0x0) 11:49:37 executing program 4 (fault-call:0 fault-nth:27): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:37 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x4000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:37 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a080000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x11, 0x0) 11:49:37 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x3e659d4beaa1d53f, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1613.391255][T27219] ISOFS: Unable to identify CD-ROM format. [ 1613.394589][T27217] loop4: detected capacity change from 0 to 1 [ 1613.402753][T27230] loop5: detected capacity change from 0 to 1 [ 1613.411963][T27225] ISOFS: Unable to identify CD-ROM format. 11:49:37 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:37 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x5000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:37 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1613.443431][T27217] FAULT_INJECTION: forcing a failure. [ 1613.443431][T27217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1613.456871][T27217] CPU: 1 PID: 27217 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1613.467017][T27217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1613.477076][T27217] Call Trace: [ 1613.480428][T27217] dump_stack+0x137/0x19d [ 1613.481475][T27230] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1613.484754][T27217] should_fail+0x23c/0x250 [ 1613.489970][T27230] loop5: partition table partially beyond EOD, truncated [ 1613.501131][T27243] ISOFS: Unable to identify CD-ROM format. [ 1613.501803][T27217] should_fail_usercopy+0x16/0x20 [ 1613.512597][T27217] _copy_to_user+0x1c/0x90 [ 1613.513485][T27230] loop5: p1 start 2058 is beyond EOD, [ 1613.517049][T27217] lo_ioctl+0x8ce/0x11f0 [ 1613.517061][T27230] truncated [ 1613.517071][T27217] ? path_openat+0x19ab/0x20b0 [ 1613.522545][T27230] loop5: p2 size 100663296 extends beyond EOD, [ 1613.526748][T27217] ? __perf_event_task_sched_out+0xce0/0xd30 [ 1613.529839][T27230] truncated [ 1613.536797][T27230] loop5: p3 start 9 is beyond EOD, [ 1613.541172][T27217] ? putname+0xa5/0xc0 [ 1613.541194][T27217] ? __perf_event_task_sched_in+0x471/0x4c0 [ 1613.547573][T27230] truncated [ 1613.547579][T27230] loop5: p4 size 2 extends beyond EOD, [ 1613.550667][T27217] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1613.556216][T27230] truncated [ 1613.560222][T27217] ? selinux_file_ioctl+0x8e0/0x970 11:49:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x12, 0x0) [ 1613.572412][T27230] loop5: p5 size 100663296 extends beyond EOD, [ 1613.574712][T27217] ? lo_release+0x120/0x120 [ 1613.574734][T27217] blkdev_ioctl+0x1d0/0x3c0 [ 1613.580092][T27230] truncated [ 1613.580645][T27230] loop5: p6 start 9 is beyond EOD, [ 1613.583191][T27217] block_ioctl+0x6d/0x80 [ 1613.583213][T27217] ? blkdev_iopoll+0x70/0x70 [ 1613.583231][T27217] __se_sys_ioctl+0xcb/0x140 [ 1613.588422][T27230] truncated [ 1613.629000][T27217] __x64_sys_ioctl+0x3f/0x50 [ 1613.633625][T27217] do_syscall_64+0x4a/0x90 [ 1613.638087][T27217] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1613.644001][T27217] RIP: 0033:0x466397 [ 1613.647889][T27217] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1613.668954][T27217] RSP: 002b:00007f6f1c761ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1613.677413][T27217] RAX: ffffffffffffffda RBX: 00007f6f1c761f40 RCX: 0000000000466397 [ 1613.685617][T27217] RDX: 00007f6f1c762050 RSI: 0000000000004c05 RDI: 0000000000000005 [ 1613.693777][T27217] RBP: 00007f6f1c7621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1613.702194][T27217] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6f1c762050 [ 1613.710616][T27217] R13: 00007ffc111c045f R14: 00007f6f1c762300 R15: 0000000000022000 [ 1613.743571][T27230] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 1613.753545][T27262] ISOFS: Unable to identify CD-ROM format. [ 1613.766742][T27230] loop5: detected capacity change from 0 to 1 [ 1613.803313][T27230] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1613.808568][T27230] loop5: partition table partially beyond EOD, truncated [ 1613.816032][T27230] loop5: p1 start 2058 is beyond EOD, truncated [ 1613.822419][T27230] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1613.830080][T27230] loop5: p3 start 9 is beyond EOD, truncated [ 1613.836266][T27230] loop5: p4 size 2 extends beyond EOD, truncated [ 1613.843229][T27230] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1613.850848][T27230] loop5: p6 start 9 is beyond EOD, truncated 11:49:38 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x361002, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/63) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/pcmcia_core', 0x801, 0x102) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000100)=[{{r2, r3/1000+10000}, 0x2, 0x81, 0x5}], 0x18) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x410240, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {}, {}, {0x0, @struct}}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f00000005c0)=""/154) write$evdev(r0, &(0x7f0000000680)=[{{}, 0x16, 0x6, 0xff}, {{0x77359400}, 0x16, 0x99, 0x3f}, {{0x77359400}, 0x0, 0xa3cd, 0x6}, {{}, 0x5, 0x8001, 0x6}, {{0x0, 0x2710}, 0x1, 0xffff, 0x80000000}, {{}, 0x17, 0x7, 0x79ff1c52}, {{0x77359400}, 0x1f, 0x7, 0x6}], 0xa8) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000740)) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000780)=0x1) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000007c0)=""/137) r6 = perf_event_open(&(0x7f00000008c0)={0x4, 0x80, 0x2, 0x81, 0x78, 0x34, 0x0, 0xffffffff, 0x2184c, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000880), 0x8}, 0x8, 0xe445, 0x3493, 0x4, 0x9, 0xff, 0x100, 0x0, 0x7, 0x0, 0x7fff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xa) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000940)=[r5, r4, r6, r5], 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8010, r1, 0x8e7f6000) r7 = socket(0x2b, 0x1, 0xd5e) fcntl$getownex(r7, 0x10, &(0x7f0000000a00)={0x0, 0x0}) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x6, 0x20, 0x7f, 0x8a, 0x0, 0x401, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x843, 0x0, @perf_config_ext={0xc16, 0x5}, 0x5, 0x200, 0x8001, 0x6, 0x1, 0x6, 0x4, 0x0, 0x2, 0x0, 0x5}, r8, 0xd, r1, 0x3) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x8) 11:49:38 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x0) 11:49:38 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x6000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x13, 0x0) 11:49:38 executing program 4 (fault-call:0 fault-nth:28): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:38 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a090000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1614.262433][T27302] loop4: detected capacity change from 0 to 1 [ 1614.268817][T27302] FAULT_INJECTION: forcing a failure. [ 1614.268817][T27302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1614.281910][T27302] CPU: 0 PID: 27302 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1614.292544][T27302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1614.302686][T27302] Call Trace: [ 1614.306065][T27302] dump_stack+0x137/0x19d [ 1614.310407][T27302] should_fail+0x23c/0x250 [ 1614.314837][T27302] should_fail_usercopy+0x16/0x20 [ 1614.319458][T27310] ISOFS: Unable to identify CD-ROM format. [ 1614.319977][T27302] _copy_to_user+0x1c/0x90 [ 1614.329207][T27309] loop5: detected capacity change from 0 to 1 [ 1614.330223][T27302] lo_ioctl+0x8ce/0x11f0 [ 1614.338584][T27312] ISOFS: Unable to identify CD-ROM format. [ 1614.340596][T27302] ? path_openat+0x19ab/0x20b0 [ 1614.340633][T27302] ? putname+0xa5/0xc0 [ 1614.355233][T27302] ? ___cache_free+0x3c/0x300 [ 1614.359909][T27302] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1614.365367][T27302] ? lo_release+0x120/0x120 [ 1614.369862][T27302] blkdev_ioctl+0x1d0/0x3c0 [ 1614.374348][T27302] block_ioctl+0x6d/0x80 [ 1614.378592][T27302] ? blkdev_iopoll+0x70/0x70 [ 1614.383234][T27302] __se_sys_ioctl+0xcb/0x140 [ 1614.388196][T27302] __x64_sys_ioctl+0x3f/0x50 [ 1614.392840][T27302] do_syscall_64+0x4a/0x90 [ 1614.397257][T27302] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1614.403147][T27302] RIP: 0033:0x466397 [ 1614.407213][T27302] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1614.426997][T27302] RSP: 002b:00007f6f1c761ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1614.435390][T27302] RAX: ffffffffffffffda RBX: 00007f6f1c761f40 RCX: 0000000000466397 [ 1614.443356][T27302] RDX: 00007f6f1c762050 RSI: 0000000000004c05 RDI: 0000000000000005 [ 1614.451408][T27302] RBP: 00007f6f1c7621d0 R08: 0000000000000000 R09: 0000000000000000 11:49:38 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x0) 11:49:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x14, 0x0) [ 1614.459448][T27302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6f1c762050 [ 1614.467487][T27302] R13: 00007ffc111c045f R14: 00007f6f1c762300 R15: 0000000000022000 [ 1614.481648][T27309] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1614.486992][T27309] loop5: partition table partially beyond EOD, truncated [ 1614.502616][T27309] loop5: p1 start 2314 is beyond EOD, truncated 11:49:38 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x0) 11:49:38 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x7000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:38 executing program 0: unlink(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f94", @ANYRESHEX=r2, @ANYBLOB='=\x00']) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8916, &(0x7f0000000000)={@mcast2={0xff, 0x8}, 0x0, r3}) [ 1614.509005][T27309] loop5: p2 size 100663296 extends beyond EOD, truncated 11:49:38 executing program 4 (fault-call:0 fault-nth:29): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x15, 0x0) 11:49:38 executing program 2 (fault-call:6 fault-nth:0): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:38 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x8000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1614.548333][T27326] ISOFS: Unable to identify CD-ROM format. [ 1614.563075][T27309] loop5: p3 start 9 is beyond EOD, truncated [ 1614.569130][T27309] loop5: p4 size 2 extends beyond EOD, truncated [ 1614.580410][T27350] loop4: detected capacity change from 0 to 1 [ 1614.584200][T27330] ISOFS: Unable to identify CD-ROM format. [ 1614.613793][T27309] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1614.615787][T27354] 9pnet: Insufficient options for proto=fd [ 1614.621566][T27309] loop5: p6 start 9 is beyond EOD, truncated [ 1614.642434][T27350] FAULT_INJECTION: forcing a failure. [ 1614.642434][T27350] name failslab, interval 1, probability 0, space 0, times 0 [ 1614.655194][T27350] CPU: 1 PID: 27350 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1614.665515][T27350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1614.671434][T27357] ISOFS: Unable to identify CD-ROM format. [ 1614.675634][T27350] Call Trace: [ 1614.675645][T27350] dump_stack+0x137/0x19d [ 1614.684877][T27362] FAULT_INJECTION: forcing a failure. [ 1614.684877][T27362] name failslab, interval 1, probability 0, space 0, times 0 [ 1614.689092][T27350] should_fail+0x23c/0x250 [ 1614.689114][T27350] __should_failslab+0x81/0x90 [ 1614.711238][T27350] ? blk_add_partitions+0xaa/0xa80 [ 1614.716350][T27350] should_failslab+0x5/0x20 [ 1614.721026][T27350] kmem_cache_alloc_trace+0x49/0x310 [ 1614.727285][T27350] blk_add_partitions+0xaa/0xa80 [ 1614.732250][T27350] bdev_disk_changed+0x2d3/0x340 [ 1614.737187][T27350] loop_set_status+0x75f/0x7e0 [ 1614.741935][T27350] lo_ioctl+0x758/0x11f0 [ 1614.746212][T27350] ? path_openat+0x19ab/0x20b0 [ 1614.750973][T27350] ? __perf_event_task_sched_out+0xce0/0xd30 [ 1614.756956][T27350] ? putname+0xa5/0xc0 [ 1614.761171][T27350] ? __perf_event_task_sched_in+0x471/0x4c0 [ 1614.767672][T27350] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1614.773034][T27350] ? selinux_file_ioctl+0x8e0/0x970 [ 1614.778213][T27350] ? lo_release+0x120/0x120 [ 1614.782708][T27350] blkdev_ioctl+0x1d0/0x3c0 [ 1614.787211][T27350] block_ioctl+0x6d/0x80 [ 1614.791470][T27350] ? blkdev_iopoll+0x70/0x70 [ 1614.796128][T27350] __se_sys_ioctl+0xcb/0x140 [ 1614.800763][T27350] __x64_sys_ioctl+0x3f/0x50 [ 1614.805423][T27350] do_syscall_64+0x4a/0x90 [ 1614.809910][T27350] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1614.815957][T27350] RIP: 0033:0x466397 [ 1614.819868][T27350] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1614.839726][T27350] RSP: 002b:00007f6f1c761ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 1614.848212][T27350] RAX: ffffffffffffffda RBX: 00007f6f1c761f40 RCX: 0000000000466397 [ 1614.856253][T27350] RDX: 00007f6f1c762050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 1614.865203][T27350] RBP: 00007f6f1c7621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1614.873340][T27350] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f6f1c762050 [ 1614.881293][T27350] R13: 00007ffc111c045f R14: 00007f6f1c762300 R15: 0000000000022000 [ 1614.889252][T27362] CPU: 0 PID: 27362 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1614.899409][T27362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1614.909625][T27362] Call Trace: 11:49:38 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) open(&(0x7f00000018c0)='./bus\x00', 0x0, 0x5) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0xa) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x3f, 0x92, 0xb7, 0x81, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x2}, 0x40, 0x81, 0x0, 0x7, 0x80000001, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x400}, r3, 0x1, r2, 0x1b) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0xc7, 0xc3, 0x4b, 0x1, 0x0, 0x5043, 0x48028, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000200)}, 0x4340, 0x3f, 0xffff, 0x5, 0x6, 0x8, 0x0, 0x0, 0x3, 0x0, 0x1}, r3, 0x7, 0xffffffffffffffff, 0x2) getsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) accept4(r1, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000300)={0x5, {{0xa, 0x4e22, 0x0, @mcast2, 0x9}}, 0x0, 0x7, [{{0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x337a}}, {{0xa, 0x4e22, 0x3, @loopback, 0x7fff}}, {{0xa, 0x4e24, 0x101, @local, 0x80000000}}, {{0xa, 0x4e24, 0xea, @mcast2, 0x5}}, {{0xa, 0x4e24, 0x611, @private1, 0xfc}}, {{0xa, 0x4e21, 0x200, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x100}}, {{0xa, 0x4e20, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff0000}}]}, 0x410) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f00000036c0)={0x77359400}) [ 1614.912933][T27362] dump_stack+0x137/0x19d [ 1614.917270][T27362] should_fail+0x23c/0x250 [ 1614.921686][T27362] ? dup_fd+0x48/0x6e0 [ 1614.925793][T27362] __should_failslab+0x81/0x90 [ 1614.930563][T27362] should_failslab+0x5/0x20 [ 1614.935126][T27362] kmem_cache_alloc+0x46/0x2f0 [ 1614.939976][T27362] dup_fd+0x48/0x6e0 [ 1614.940892][T27373] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1614.943879][T27362] ? __fget_light+0x21b/0x260 [ 1614.943904][T27362] ksys_unshare+0x301/0x710 [ 1614.943923][T27362] __x64_sys_unshare+0x1b/0x20 [ 1614.952084][T27373] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1614.956800][T27362] do_syscall_64+0x4a/0x90 [ 1614.956825][T27362] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1614.985773][T27362] RIP: 0033:0x4665d9 [ 1614.989660][T27362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:49:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x16, 0x0) [ 1615.011285][T27362] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1615.019904][T27362] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1615.027895][T27362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1615.035878][T27362] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1615.043934][T27362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1615.052072][T27362] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 11:49:39 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a0a0000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:39 executing program 4 (fault-call:0 fault-nth:30): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x17, 0x0) 11:49:39 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x9000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:39 executing program 2 (fault-call:6 fault-nth:1): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1615.098932][T27384] ISOFS: Unable to identify CD-ROM format. [ 1615.105024][T27373] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1615.113287][T27373] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1615.114204][T27386] ISOFS: Unable to identify CD-ROM format. 11:49:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x18, 0x0) 11:49:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x15, 0x0) [ 1615.164866][T27397] loop5: detected capacity change from 0 to 1 [ 1615.175854][T27404] FAULT_INJECTION: forcing a failure. [ 1615.175854][T27404] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.188523][T27404] CPU: 0 PID: 27404 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1615.198769][T27404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1615.208815][T27404] Call Trace: [ 1615.212126][T27404] dump_stack+0x137/0x19d [ 1615.216439][T27404] should_fail+0x23c/0x250 [ 1615.220880][T27404] __should_failslab+0x81/0x90 [ 1615.225637][T27404] ? alloc_fdtable+0x7d/0x1b0 [ 1615.230355][T27404] should_failslab+0x5/0x20 [ 1615.235129][T27404] kmem_cache_alloc_trace+0x49/0x310 [ 1615.240480][T27404] alloc_fdtable+0x7d/0x1b0 [ 1615.244974][T27404] dup_fd+0x548/0x6e0 [ 1615.249054][T27404] ? __fget_light+0x21b/0x260 [ 1615.253833][T27404] ksys_unshare+0x301/0x710 [ 1615.258422][T27404] __x64_sys_unshare+0x1b/0x20 [ 1615.263174][T27404] do_syscall_64+0x4a/0x90 [ 1615.267574][T27404] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1615.273640][T27404] RIP: 0033:0x4665d9 [ 1615.277626][T27404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1615.297366][T27404] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1615.305774][T27404] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 11:49:39 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xa000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:39 executing program 2 (fault-call:6 fault-nth:2): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1615.314017][T27404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1615.321993][T27404] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1615.330283][T27404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1615.341038][T27404] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1615.372185][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1615.377420][T32589] loop5: partition table partially beyond EOD, truncated [ 1615.381293][T27401] loop4: detected capacity change from 0 to 1 [ 1615.393781][T27423] FAULT_INJECTION: forcing a failure. [ 1615.393781][T27423] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.402085][T32589] loop5: p1 start 2570 is beyond EOD, truncated [ 1615.406895][T27423] CPU: 0 PID: 27423 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1615.413319][T32589] loop5: p2 size 100663296 extends beyond EOD, [ 1615.423536][T27423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1615.423549][T27423] Call Trace: [ 1615.423556][T27423] dump_stack+0x137/0x19d [ 1615.429776][T32589] truncated [ 1615.432925][T32589] loop5: p3 start 9 is beyond EOD, [ 1615.439817][T27423] should_fail+0x23c/0x250 [ 1615.443114][T32589] truncated [ 1615.443119][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1615.447545][T27423] __should_failslab+0x81/0x90 [ 1615.452807][T32589] loop5: p5 size 100663296 extends beyond EOD, [ 1615.455807][T27423] should_failslab+0x5/0x20 [ 1615.455829][T27423] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1615.460222][T32589] truncated [ 1615.460977][T32589] loop5: p6 start 9 is beyond EOD, [ 1615.463419][T27423] ? __kmalloc_node+0x30/0x40 [ 1615.463443][T27423] __kmalloc_node+0x30/0x40 [ 1615.463462][T27423] kvmalloc_node+0x81/0xf0 [ 1615.469762][T32589] truncated [ 1615.517050][T27423] alloc_fdtable+0xae/0x1b0 [ 1615.521968][T27423] dup_fd+0x548/0x6e0 [ 1615.525974][T27423] ? __fget_light+0x21b/0x260 [ 1615.530679][T27423] ksys_unshare+0x301/0x710 [ 1615.535886][T27423] __x64_sys_unshare+0x1b/0x20 [ 1615.540936][T27423] do_syscall_64+0x4a/0x90 [ 1615.545383][T27423] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1615.551268][T27423] RIP: 0033:0x4665d9 [ 1615.555233][T27423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1615.576121][T27423] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1615.584571][T27423] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1615.593323][T27423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1615.601854][T27423] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1615.609902][T27423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1615.617878][T27423] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1615.627184][T27401] FAULT_INJECTION: forcing a failure. [ 1615.627184][T27401] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.628739][ T614] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1615.641962][T27401] CPU: 0 PID: 27401 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1615.641984][T27401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1615.641993][T27401] Call Trace: [ 1615.642001][T27401] dump_stack+0x137/0x19d [ 1615.653387][T27427] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 1615.664192][T27401] should_fail+0x23c/0x250 [ 1615.664228][T27401] __should_failslab+0x81/0x90 [ 1615.702056][T27401] ? blk_add_partitions+0xaa/0xa80 [ 1615.707416][T27401] should_failslab+0x5/0x20 [ 1615.711913][T27401] kmem_cache_alloc_trace+0x49/0x310 [ 1615.717201][T27401] blk_add_partitions+0xaa/0xa80 [ 1615.722182][T27401] bdev_disk_changed+0x2d3/0x340 [ 1615.727200][T27401] loop_set_status+0x75f/0x7e0 [ 1615.732914][T27401] lo_ioctl+0x758/0x11f0 [ 1615.737403][T27401] ? path_openat+0x19ab/0x20b0 [ 1615.742156][T27401] ? putname+0xa5/0xc0 [ 1615.746226][T27401] ? ___cache_free+0x3c/0x300 [ 1615.750898][T27401] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1615.756359][T27401] ? selinux_file_ioctl+0x8e0/0x970 [ 1615.761637][T27401] ? lo_release+0x120/0x120 [ 1615.766295][T27401] blkdev_ioctl+0x1d0/0x3c0 [ 1615.770871][T27401] block_ioctl+0x6d/0x80 [ 1615.775119][T27401] ? blkdev_iopoll+0x70/0x70 [ 1615.779705][T27401] __se_sys_ioctl+0xcb/0x140 [ 1615.784295][T27401] __x64_sys_ioctl+0x3f/0x50 [ 1615.789006][T27401] do_syscall_64+0x4a/0x90 [ 1615.793411][T27401] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1615.799397][T27401] RIP: 0033:0x466397 [ 1615.803274][T27401] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1615.822916][T27401] RSP: 002b:00007f6f1c761ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 1615.831645][T27401] RAX: ffffffffffffffda RBX: 00007f6f1c761f40 RCX: 0000000000466397 [ 1615.839614][T27401] RDX: 00007f6f1c762050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 1615.847687][T27401] RBP: 00007f6f1c7621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1615.855650][T27401] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f6f1c762050 [ 1615.864136][T27401] R13: 00007ffc111c045f R14: 00007f6f1c762300 R15: 0000000000022000 11:49:39 executing program 2 (fault-call:6 fault-nth:3): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x4, 0x81) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffac}, 0x1c) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x80, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000000010046) creat(&(0x7f0000000040)='./bus\x00', 0x0) 11:49:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x19, 0x0) [ 1615.886610][T27406] ISOFS: Unable to identify CD-ROM format. [ 1615.901187][T27397] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1615.906442][T27397] loop5: partition table partially beyond EOD, truncated [ 1615.915220][T27413] ISOFS: Unable to identify CD-ROM format. [ 1615.921693][T27412] ISOFS: Unable to identify CD-ROM format. [ 1615.933458][T27397] loop5: p1 start 2570 is beyond EOD, truncated [ 1615.939927][T27397] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1615.945276][T27445] FAULT_INJECTION: forcing a failure. [ 1615.945276][T27445] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.959612][T27445] CPU: 1 PID: 27445 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1615.963411][T27397] loop5: p3 start 9 is beyond EOD, [ 1615.970190][T27445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1615.970203][T27445] Call Trace: [ 1615.970210][T27445] dump_stack+0x137/0x19d [ 1615.975459][T27397] truncated [ 1615.986076][T27445] should_fail+0x23c/0x250 [ 1615.986113][T27445] __should_failslab+0x81/0x90 [ 1615.986136][T27445] should_failslab+0x5/0x20 [ 1615.989437][T27397] loop5: p4 size 2 extends beyond EOD, truncated [ 1615.993724][T27397] loop5: p5 size 100663296 extends beyond EOD, [ 1615.993881][T27445] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1615.996994][T27397] truncated [ 1616.004482][T27445] ? __kmalloc_node+0x30/0x40 [ 1616.004513][T27445] __kmalloc_node+0x30/0x40 [ 1616.004531][T27445] kvmalloc_node+0x81/0xf0 [ 1616.011106][T27397] loop5: p6 start 9 is beyond EOD, [ 1616.013759][T27445] alloc_fdtable+0x112/0x1b0 [ 1616.013784][T27445] dup_fd+0x548/0x6e0 [ 1616.020100][T27397] truncated [ 1616.066260][T27445] ? __fget_light+0x21b/0x260 [ 1616.071217][T27445] ksys_unshare+0x301/0x710 [ 1616.075899][T27445] __x64_sys_unshare+0x1b/0x20 [ 1616.080820][T27445] do_syscall_64+0x4a/0x90 [ 1616.085323][T27445] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1616.091482][T27445] RIP: 0033:0x4665d9 [ 1616.095419][T27445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1616.115618][T27445] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1616.124041][T27445] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1616.131995][T27445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1616.139946][T27445] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1616.147899][T27445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1616.155877][T27445] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1616.176858][T27449] ISOFS: Unable to identify CD-ROM format. 11:49:40 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a0b0000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:40 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xb000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:40 executing program 4 (fault-call:0 fault-nth:31): syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1a, 0x0) [ 1616.183439][T27450] ISOFS: Unable to identify CD-ROM format. 11:49:40 executing program 2 (fault-call:6 fault-nth:4): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:40 executing program 0: r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6(0xa, 0x800, 0x5) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0x860004b6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1616.242216][T27478] loop5: detected capacity change from 0 to 1 [ 1616.254970][T27482] loop4: detected capacity change from 0 to 1 [ 1616.272626][T27478] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1616.277883][T27478] loop5: partition table partially beyond EOD, truncated [ 1616.280032][T27488] FAULT_INJECTION: forcing a failure. [ 1616.280032][T27488] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.286543][T27478] loop5: p1 start 2826 is beyond EOD, [ 1616.297599][T27488] CPU: 0 PID: 27488 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1616.297624][T27488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1616.303233][T27478] truncated [ 1616.313346][T27488] Call Trace: [ 1616.313357][T27488] dump_stack+0x137/0x19d [ 1616.323434][T27478] loop5: p2 size 100663296 extends beyond EOD, [ 1616.326504][T27488] should_fail+0x23c/0x250 [ 1616.329769][T27478] truncated [ 1616.348399][T27488] ? create_new_namespaces+0x3c/0x560 [ 1616.353777][T27488] __should_failslab+0x81/0x90 [ 1616.355059][T27478] loop5: p3 start 9 is beyond EOD, [ 1616.358644][T27488] should_failslab+0x5/0x20 [ 1616.358665][T27488] kmem_cache_alloc+0x46/0x2f0 [ 1616.363857][T27478] truncated [ 1616.368594][T27488] create_new_namespaces+0x3c/0x560 [ 1616.373368][T27478] loop5: p4 size 2 extends beyond EOD, [ 1616.376489][T27488] ? security_capable+0x91/0xa0 [ 1616.381767][T27478] truncated [ 1616.387336][T27488] unshare_nsproxy_namespaces+0xe2/0x120 [ 1616.395382][T27478] loop5: p5 size 100663296 extends beyond EOD, [ 1616.400884][T27488] ksys_unshare+0x381/0x710 [ 1616.400908][T27488] __x64_sys_unshare+0x1b/0x20 [ 1616.407211][T27478] truncated [ 1616.411662][T27488] do_syscall_64+0x4a/0x90 [ 1616.411685][T27488] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1616.411704][T27488] RIP: 0033:0x4665d9 [ 1616.411715][T27488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1616.411731][T27488] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1616.411745][T27488] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1616.411754][T27488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1616.423870][T27478] loop5: p6 start 9 is beyond EOD, [ 1616.424691][T27488] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 11:49:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1b, 0x0) [ 1616.424706][T27488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1616.430766][T27478] truncated [ 1616.444551][T27482] FAULT_INJECTION: forcing a failure. [ 1616.444551][T27482] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.454230][T27488] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1616.523906][T27482] CPU: 1 PID: 27482 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1616.534066][T27482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1616.544116][T27482] Call Trace: [ 1616.547387][T27482] dump_stack+0x137/0x19d [ 1616.551709][T27482] should_fail+0x23c/0x250 [ 1616.556156][T27482] __should_failslab+0x81/0x90 [ 1616.560935][T27482] should_failslab+0x5/0x20 [ 1616.565991][T27482] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1616.572094][T27482] ? __get_vm_area_node+0x11b/0x260 [ 1616.577278][T27482] __get_vm_area_node+0x11b/0x260 [ 1616.582343][T27482] __vmalloc_node_range+0xc2/0x5b0 [ 1616.587451][T27482] ? blk_add_partitions+0x136/0xa80 [ 1616.592711][T27482] ? blk_add_partitions+0x136/0xa80 [ 1616.597904][T27482] vzalloc+0x5a/0x70 [ 1616.601876][T27482] ? blk_add_partitions+0x136/0xa80 [ 1616.607262][T27482] blk_add_partitions+0x136/0xa80 [ 1616.612273][T27482] bdev_disk_changed+0x2d3/0x340 [ 1616.617216][T27482] loop_set_status+0x75f/0x7e0 [ 1616.621962][T27482] lo_ioctl+0x758/0x11f0 [ 1616.626184][T27482] ? path_openat+0x19ab/0x20b0 [ 1616.631150][T27482] ? putname+0xa5/0xc0 [ 1616.635233][T27482] ? ___cache_free+0x3c/0x300 [ 1616.640033][T27482] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1616.645398][T27482] ? selinux_file_ioctl+0x8e0/0x970 [ 1616.650580][T27482] ? lo_release+0x120/0x120 [ 1616.655064][T27482] blkdev_ioctl+0x1d0/0x3c0 [ 1616.659552][T27482] block_ioctl+0x6d/0x80 [ 1616.663778][T27482] ? blkdev_iopoll+0x70/0x70 [ 1616.668400][T27482] __se_sys_ioctl+0xcb/0x140 [ 1616.672989][T27482] __x64_sys_ioctl+0x3f/0x50 [ 1616.678021][T27482] do_syscall_64+0x4a/0x90 [ 1616.682433][T27482] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1616.688443][T27482] RIP: 0033:0x466397 [ 1616.692323][T27482] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1616.711913][T27482] RSP: 002b:00007f6f1c761ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 1616.720405][T27482] RAX: ffffffffffffffda RBX: 00007f6f1c761f40 RCX: 0000000000466397 [ 1616.728392][T27482] RDX: 00007f6f1c762050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 1616.736363][T27482] RBP: 00007f6f1c7621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1616.744418][T27482] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f6f1c762050 [ 1616.752553][T27482] R13: 00007ffc111c045f R14: 00007f6f1c762300 R15: 0000000000022000 [ 1616.760620][T27482] syz-executor.4: vmalloc size 32768 allocation failure: vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1616.776742][T27502] new mount options do not match the existing superblock, will be ignored 11:49:40 executing program 2 (fault-call:6 fault-nth:5): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1c, 0x0) [ 1616.776968][T27482] CPU: 1 PID: 27482 Comm: syz-executor.4 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1616.795613][T27482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1616.805692][T27482] Call Trace: [ 1616.808977][T27482] dump_stack+0x137/0x19d [ 1616.813323][T27482] warn_alloc+0x105/0x160 [ 1616.817656][T27482] __vmalloc_node_range+0x222/0x5b0 [ 1616.821229][T27502] new mount options do not match the existing superblock, will be ignored [ 1616.822983][T27482] ? blk_add_partitions+0x136/0xa80 [ 1616.836699][T27482] vzalloc+0x5a/0x70 [ 1616.840667][T27482] ? blk_add_partitions+0x136/0xa80 [ 1616.845879][T27482] blk_add_partitions+0x136/0xa80 [ 1616.850911][T27482] bdev_disk_changed+0x2d3/0x340 [ 1616.855850][T27482] loop_set_status+0x75f/0x7e0 [ 1616.857050][T27491] ISOFS: Unable to identify CD-ROM format. [ 1616.860626][T27482] lo_ioctl+0x758/0x11f0 [ 1616.860646][T27482] ? path_openat+0x19ab/0x20b0 [ 1616.876123][T27482] ? putname+0xa5/0xc0 [ 1616.880216][T27482] ? ___cache_free+0x3c/0x300 [ 1616.882351][T27512] FAULT_INJECTION: forcing a failure. [ 1616.882351][T27512] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.884946][T27482] ? blkdev_common_ioctl+0x9c3/0x1040 [ 1616.903002][T27482] ? selinux_file_ioctl+0x8e0/0x970 [ 1616.908215][T27482] ? lo_release+0x120/0x120 [ 1616.912820][T27482] blkdev_ioctl+0x1d0/0x3c0 [ 1616.917386][T27482] block_ioctl+0x6d/0x80 [ 1616.921618][T27482] ? blkdev_iopoll+0x70/0x70 [ 1616.926190][T27482] __se_sys_ioctl+0xcb/0x140 [ 1616.930765][T27482] __x64_sys_ioctl+0x3f/0x50 [ 1616.935353][T27482] do_syscall_64+0x4a/0x90 [ 1616.939755][T27482] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1616.945704][T27482] RIP: 0033:0x466397 [ 1616.949578][T27482] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1616.969175][T27482] RSP: 002b:00007f6f1c761ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 1616.977658][T27482] RAX: ffffffffffffffda RBX: 00007f6f1c761f40 RCX: 0000000000466397 [ 1616.985702][T27482] RDX: 00007f6f1c762050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 1616.993655][T27482] RBP: 00007f6f1c7621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1617.002317][T27482] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f6f1c762050 [ 1617.010425][T27482] R13: 00007ffc111c045f R14: 00007f6f1c762300 R15: 0000000000022000 [ 1617.018405][T27482] Mem-Info: [ 1617.018441][T27512] CPU: 0 PID: 27512 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1617.021494][T27482] active_anon:200 inactive_anon:75185 isolated_anon:0 [ 1617.021494][T27482] active_file:10770 inactive_file:58332 isolated_file:0 [ 1617.021494][T27482] unevictable:0 dirty:192 writeback:58 [ 1617.021494][T27482] slab_reclaimable:4470 slab_unreclaimable:6941 [ 1617.021494][T27482] mapped:64783 shmem:15052 pagetables:4687 bounce:0 [ 1617.021494][T27482] free:1777881 free_pcp:609 free_cma:0 [ 1617.031640][T27512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1617.031651][T27512] Call Trace: [ 1617.031656][T27512] dump_stack+0x137/0x19d [ 1617.072184][T27482] Node 0 active_anon:800kB inactive_anon:300740kB active_file:43080kB inactive_file:233328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:259132kB dirty:768kB writeback:232kB shmem:60208kB writeback_tmp:0kB kernel_stack:3856kB pagetables:18748kB all_unreclaimable? no [ 1617.082389][T27512] should_fail+0x23c/0x250 [ 1617.082416][T27512] __should_failslab+0x81/0x90 [ 1617.085691][T27482] Node 0 [ 1617.089990][T27512] ? copy_ipcs+0xe4/0x360 [ 1617.116719][T27482] DMA free:15908kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1617.121104][T27512] should_failslab+0x5/0x20 [ 1617.125883][T27482] lowmem_reserve[]: [ 1617.128803][T27512] kmem_cache_alloc_trace+0x49/0x310 [ 1617.133148][T27482] 0 [ 1617.158445][T27512] ? inc_ucount+0x389/0x4c0 [ 1617.162943][T27482] 2938 [ 1617.166714][T27512] copy_ipcs+0xe4/0x360 [ 1617.171998][T27482] 7916 [ 1617.174555][T27512] create_new_namespaces+0x137/0x560 [ 1617.179032][T27482] 7916 [ 1617.181767][T27512] ? security_capable+0x91/0xa0 [ 1617.185930][T27482] [ 1617.185935][T27482] Node 0 [ 1617.188666][T27512] unshare_nsproxy_namespaces+0xe2/0x120 [ 1617.193936][T27482] DMA32 free:3012112kB min:4220kB low:7228kB high:10236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:3013528kB mlocked:0kB bounce:0kB free_pcp:1416kB local_pcp:0kB free_cma:0kB [ 1617.196661][T27512] ksys_unshare+0x381/0x710 [ 1617.201489][T27482] lowmem_reserve[]: 0 [ 1617.204226][T27512] __x64_sys_unshare+0x1b/0x20 [ 1617.204245][T27512] do_syscall_64+0x4a/0x90 [ 1617.207149][T27482] 0 4978 [ 1617.212765][T27512] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1617.239841][T27482] 4978 [ 1617.244305][T27512] RIP: 0033:0x4665d9 [ 1617.244319][T27512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.248359][T27482] [ 1617.253090][T27512] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1617.253108][T27512] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1617.257577][T27482] Node 0 Normal free:4083504kB min:7152kB low:12248kB high:17344kB reserved_highatomic:0KB active_anon:800kB inactive_anon:300740kB active_file:43080kB inactive_file:233328kB unevictable:0kB writepending:884kB present:5242880kB managed:5098252kB mlocked:0kB bounce:0kB free_pcp:1020kB local_pcp:296kB free_cma:0kB [ 1617.260501][T27512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1617.266382][T27482] lowmem_reserve[]: [ 1617.269284][T27512] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1617.273168][T27482] 0 [ 1617.293363][T27512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1617.293376][T27512] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1617.295691][T27482] 0 0 0 [ 1617.383573][T27482] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 1617.398205][T27482] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 5*16kB (M) 5*32kB (M) 4*64kB (M) 6*128kB (M) 5*256kB (M) 6*512kB (M) 2*1024kB (M) 1*2048kB (M) 733*4096kB (M) = 3012112kB [ 1617.414297][T27482] Node 0 Normal: 76*4kB (E) 58*8kB (ME) 12*16kB (UME) 51*32kB (UME) 112*64kB (UME) 50*128kB (UME) 22*256kB (UME) 7*512kB (ME) 17*1024kB (UM) 9*2048kB (UM) 982*4096kB (UM) = 4083488kB [ 1617.432489][T27482] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1617.440326][T27524] FAULT_INJECTION: forcing a failure. 11:49:41 executing program 0: r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6(0xa, 0x800, 0x5) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0x860004b6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 11:49:41 executing program 2 (fault-call:6 fault-nth:6): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1617.440326][T27524] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.441788][T27482] 36789 total pagecache pages [ 1617.441795][T27482] 0 pages in swap cache [ 1617.441800][T27482] Swap cache stats: add 0, delete 0, find 0/0 [ 1617.454384][T27524] CPU: 0 PID: 27524 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1617.459022][T27482] Free swap = 0kB [ 1617.459029][T27482] Total swap = 0kB [ 1617.463150][T27524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1617.463160][T27524] Call Trace: [ 1617.463167][T27524] dump_stack+0x137/0x19d [ 1617.469232][T27482] 2097051 pages RAM [ 1617.469239][T27482] 0 pages HighMem/MovableOnly [ 1617.469244][T27482] 65129 pages reserved [ 1617.479448][T27524] should_fail+0x23c/0x250 [ 1617.479471][T27524] __should_failslab+0x81/0x90 [ 1617.527971][T27524] ? alloc_fs_context+0x46/0x500 [ 1617.533215][T27524] should_failslab+0x5/0x20 [ 1617.537790][T27524] kmem_cache_alloc_trace+0x49/0x310 [ 1617.543431][T27524] alloc_fs_context+0x46/0x500 [ 1617.548219][T27524] fs_context_for_mount+0x1d/0x20 [ 1617.553467][T27524] mq_init_ns+0xa8/0x310 [ 1617.557712][T27524] copy_ipcs+0x211/0x360 [ 1617.561956][T27524] create_new_namespaces+0x137/0x560 [ 1617.567391][T27524] ? security_capable+0x91/0xa0 [ 1617.573085][T27524] unshare_nsproxy_namespaces+0xe2/0x120 [ 1617.579870][T27524] ksys_unshare+0x381/0x710 [ 1617.584541][T27524] __x64_sys_unshare+0x1b/0x20 [ 1617.589354][T27524] do_syscall_64+0x4a/0x90 [ 1617.593763][T27524] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1617.600183][T27524] RIP: 0033:0x4665d9 [ 1617.608237][T27524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.628168][T27524] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1617.636592][T27524] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 11:49:41 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a0c0000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1617.644941][T27524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1617.653119][T27524] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1617.661349][T27524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1617.669502][T27524] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1617.687339][T27506] ISOFS: Unable to identify CD-ROM format. 11:49:41 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xc000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:41 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1617.702612][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1617.707852][T32589] loop4: partition table partially beyond EOD, truncated [ 1617.711735][T27520] ISOFS: Unable to identify CD-ROM format. [ 1617.724827][T27518] ISOFS: Unable to identify CD-ROM format. [ 1617.740852][T32589] loop4: p1 start 10 is beyond EOD, truncated 11:49:41 executing program 2 (fault-call:6 fault-nth:7): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:41 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xd000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1617.747030][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1617.763520][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1617.774173][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1617.779152][T27546] FAULT_INJECTION: forcing a failure. [ 1617.779152][T27546] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.780689][T27535] loop5: detected capacity change from 0 to 1 [ 1617.793111][T27546] CPU: 0 PID: 27546 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1617.804467][T32589] loop4: p5 size 100663296 extends beyond EOD, [ 1617.809308][T27546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1617.809321][T27546] Call Trace: [ 1617.809329][T27546] dump_stack+0x137/0x19d [ 1617.815610][T32589] truncated [ 1617.825626][T27546] should_fail+0x23c/0x250 [ 1617.830976][T27548] new mount options do not match the existing superblock, will be ignored [ 1617.833264][T27546] __should_failslab+0x81/0x90 [ 1617.833296][T27546] ? mqueue_init_fs_context+0x35/0x250 [ 1617.839463][T32589] loop4: p6 start 9 is beyond EOD, [ 1617.840830][T27546] should_failslab+0x5/0x20 [ 1617.840851][T27546] kmem_cache_alloc_trace+0x49/0x310 [ 1617.849374][T32589] truncated [ 1617.854090][T27546] mqueue_init_fs_context+0x35/0x250 [ 1617.882801][T27546] ? do_mq_getsetattr+0x300/0x300 [ 1617.887939][T27546] alloc_fs_context+0x419/0x500 [ 1617.892835][T27546] fs_context_for_mount+0x1d/0x20 [ 1617.897846][T27546] mq_init_ns+0xa8/0x310 [ 1617.902088][T27546] copy_ipcs+0x211/0x360 [ 1617.906426][T27546] create_new_namespaces+0x137/0x560 [ 1617.911712][T27546] ? security_capable+0x91/0xa0 [ 1617.916565][T27546] unshare_nsproxy_namespaces+0xe2/0x120 [ 1617.922195][T27546] ksys_unshare+0x381/0x710 [ 1617.926717][T27546] __x64_sys_unshare+0x1b/0x20 [ 1617.931480][T27546] do_syscall_64+0x4a/0x90 [ 1617.936010][T27546] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1617.941995][T27546] RIP: 0033:0x4665d9 [ 1617.945914][T27546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.965565][T27546] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1617.973977][T27546] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1617.981948][T27546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1617.990020][T27546] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 11:49:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1d, 0x0) [ 1617.998065][T27546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1618.009707][T27546] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1618.032182][T27535] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1618.037503][T27535] loop5: partition table partially beyond EOD, truncated 11:49:42 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x0, &(0x7f0000000140)}) clone3(&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) fcntl$setown(r0, 0x8, r1) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x200}, 0x1c) 11:49:42 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xe000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1618.051596][T27535] loop5: p1 start 3082 is beyond EOD, truncated [ 1618.057967][T27535] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1618.065968][T27535] loop5: p3 start 9 is beyond EOD, truncated [ 1618.071998][T27535] loop5: p4 size 2 extends beyond EOD, truncated [ 1618.082278][T27557] ISOFS: Unable to identify CD-ROM format. [ 1618.092290][T27535] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1e, 0x0) 11:49:42 executing program 2 (fault-call:6 fault-nth:8): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1618.097117][T27558] ISOFS: Unable to identify CD-ROM format. [ 1618.109395][T27535] loop5: p6 start 9 is beyond EOD, truncated [ 1618.127429][T27562] loop4: detected capacity change from 0 to 1 [ 1618.143805][T27587] FAULT_INJECTION: forcing a failure. [ 1618.143805][T27587] name failslab, interval 1, probability 0, space 0, times 0 [ 1618.156660][T27587] CPU: 0 PID: 27587 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1618.166822][T27587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1618.177005][T27587] Call Trace: [ 1618.180529][T27587] dump_stack+0x137/0x19d [ 1618.184877][T27587] should_fail+0x23c/0x250 [ 1618.189295][T27587] __should_failslab+0x81/0x90 [ 1618.194118][T27587] ? alloc_super+0x3a/0x520 [ 1618.198625][T27587] should_failslab+0x5/0x20 [ 1618.203193][T27587] kmem_cache_alloc_trace+0x49/0x310 [ 1618.208623][T27587] alloc_super+0x3a/0x520 [ 1618.213066][T27587] ? test_single_super+0x10/0x10 [ 1618.218016][T27587] sget_fc+0x1cf/0x4e0 [ 1618.222086][T27587] ? kill_litter_super+0x60/0x60 [ 1618.224654][T27603] netlink: 35877 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1618.227029][T27587] ? mqueue_get_tree+0x40/0x40 [ 1618.227058][T27587] get_tree_keyed+0x3f/0x120 [ 1618.237339][T27603] serio: Serial port pts0 [ 1618.241369][T27587] mqueue_get_tree+0x32/0x40 [ 1618.241398][T27587] vfs_get_tree+0x4a/0x1a0 [ 1618.259352][T27587] fc_mount+0x12/0x60 [ 1618.263438][T27587] mq_init_ns+0x26d/0x310 [ 1618.267815][T27587] copy_ipcs+0x211/0x360 [ 1618.272372][T27587] create_new_namespaces+0x137/0x560 [ 1618.277644][T27587] ? security_capable+0x91/0xa0 [ 1618.282658][T27587] unshare_nsproxy_namespaces+0xe2/0x120 [ 1618.288363][T27587] ksys_unshare+0x381/0x710 [ 1618.292904][T27587] __x64_sys_unshare+0x1b/0x20 [ 1618.297650][T27587] do_syscall_64+0x4a/0x90 [ 1618.302066][T27587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1618.307950][T27587] RIP: 0033:0x4665d9 [ 1618.311885][T27587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1618.331994][T27587] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1618.340394][T27587] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 11:49:42 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x1800003, 0x13, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00f9f500"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="769100001400010085be0000000f00000a04000001000000000301"], 0x1}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x268, 0x1, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "aa01bc9273e59ad1264c1151212c8c4aa3972b4716ec963816e20ae235910631", "b9b9382af87ce581467825867577bf7d78079be2e994d2accbdeb9db6c349e4b", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8, 0x9}]}}}]}, 0x268}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0xa2e) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) ioctl$TCSETSF(r3, 0x540a, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 11:49:42 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1618.348352][T27587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1618.356378][T27587] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1618.364364][T27587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1618.373436][T27587] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1618.392415][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1618.397637][T32589] loop4: partition table partially beyond EOD, truncated [ 1618.408421][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1618.414626][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1618.415228][T27535] loop5: detected capacity change from 0 to 1 [ 1618.422529][T27603] netlink: 35877 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1618.435445][T27583] ISOFS: Unable to identify CD-ROM format. [ 1618.444427][T27590] ISOFS: Unable to identify CD-ROM format. [ 1618.448703][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1618.456490][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1618.463978][T27535] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1618.469593][T27535] loop5: partition table partially beyond EOD, truncated [ 1618.476957][T27535] loop5: p1 start 3082 is beyond EOD, truncated [ 1618.483266][T27535] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1618.490676][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1618.490981][T27535] loop5: p3 start 9 is beyond EOD, truncated [ 1618.503892][T27535] loop5: p4 size 2 extends beyond EOD, truncated [ 1618.511107][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1618.511338][T27535] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1618.524814][T27535] loop5: p6 start 9 is beyond EOD, truncated [ 1618.526010][T27562] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1618.536136][T27562] loop4: partition table partially beyond EOD, truncated [ 1618.543475][T27562] loop4: p1 start 10 is beyond EOD, truncated [ 1618.549732][T27562] loop4: p2 size 100663296 extends beyond EOD, truncated 11:49:42 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a0d0000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:42 executing program 2 (fault-call:6 fault-nth:9): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1618.557375][T27562] loop4: p3 start 9 is beyond EOD, truncated [ 1618.563679][T27562] loop4: p4 size 2 extends beyond EOD, truncated [ 1618.570690][T27562] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1618.578196][T27562] loop4: p6 start 9 is beyond EOD, truncated [ 1618.597952][T27640] FAULT_INJECTION: forcing a failure. [ 1618.597952][T27640] name failslab, interval 1, probability 0, space 0, times 0 [ 1618.610817][T27640] CPU: 1 PID: 27640 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1618.621301][T27640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1618.631638][T27640] Call Trace: [ 1618.634910][T27640] dump_stack+0x137/0x19d [ 1618.639222][T27640] should_fail+0x23c/0x250 [ 1618.643816][T27640] ? kzalloc+0x1d/0x30 [ 1618.647867][T27640] __should_failslab+0x81/0x90 [ 1618.652611][T27640] should_failslab+0x5/0x20 [ 1618.657193][T27640] __kmalloc+0x66/0x340 [ 1618.661390][T27640] kzalloc+0x1d/0x30 [ 1618.665463][T27640] security_sb_alloc+0x3c/0x180 [ 1618.670532][T27640] alloc_super+0x10b/0x520 [ 1618.675338][T27640] ? test_single_super+0x10/0x10 [ 1618.680554][T27640] sget_fc+0x1cf/0x4e0 [ 1618.684611][T27640] ? kill_litter_super+0x60/0x60 [ 1618.689560][T27640] ? mqueue_get_tree+0x40/0x40 [ 1618.694418][T27640] get_tree_keyed+0x3f/0x120 [ 1618.699004][T27640] mqueue_get_tree+0x32/0x40 [ 1618.703579][T27640] vfs_get_tree+0x4a/0x1a0 [ 1618.708027][T27640] fc_mount+0x12/0x60 [ 1618.712006][T27640] mq_init_ns+0x26d/0x310 [ 1618.716367][T27640] copy_ipcs+0x211/0x360 [ 1618.720964][T27640] create_new_namespaces+0x137/0x560 [ 1618.726353][T27640] ? security_capable+0x91/0xa0 [ 1618.731192][T27640] unshare_nsproxy_namespaces+0xe2/0x120 [ 1618.736832][T27640] ksys_unshare+0x381/0x710 [ 1618.741672][T27640] __x64_sys_unshare+0x1b/0x20 [ 1618.746462][T27640] do_syscall_64+0x4a/0x90 [ 1618.750967][T27640] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1618.756893][T27640] RIP: 0033:0x4665d9 [ 1618.760768][T27640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1618.780684][T27640] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1618.789110][T27640] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1618.797260][T27640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1618.805319][T27640] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1618.813583][T27640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1618.821626][T27640] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 11:49:42 executing program 4: syz_read_part_table(0x2, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:42 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x11000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:42 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x1800003, 0x13, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00f9f500"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="769100001400010085be0000000f00000a04000001000000000301"], 0x1}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x268, 0x1, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "aa01bc9273e59ad1264c1151212c8c4aa3972b4716ec963816e20ae235910631", "b9b9382af87ce581467825867577bf7d78079be2e994d2accbdeb9db6c349e4b", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8, 0x9}]}}}]}, 0x268}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0xa2e) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) ioctl$TCSETSF(r3, 0x540a, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 11:49:42 executing program 2 (fault-call:6 fault-nth:10): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x21, 0x0) [ 1618.858655][T27651] loop5: detected capacity change from 0 to 1 [ 1618.895101][T27662] netlink: 35877 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1618.905138][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1618.905530][T27662] serio: Serial port pts0 [ 1618.910923][T32589] loop5: partition table partially beyond EOD, truncated [ 1618.923057][T27663] FAULT_INJECTION: forcing a failure. [ 1618.923057][T27663] name failslab, interval 1, probability 0, space 0, times 0 [ 1618.940146][T27663] CPU: 0 PID: 27663 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1618.950344][T27663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1618.960459][T27663] Call Trace: [ 1618.963762][T27663] dump_stack+0x137/0x19d [ 1618.968622][T27663] should_fail+0x23c/0x250 [ 1618.968671][T32589] loop5: p1 start 3338 is beyond EOD, [ 1618.973466][T27663] ? __list_lru_init+0x70/0x680 [ 1618.973489][T27663] __should_failslab+0x81/0x90 [ 1618.979215][T32589] truncated [ 1618.984027][T27663] should_failslab+0x5/0x20 [ 1618.984059][T27663] __kmalloc+0x66/0x340 [ 1618.988798][T32589] loop5: p2 size 100663296 extends beyond EOD, [ 1618.991886][T27663] ? prealloc_memcg_shrinker+0x444/0x460 [ 1618.996391][T32589] truncated [ 1619.000505][T27663] __list_lru_init+0x70/0x680 [ 1619.020259][T27663] alloc_super+0x490/0x520 [ 1619.024715][T27663] ? test_single_super+0x10/0x10 [ 1619.029678][T27663] sget_fc+0x1cf/0x4e0 [ 1619.033739][T27663] ? kill_litter_super+0x60/0x60 [ 1619.038688][T27663] ? mqueue_get_tree+0x40/0x40 [ 1619.043559][T27663] get_tree_keyed+0x3f/0x120 [ 1619.048309][T27663] mqueue_get_tree+0x32/0x40 [ 1619.052907][T27663] vfs_get_tree+0x4a/0x1a0 [ 1619.057371][T27663] fc_mount+0x12/0x60 [ 1619.061348][T27663] mq_init_ns+0x26d/0x310 [ 1619.065678][T27663] copy_ipcs+0x211/0x360 [ 1619.069940][T27663] create_new_namespaces+0x137/0x560 [ 1619.072468][T32589] loop5: p3 start 9 is beyond EOD, [ 1619.075292][T27663] ? security_capable+0x91/0xa0 [ 1619.075320][T27663] unshare_nsproxy_namespaces+0xe2/0x120 [ 1619.080706][T32589] truncated [ 1619.080712][T32589] loop5: p4 size 2 extends beyond EOD, [ 1619.085530][T27663] ksys_unshare+0x381/0x710 [ 1619.085548][T27663] __x64_sys_unshare+0x1b/0x20 11:49:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x22, 0x0) 11:49:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x23, 0x0) 11:49:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x24, 0x0) 11:49:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x25, 0x0) [ 1619.091281][T32589] truncated [ 1619.112511][T27663] do_syscall_64+0x4a/0x90 [ 1619.117033][T27663] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1619.122943][T27663] RIP: 0033:0x4665d9 [ 1619.123716][T32589] loop5: p5 size 100663296 extends beyond EOD, [ 1619.126833][T27663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:49:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x26, 0x0) [ 1619.126850][T27663] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1619.126869][T27663] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1619.133104][T32589] truncated [ 1619.153070][T27663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1619.153089][T27663] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1619.153100][T27663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1619.153110][T27663] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1619.156115][T27666] loop4: detected capacity change from 0 to 1 [ 1619.220913][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1619.228879][T27651] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1619.232343][T27666] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1619.234129][T27651] loop5: partition table partially beyond EOD, truncated [ 1619.239282][T27666] loop4: partition table partially beyond EOD, truncated [ 1619.239349][T27666] loop4: p1 start 10 is beyond EOD, [ 1619.253128][T27651] loop5: p1 start 3338 is beyond EOD, [ 1619.253671][T27666] truncated [ 1619.258964][T27651] truncated [ 1619.258969][T27651] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1619.261618][T27651] loop5: p3 start 9 is beyond EOD, [ 1619.264484][T27666] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1619.267667][T27651] truncated [ 1619.267673][T27651] loop5: p4 size 2 extends beyond EOD, [ 1619.273955][T27666] loop4: p3 start 9 is beyond EOD, [ 1619.278005][T27651] truncated [ 1619.283201][T27666] truncated [ 1619.305162][T27651] loop5: p5 size 100663296 extends beyond EOD, [ 1619.307220][T27666] loop4: p4 size 2 extends beyond EOD, [ 1619.310339][T27651] truncated [ 1619.315364][T27651] loop5: p6 start 9 is beyond EOD, [ 1619.316591][T27666] truncated [ 1619.322104][T27651] truncated [ 1619.337715][T27666] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1619.345879][T27666] loop4: p6 start 9 is beyond EOD, truncated [ 1619.376562][T27651] loop5: detected capacity change from 0 to 1 [ 1619.412551][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1619.412622][T27666] loop4: detected capacity change from 0 to 1 [ 1619.417966][T32589] loop5: partition table partially beyond EOD, truncated [ 1619.418100][T32589] loop5: p1 start 3338 is beyond EOD, truncated [ 1619.437508][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1619.447345][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1619.453358][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1619.459939][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1619.462405][T27666] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1619.467469][T32589] loop5: p6 start 9 is beyond EOD, [ 1619.472295][T27666] loop4: partition table partially beyond EOD, truncated [ 1619.473375][T27666] loop4: p1 start 10 is beyond EOD, [ 1619.477926][T32589] truncated [ 1619.493630][T27666] truncated [ 1619.496727][T27666] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1619.504949][T27651] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1619.505317][T27666] loop4: p3 start 9 is beyond EOD, [ 1619.510230][T27651] loop5: partition table partially beyond EOD, truncated [ 1619.510349][T27651] loop5: p1 start 3338 is beyond EOD, [ 1619.515475][T27666] truncated [ 1619.522490][T27651] truncated [ 1619.527914][T27666] loop4: p4 size 2 extends beyond EOD, truncated [ 1619.530606][T27666] loop4: p5 size 100663296 extends beyond EOD, [ 1619.531062][T27651] loop5: p2 size 100663296 extends beyond EOD, [ 1619.534200][T27666] truncated [ 1619.535488][T27666] loop4: p6 start 9 is beyond EOD, [ 1619.540507][T27651] truncated [ 1619.541180][T27651] loop5: p3 start 9 is beyond EOD, [ 1619.547161][T27666] truncated [ 1619.574158][T27651] truncated 11:49:43 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x12000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x27, 0x0) 11:49:43 executing program 2 (fault-call:6 fault-nth:11): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:43 executing program 4: syz_read_part_table(0x3, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:43 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a0e0000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:43 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x1800003, 0x13, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00f9f500"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="769100001400010085be0000000f00000a04000001000000000301"], 0x1}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x268, 0x1, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "aa01bc9273e59ad1264c1151212c8c4aa3972b4716ec963816e20ae235910631", "b9b9382af87ce581467825867577bf7d78079be2e994d2accbdeb9db6c349e4b", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8, 0x9}]}}}]}, 0x268}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0xa2e) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) ioctl$TCSETSF(r3, 0x540a, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) [ 1619.577246][T27651] loop5: p4 size 2 extends beyond EOD, truncated [ 1619.584305][T27651] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1619.591900][T27651] loop5: p6 start 9 is beyond EOD, truncated [ 1619.628596][T27756] FAULT_INJECTION: forcing a failure. [ 1619.628596][T27756] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.641331][T27756] CPU: 1 PID: 27756 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1619.651661][T27756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1619.661914][T27756] Call Trace: [ 1619.665196][T27756] dump_stack+0x137/0x19d [ 1619.669554][T27756] should_fail+0x23c/0x250 11:49:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x28, 0x0) 11:49:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x29, 0x0) [ 1619.671675][T27763] netlink: 35877 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1619.673978][T27756] __should_failslab+0x81/0x90 [ 1619.674006][T27756] should_failslab+0x5/0x20 [ 1619.685417][T27763] serio: Serial port pts0 [ 1619.688294][T27756] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1619.702931][T27756] ? __list_lru_init+0x70/0x680 [ 1619.707788][T27756] ? __kmalloc_node+0x30/0x40 [ 1619.712654][T27756] __kmalloc_node+0x30/0x40 [ 1619.717172][T27756] kvmalloc_node+0x81/0xf0 [ 1619.721664][T27756] __list_lru_init+0x2d7/0x680 11:49:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x2a, 0x0) 11:49:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x48, 0x0) [ 1619.726440][T27756] alloc_super+0x490/0x520 [ 1619.730847][T27756] ? test_single_super+0x10/0x10 [ 1619.735782][T27756] sget_fc+0x1cf/0x4e0 [ 1619.739850][T27756] ? kill_litter_super+0x60/0x60 [ 1619.744836][T27756] ? mqueue_get_tree+0x40/0x40 [ 1619.749715][T27756] get_tree_keyed+0x3f/0x120 [ 1619.754500][T27756] mqueue_get_tree+0x32/0x40 [ 1619.759097][T27756] vfs_get_tree+0x4a/0x1a0 [ 1619.763625][T27756] fc_mount+0x12/0x60 [ 1619.767608][T27756] mq_init_ns+0x26d/0x310 [ 1619.771962][T27756] copy_ipcs+0x211/0x360 11:49:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x4c, 0x0) [ 1619.776213][T27756] create_new_namespaces+0x137/0x560 [ 1619.781598][T27756] ? security_capable+0x91/0xa0 [ 1619.786491][T27756] unshare_nsproxy_namespaces+0xe2/0x120 [ 1619.792131][T27756] ksys_unshare+0x381/0x710 [ 1619.796738][T27756] __x64_sys_unshare+0x1b/0x20 [ 1619.801742][T27756] do_syscall_64+0x4a/0x90 [ 1619.806167][T27756] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1619.812199][T27756] RIP: 0033:0x4665d9 [ 1619.816220][T27756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1619.835966][T27756] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1619.844633][T27756] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1619.852906][T27756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1619.860871][T27756] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1619.868851][T27756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 11:49:43 executing program 0: r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) lseek(r1, 0x6080, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace_dev_match', 0x0, 0x0) preadv(r2, &(0x7f0000001840)=[{&(0x7f0000000200)=""/251, 0xfb}], 0x1, 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000000)) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 11:49:43 executing program 2 (fault-call:6 fault-nth:12): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:43 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x20000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1619.876879][T27756] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1619.917801][T27800] FAULT_INJECTION: forcing a failure. [ 1619.917801][T27800] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.931300][T27800] CPU: 1 PID: 27800 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1619.941712][T27800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1619.953241][T27800] Call Trace: [ 1619.956505][T27800] dump_stack+0x137/0x19d [ 1619.960949][T27800] should_fail+0x23c/0x250 [ 1619.965400][T27800] ? __list_lru_init+0x70/0x680 [ 1619.970262][T27800] __should_failslab+0x81/0x90 [ 1619.975060][T27800] should_failslab+0x5/0x20 [ 1619.979631][T27800] __kmalloc+0x66/0x340 [ 1619.983792][T27800] __list_lru_init+0x70/0x680 [ 1619.988449][T27800] alloc_super+0x4bf/0x520 [ 1619.992957][T27800] ? test_single_super+0x10/0x10 [ 1619.997874][T27800] sget_fc+0x1cf/0x4e0 [ 1620.002725][T27800] ? kill_litter_super+0x60/0x60 [ 1620.007677][T27800] ? mqueue_get_tree+0x40/0x40 [ 1620.012434][T27800] get_tree_keyed+0x3f/0x120 [ 1620.017009][T27800] mqueue_get_tree+0x32/0x40 [ 1620.021640][T27800] vfs_get_tree+0x4a/0x1a0 [ 1620.026038][T27800] fc_mount+0x12/0x60 [ 1620.030094][T27800] mq_init_ns+0x26d/0x310 [ 1620.034525][T27800] copy_ipcs+0x211/0x360 [ 1620.038944][T27800] create_new_namespaces+0x137/0x560 [ 1620.044351][T27800] ? security_capable+0x91/0xa0 [ 1620.049203][T27800] unshare_nsproxy_namespaces+0xe2/0x120 [ 1620.054966][T27800] ksys_unshare+0x381/0x710 [ 1620.059550][T27800] __x64_sys_unshare+0x1b/0x20 [ 1620.064295][T27800] do_syscall_64+0x4a/0x90 [ 1620.068757][T27800] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1620.074645][T27800] RIP: 0033:0x4665d9 [ 1620.078515][T27800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1620.098209][T27800] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1620.106639][T27800] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1620.114712][T27800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1620.122739][T27800] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1620.131041][T27800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1620.139000][T27800] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1620.169511][T27785] ISOFS: Unable to identify CD-ROM format. 11:49:44 executing program 0: r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) lseek(r1, 0x6080, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace_dev_match', 0x0, 0x0) preadv(r2, &(0x7f0000001840)=[{&(0x7f0000000200)=""/251, 0xfb}], 0x1, 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000000)) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) [ 1620.181469][T27790] ISOFS: Unable to identify CD-ROM format. [ 1620.189782][T27789] ISOFS: Unable to identify CD-ROM format. [ 1620.238568][T27824] loop5: detected capacity change from 0 to 1 [ 1620.244982][T27825] loop4: detected capacity change from 0 to 1 [ 1620.272675][T27824] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1620.277929][T27824] loop5: partition table partially beyond EOD, truncated [ 1620.284874][T27825] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1620.285452][T27824] loop5: p1 start 3594 is beyond EOD, truncated [ 1620.290285][T27825] loop4: partition table partially beyond EOD, [ 1620.296572][T27824] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1620.302850][T27825] truncated [ 1620.304122][T27825] loop4: p1 start 10 is beyond EOD, [ 1620.311232][T27824] loop5: p3 start 9 is beyond EOD, [ 1620.313140][T27825] truncated [ 1620.313145][T27825] loop4: p2 size 100663296 extends beyond EOD, [ 1620.318489][T27824] truncated [ 1620.318495][T27824] loop5: p4 size 2 extends beyond EOD, [ 1620.323687][T27825] truncated [ 1620.325975][T27825] loop4: p3 start 9 is beyond EOD, [ 1620.326787][T27824] truncated [ 1620.327550][T27824] loop5: p5 size 100663296 extends beyond EOD, [ 1620.333063][T27825] truncated [ 1620.333068][T27825] loop4: p4 size 2 extends beyond EOD, [ 1620.336156][T27824] truncated [ 1620.336573][T27824] loop5: p6 start 9 is beyond EOD, [ 1620.341852][T27825] truncated [ 1620.345495][T27825] loop4: p5 size 100663296 extends beyond EOD, [ 1620.350224][T27824] truncated [ 1620.390251][T27825] truncated [ 1620.394201][T27825] loop4: p6 start 9 is beyond EOD, truncated [ 1620.401433][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1620.406738][T32589] loop4: partition table partially beyond EOD, truncated [ 1620.414633][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1620.421006][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1620.428708][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1620.434931][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1620.436611][T27824] loop5: detected capacity change from 0 to 1 [ 1620.442308][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1620.455004][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1620.472690][T27824] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1620.477903][T27824] loop5: partition table partially beyond EOD, truncated [ 1620.485703][T27824] loop5: p1 start 3594 is beyond EOD, truncated [ 1620.492010][T27824] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1620.499322][T27825] loop4: detected capacity change from 0 to 1 [ 1620.506883][T27824] loop5: p3 start 9 is beyond EOD, truncated [ 1620.512916][T27824] loop5: p4 size 2 extends beyond EOD, truncated [ 1620.519594][T27824] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1620.527310][T27824] loop5: p6 start 9 is beyond EOD, truncated [ 1620.552692][T27825] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1620.558177][T27825] loop4: partition table partially beyond EOD, truncated [ 1620.565443][T27825] loop4: p1 start 10 is beyond EOD, truncated [ 1620.571547][T27825] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1620.579110][T27825] loop4: p3 start 9 is beyond EOD, truncated [ 1620.585161][T27825] loop4: p4 size 2 extends beyond EOD, truncated [ 1620.592198][T27825] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1620.600034][T27825] loop4: p6 start 9 is beyond EOD, truncated [ 1620.607075][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1620.612538][T32589] loop4: partition table partially beyond EOD, truncated [ 1620.619767][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1620.625933][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1620.633569][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1620.639576][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1620.646474][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated 11:49:44 executing program 4: syz_read_part_table(0x4, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:44 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x20100000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:44 executing program 2 (fault-call:6 fault-nth:13): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x68, 0x0) 11:49:44 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000280)="bf85d3bdce12cdf6dd0b946d75c2cb84", 0x10}], 0x3, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x120, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setopts(0x4200, r0, 0xfffffffffffffffb, 0x14) r1 = gettid() tkill(r1, 0x22) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000140)="d6a41972d3c5afe37ba996de81e1f4a507eed65a302daf9246523423fcc24800dd0f673860f253467bfbc338260c376dda010736af34f763fc7562fd7adeb1c49c92e70da6306100e723b4030cfca23a5e235f4e9e8c3ed183b4234a5c07f6f814203501bf7a8288f4ac9f15fe474e05d35ef90daff96d865efa340944bd97a2e10716cdeccbce22a36554d4d192720d907d4ceb976b416466596600bd9326c1ef6b01b02a0c0847398fbf4a00943a405cd13eee906db42c0ccef6d3d17cac2922e02010dd0df2ca", 0xc8}, {&(0x7f00000002c0)="f3807a61ad29972e327175268d354c3bbcd9a19e5ef56d0fd989b77c2d139a637dd95fa88d6e4b1b5b5a38a2e3bd2f05b9c206bacdd36f6780f0d4b50dbeef590afe47b1d6a8d95ed369d6ec69269cb0b9183430c16c427fda79ad7157d99709341f3b2dfc9bb8c4be9e0f3ec7046bc7c9eaa8fcab3220f55be3d83ca41d93d94ce0d1552f8a5ca7eee54f", 0x8b}, {&(0x7f0000000240)="e58ebc7b85dbe1108cbb6934273630", 0xf}, {&(0x7f0000000380)="32e7c734c3543e49e9b21107860aedb5e841691c8a9c0b9a113eefc019bc76afce9051d0b933c2b53ea39928b949d3fe10bebb2141cc5541011defebdaa62b48d344087a4ac0ec61f2846af72cf30de9e875c7a07c197e03d8749c391339e7bfe20b5c658da7565355b956bd95cebc572def09a03c0f2186a4eebdcd434f861ca3e502cf3cca7ac5b8a01a4ef4d841644c38291226da32fefb100ae6f445dcb177d5aac0cd1ad4619ef5156295a303f975651024e3ed71c572fcebae7dd871", 0xbf}], 0x4, 0x11) 11:49:44 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a0f0000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1620.653861][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1620.694584][T27894] FAULT_INJECTION: forcing a failure. [ 1620.694584][T27894] name failslab, interval 1, probability 0, space 0, times 0 [ 1620.707252][T27894] CPU: 0 PID: 27894 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1620.717587][T27894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1620.727739][T27894] Call Trace: [ 1620.731124][T27894] dump_stack+0x137/0x19d [ 1620.735458][T27894] should_fail+0x23c/0x250 [ 1620.739940][T27894] __should_failslab+0x81/0x90 11:49:44 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x22000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x6c, 0x0) 11:49:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x74, 0x0) [ 1620.744717][T27894] should_failslab+0x5/0x20 [ 1620.749225][T27894] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1620.751733][T27898] loop5: detected capacity change from 0 to 1 [ 1620.755222][T27894] ? __list_lru_init+0x70/0x680 [ 1620.755246][T27894] ? __kmalloc_node+0x30/0x40 [ 1620.770815][T27894] __kmalloc_node+0x30/0x40 [ 1620.775400][T27894] kvmalloc_node+0x81/0xf0 [ 1620.779818][T27894] __list_lru_init+0x2d7/0x680 [ 1620.784606][T27894] alloc_super+0x4bf/0x520 11:49:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x7a, 0x0) [ 1620.792803][T27894] ? test_single_super+0x10/0x10 [ 1620.797746][T27894] sget_fc+0x1cf/0x4e0 [ 1620.801819][T27894] ? kill_litter_super+0x60/0x60 [ 1620.806758][T27894] ? mqueue_get_tree+0x40/0x40 [ 1620.811527][T27894] get_tree_keyed+0x3f/0x120 [ 1620.816118][T27894] mqueue_get_tree+0x32/0x40 [ 1620.820841][T27894] vfs_get_tree+0x4a/0x1a0 [ 1620.825528][T27894] fc_mount+0x12/0x60 [ 1620.829514][T27894] mq_init_ns+0x26d/0x310 [ 1620.833928][T27894] copy_ipcs+0x211/0x360 [ 1620.838226][T27894] create_new_namespaces+0x137/0x560 11:49:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0xfe, 0x0) 11:49:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1f6, 0x0) [ 1620.843575][T27894] ? security_capable+0x91/0xa0 [ 1620.848463][T27894] unshare_nsproxy_namespaces+0xe2/0x120 [ 1620.854321][T27894] ksys_unshare+0x381/0x710 [ 1620.858990][T27894] __x64_sys_unshare+0x1b/0x20 [ 1620.864047][T27894] do_syscall_64+0x4a/0x90 [ 1620.868501][T27894] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1620.874397][T27894] RIP: 0033:0x4665d9 [ 1620.878290][T27894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1620.897902][T27894] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1620.906325][T27894] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1620.914335][T27894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1620.922491][T27894] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1620.930555][T27894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1620.938511][T27894] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1620.994971][T27898] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1621.000261][T27898] loop5: partition table partially beyond EOD, truncated [ 1621.010103][T27898] loop5: p1 start 3850 is beyond EOD, truncated [ 1621.010119][T27943] loop4: detected capacity change from 0 to 1 [ 1621.022571][T27898] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1621.034414][T27898] loop5: p3 start 9 is beyond EOD, truncated [ 1621.040478][T27898] loop5: p4 size 2 extends beyond EOD, truncated [ 1621.047584][T27943] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1621.052848][T27943] loop4: partition table partially beyond EOD, truncated [ 1621.055573][T27898] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1621.060251][T27943] loop4: p1 start 10 is beyond EOD, truncated [ 1621.070450][T27898] loop5: p6 start 9 is beyond EOD, truncated [ 1621.073082][T27943] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1621.095077][T27943] loop4: p3 start 9 is beyond EOD, truncated [ 1621.101125][T27943] loop4: p4 size 2 extends beyond EOD, truncated [ 1621.108672][T27943] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1621.116297][T27943] loop4: p6 start 9 is beyond EOD, truncated [ 1621.183468][T27898] loop5: detected capacity change from 0 to 1 [ 1621.195833][T27943] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 1621.213356][T27943] loop4: detected capacity change from 0 to 1 [ 1621.253976][T27943] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1621.259414][T27943] loop4: partition table partially beyond EOD, truncated [ 1621.266736][T27943] loop4: p1 start 10 is beyond EOD, truncated [ 1621.272853][T27943] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1621.280287][T27943] loop4: p3 start 9 is beyond EOD, truncated [ 1621.286326][T27943] loop4: p4 size 2 extends beyond EOD, truncated [ 1621.292998][T27943] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1621.300385][T27943] loop4: p6 start 9 is beyond EOD, truncated 11:49:45 executing program 4: syz_read_part_table(0x5, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1f7, 0x0) 11:49:45 executing program 2 (fault-call:6 fault-nth:14): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:45 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x25000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1621.391700][T27982] FAULT_INJECTION: forcing a failure. [ 1621.391700][T27982] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.404377][T27982] CPU: 1 PID: 27982 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1621.414775][T27982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1621.424858][T27982] Call Trace: [ 1621.428548][T27982] dump_stack+0x137/0x19d [ 1621.433000][T27982] should_fail+0x23c/0x250 [ 1621.437424][T27982] ? mqueue_alloc_inode+0x22/0x30 [ 1621.442622][T27982] __should_failslab+0x81/0x90 [ 1621.447533][T27982] ? mqueue_fill_super+0x200/0x200 [ 1621.452636][T27982] should_failslab+0x5/0x20 [ 1621.457531][T27982] kmem_cache_alloc+0x46/0x2f0 [ 1621.462403][T27982] ? mqueue_fill_super+0x200/0x200 [ 1621.467625][T27982] mqueue_alloc_inode+0x22/0x30 [ 1621.472466][T27982] new_inode_pseudo+0x38/0x1c0 [ 1621.477352][T27982] ? mqueue_get_tree+0x40/0x40 [ 1621.482106][T27982] new_inode+0x21/0x120 [ 1621.486365][T27982] ? mqueue_get_tree+0x40/0x40 [ 1621.491112][T27982] mqueue_fill_super+0x85/0x200 [ 1621.496354][T27982] ? mqueue_get_tree+0x40/0x40 [ 1621.501199][T27982] get_tree_keyed+0x8e/0x120 [ 1621.505777][T27982] mqueue_get_tree+0x32/0x40 [ 1621.510379][T27982] vfs_get_tree+0x4a/0x1a0 [ 1621.514855][T27982] fc_mount+0x12/0x60 [ 1621.518826][T27982] mq_init_ns+0x26d/0x310 [ 1621.523159][T27982] copy_ipcs+0x211/0x360 [ 1621.527447][T27982] create_new_namespaces+0x137/0x560 [ 1621.532743][T27982] ? security_capable+0x91/0xa0 11:49:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240041c5, &(0x7f0000000040), 0x1c) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d14) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x1000000, [{0x80000001, 0x9}]}, 0xc, 0x5) getsockname$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) write$P9_RREADLINK(r2, &(0x7f0000000180)=ANY=[], 0x1c) sendfile(r2, r2, &(0x7f0000000240), 0xfa7c) 11:49:45 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a100000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1f8, 0x0) [ 1621.537598][T27982] unshare_nsproxy_namespaces+0xe2/0x120 [ 1621.543257][T27982] ksys_unshare+0x381/0x710 [ 1621.547765][T27982] __x64_sys_unshare+0x1b/0x20 [ 1621.552513][T27982] do_syscall_64+0x4a/0x90 [ 1621.556919][T27982] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1621.563012][T27982] RIP: 0033:0x4665d9 [ 1621.566892][T27982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:49:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x204, 0x0) [ 1621.586509][T27982] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1621.597488][T27982] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1621.605478][T27982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1621.613502][T27982] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1621.621473][T27982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1621.629660][T27982] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 11:49:45 executing program 2 (fault-call:6 fault-nth:15): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:45 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x26020000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x207, 0x0) [ 1621.650484][T27998] ISOFS: Unable to identify CD-ROM format. [ 1621.705765][T27999] ISOFS: Unable to identify CD-ROM format. [ 1621.710840][T28005] loop5: detected capacity change from 0 to 1 [ 1621.748888][T28005] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1621.754170][T28005] loop5: partition table partially beyond EOD, truncated [ 1621.777958][T28005] loop5: p1 start 4106 is beyond EOD, truncated [ 1621.784311][T28005] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1621.793631][T28024] FAULT_INJECTION: forcing a failure. [ 1621.793631][T28024] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.806297][T28024] CPU: 0 PID: 28024 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1621.811683][T28005] loop5: p3 start 9 is beyond EOD, [ 1621.816464][T28024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1621.816476][T28024] Call Trace: [ 1621.816484][T28024] dump_stack+0x137/0x19d [ 1621.821676][T28005] truncated [ 1621.821682][T28005] loop5: p4 size 2 extends beyond EOD, [ 1621.831731][T28024] should_fail+0x23c/0x250 [ 1621.835056][T28005] truncated [ 1621.839344][T28024] ? security_inode_alloc+0x30/0x180 [ 1621.847868][T28005] loop5: p5 size 100663296 extends beyond EOD, [ 1621.847987][T28024] __should_failslab+0x81/0x90 [ 1621.852407][T28005] truncated [ 1621.855475][T28024] should_failslab+0x5/0x20 [ 1621.855493][T28024] kmem_cache_alloc+0x46/0x2f0 [ 1621.862325][T28005] loop5: p6 start 9 is beyond EOD, [ 1621.867061][T28024] security_inode_alloc+0x30/0x180 [ 1621.867093][T28024] inode_init_always+0x20b/0x420 11:49:45 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x27020000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1621.871851][T28005] truncated [ 1621.891847][T28021] loop4: detected capacity change from 0 to 1 [ 1621.894967][T28024] ? mqueue_fill_super+0x200/0x200 [ 1621.894998][T28024] new_inode_pseudo+0x73/0x1c0 [ 1621.919239][T28024] ? mqueue_get_tree+0x40/0x40 [ 1621.924015][T28024] new_inode+0x21/0x120 [ 1621.926724][T28025] ISOFS: Unable to identify CD-ROM format. [ 1621.928198][T28024] ? mqueue_get_tree+0x40/0x40 [ 1621.938779][T28024] mqueue_fill_super+0x85/0x200 [ 1621.943717][T28024] ? mqueue_get_tree+0x40/0x40 [ 1621.948558][T28024] get_tree_keyed+0x8e/0x120 [ 1621.953280][T28024] mqueue_get_tree+0x32/0x40 [ 1621.957865][T28024] vfs_get_tree+0x4a/0x1a0 [ 1621.962270][T28024] fc_mount+0x12/0x60 [ 1621.966309][T28024] mq_init_ns+0x26d/0x310 [ 1621.970625][T28024] copy_ipcs+0x211/0x360 [ 1621.974896][T28024] create_new_namespaces+0x137/0x560 [ 1621.980170][T28024] ? security_capable+0x91/0xa0 [ 1621.985005][T28024] unshare_nsproxy_namespaces+0xe2/0x120 [ 1621.990692][T28024] ksys_unshare+0x381/0x710 [ 1621.995199][T28024] __x64_sys_unshare+0x1b/0x20 [ 1622.000103][T28024] do_syscall_64+0x4a/0x90 [ 1622.004518][T28024] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1622.010425][T28024] RIP: 0033:0x4665d9 [ 1622.014300][T28024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1622.033956][T28024] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1622.042391][T28024] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1622.050439][T28024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1622.058417][T28024] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1622.066533][T28024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1622.074592][T28024] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1622.113321][T28021] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1622.118583][T28021] loop4: partition table partially beyond EOD, truncated [ 1622.125348][T28005] loop5: detected capacity change from 0 to 1 [ 1622.131686][T28021] loop4: p1 start 10 is beyond EOD, truncated [ 1622.137941][T28021] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1622.146086][T28021] loop4: p3 start 9 is beyond EOD, truncated [ 1622.152213][T28021] loop4: p4 size 2 extends beyond EOD, truncated [ 1622.153262][T28005] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1622.159687][T28021] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1622.163964][T28005] loop5: partition table partially beyond EOD, truncated [ 1622.164802][T28005] loop5: p1 start 4106 is beyond EOD, [ 1622.171690][T28021] loop4: p6 start 9 is beyond EOD, [ 1622.178084][T28005] truncated [ 1622.178091][T28005] loop5: p2 size 100663296 extends beyond EOD, [ 1622.183662][T28021] truncated [ 1622.188566][T28028] ISOFS: Unable to identify CD-ROM format. [ 1622.188842][T28005] truncated [ 1622.198676][T28005] loop5: p3 start 9 is beyond EOD, truncated [ 1622.216946][T28005] loop5: p4 size 2 extends beyond EOD, truncated [ 1622.224017][T28005] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1622.232850][T28021] loop4: detected capacity change from 0 to 1 [ 1622.233631][T28005] loop5: p6 start 9 is beyond EOD, truncated [ 1622.246132][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1622.251365][T32589] loop5: partition table partially beyond EOD, truncated [ 1622.258516][T32589] loop5: p1 start 4106 is beyond EOD, truncated [ 1622.264980][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1622.272482][T32589] loop5: p3 start 9 is beyond EOD, [ 1622.272492][T28021] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1622.272494][T32589] truncated [ 1622.272500][T28021] loop4: partition table partially beyond EOD, truncated [ 1622.272538][T28021] loop4: p1 start 10 is beyond EOD, truncated [ 1622.272548][T28021] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1622.274537][T28021] loop4: p3 start 9 is beyond EOD, [ 1622.277929][T32589] loop5: p4 size 2 extends beyond EOD, [ 1622.283101][T28021] truncated [ 1622.286192][T32589] truncated [ 1622.288317][T32589] loop5: p5 size 100663296 extends beyond EOD, [ 1622.293472][T28021] loop4: p4 size 2 extends beyond EOD, truncated [ 1622.299616][T32589] truncated [ 1622.300927][T32589] loop5: p6 start 9 is beyond EOD, [ 1622.307539][T28021] loop4: p5 size 100663296 extends beyond EOD, [ 1622.311936][T32589] truncated [ 1622.354505][T28021] truncated [ 1622.357849][T28021] loop4: p6 start 9 is beyond EOD, truncated 11:49:46 executing program 4: syz_read_part_table(0x6, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:46 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001100)=""/4096}], 0x57, 0x0, 0xfffffffe) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) 11:49:46 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x3f000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:46 executing program 2 (fault-call:6 fault-nth:16): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x208, 0x0) 11:49:46 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a110000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1622.386662][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1622.392078][T32589] loop4: partition table partially beyond EOD, truncated [ 1622.400817][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1622.407024][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1622.436871][T28085] loop5: detected capacity change from 0 to 1 [ 1622.440896][T28089] ISOFS: Unable to identify CD-ROM format. [ 1622.448988][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1622.454053][T28092] PM: suspend entry (deep) [ 1622.455114][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1622.471958][T28094] FAULT_INJECTION: forcing a failure. [ 1622.471958][T28094] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.472780][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1622.484841][T28094] CPU: 0 PID: 28094 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1622.493622][T32589] loop4: p6 start 9 is beyond EOD, [ 1622.502175][T28094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1622.502188][T28094] Call Trace: [ 1622.502196][T28094] dump_stack+0x137/0x19d [ 1622.507407][T32589] truncated [ 1622.517630][T28094] should_fail+0x23c/0x250 [ 1622.517654][T28094] ? __d_alloc+0x36/0x370 [ 1622.538744][T28094] __should_failslab+0x81/0x90 [ 1622.543650][T28094] should_failslab+0x5/0x20 [ 1622.548290][T28094] kmem_cache_alloc+0x46/0x2f0 [ 1622.553308][T28094] ? __init_rwsem+0x59/0x70 [ 1622.557802][T28094] __d_alloc+0x36/0x370 [ 1622.562209][T28094] ? current_time+0xf8/0x190 [ 1622.566879][T28094] d_make_root+0x24/0x60 [ 1622.571108][T28094] mqueue_fill_super+0x1c9/0x200 [ 1622.576109][T28094] ? mqueue_get_tree+0x40/0x40 [ 1622.580856][T28094] get_tree_keyed+0x8e/0x120 [ 1622.585438][T28094] mqueue_get_tree+0x32/0x40 [ 1622.590266][T28094] vfs_get_tree+0x4a/0x1a0 [ 1622.594744][T28094] fc_mount+0x12/0x60 [ 1622.600003][T28094] mq_init_ns+0x26d/0x310 [ 1622.604874][T28094] copy_ipcs+0x211/0x360 [ 1622.609111][T28094] create_new_namespaces+0x137/0x560 [ 1622.614457][T28094] ? security_capable+0x91/0xa0 [ 1622.619427][T28094] unshare_nsproxy_namespaces+0xe2/0x120 [ 1622.625285][T28094] ksys_unshare+0x381/0x710 [ 1622.630565][T28094] __x64_sys_unshare+0x1b/0x20 [ 1622.635342][T28094] do_syscall_64+0x4a/0x90 [ 1622.639757][T28094] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1622.645688][T28094] RIP: 0033:0x4665d9 [ 1622.649731][T28094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1622.669478][T28094] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1622.677910][T28094] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 11:49:46 executing program 2 (fault-call:6 fault-nth:17): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1622.685989][T28094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1622.693949][T28094] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1622.702269][T28094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1622.710310][T28094] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1622.731682][T28092] Filesystems sync: 0.272 seconds 11:49:46 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x40000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x209, 0x0) [ 1622.735158][T28085] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1622.741949][T28085] loop5: partition table partially beyond EOD, truncated [ 1622.745312][T28085] loop5: p1 start 4362 is beyond EOD, truncated [ 1622.745327][T28085] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1622.745762][T28085] loop5: p3 start 9 is beyond EOD, truncated [ 1622.745778][T28085] loop5: p4 size 2 extends beyond EOD, truncated [ 1622.746030][T28085] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1622.746349][T28085] loop5: p6 start 9 is beyond EOD, truncated [ 1622.761838][T28090] ISOFS: Unable to identify CD-ROM format. [ 1622.766152][T28085] loop5: detected capacity change from 0 to 1 [ 1622.770822][T28127] FAULT_INJECTION: forcing a failure. [ 1622.770822][T28127] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.775264][T28092] Freezing user space processes ... [ 1622.781326][T28127] CPU: 1 PID: 28127 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1622.846618][T28127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1622.846629][T28127] Call Trace: [ 1622.846635][T28127] dump_stack+0x137/0x19d [ 1622.846655][T28127] should_fail+0x23c/0x250 [ 1622.846670][T28127] ? __d_alloc+0x36/0x370 [ 1622.846683][T28127] __should_failslab+0x81/0x90 [ 1622.846704][T28127] should_failslab+0x5/0x20 [ 1622.846716][T28127] kmem_cache_alloc+0x46/0x2f0 [ 1622.846735][T28127] ? __init_rwsem+0x59/0x70 [ 1622.846747][T28127] __d_alloc+0x36/0x370 [ 1622.846815][T28127] ? current_time+0xf8/0x190 [ 1622.846829][T28127] d_make_root+0x24/0x60 [ 1622.846840][T28127] mqueue_fill_super+0x1c9/0x200 [ 1622.846858][T28127] ? mqueue_get_tree+0x40/0x40 [ 1622.846929][T28127] get_tree_keyed+0x8e/0x120 [ 1622.846945][T28127] mqueue_get_tree+0x32/0x40 [ 1622.846962][T28127] vfs_get_tree+0x4a/0x1a0 [ 1622.846977][T28127] fc_mount+0x12/0x60 [ 1622.847020][T28127] mq_init_ns+0x26d/0x310 [ 1622.847035][T28127] copy_ipcs+0x211/0x360 [ 1622.847171][T28127] create_new_namespaces+0x137/0x560 [ 1622.847188][T28127] ? security_capable+0x91/0xa0 [ 1622.847268][T28127] unshare_nsproxy_namespaces+0xe2/0x120 [ 1622.847336][T28127] ksys_unshare+0x381/0x710 [ 1622.847390][T28127] __x64_sys_unshare+0x1b/0x20 [ 1622.847403][T28127] do_syscall_64+0x4a/0x90 [ 1622.847418][T28127] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1622.847499][T28127] RIP: 0033:0x4665d9 [ 1622.847547][T28127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1622.847560][T28127] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1622.847573][T28127] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1622.847582][T28127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1622.847591][T28127] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1622.847599][T28127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1622.847634][T28127] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1622.853343][T28085] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1622.858263][T28116] ISOFS: Unable to identify CD-ROM format. [ 1622.861539][T28085] loop5: partition table partially beyond EOD, [ 1622.866306][T28120] ISOFS: Unable to identify CD-ROM format. [ 1622.870657][T28085] truncated [ 1622.870991][T28085] loop5: p1 start 4362 is beyond EOD, truncated [ 1623.085849][T28085] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1623.093288][T28085] loop5: p3 start 9 is beyond EOD, truncated [ 1623.099283][T28085] loop5: p4 size 2 extends beyond EOD, truncated [ 1623.106041][T28085] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1623.113485][T28085] loop5: p6 start 9 is beyond EOD, truncated [ 1623.119659][T28092] (elapsed 0.332 seconds) done. [ 1623.124799][T28092] OOM killer disabled. [ 1623.129058][T28092] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 1623.138781][T28092] printk: Suspending console(s) (use no_console_suspend to debug) [ 1623.203078][T28092] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1623.940283][T28092] ACPI: Preparing to enter system sleep state S3 [ 1623.940350][T28092] PM: Saving platform NVS memory [ 1623.940354][T28092] Disabling non-boot CPUs ... [ 1623.944074][T28092] smpboot: CPU 1 is now offline [ 1623.951380][T28092] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 1623.951481][T28092] ACPI: Low-level resume complete [ 1623.951561][T28092] PM: Restoring platform NVS memory [ 1623.951569][T28092] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 1623.963874][T28092] Enabling non-boot CPUs ... [ 1623.964060][T28092] x86: Booting SMP configuration: [ 1623.964063][T28092] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1623.964240][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 1623.965177][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 1623.966402][T28092] CPU1 is up [ 1623.966685][T28092] ACPI: Waking up from system sleep state S3 [ 1624.415012][T28092] OOM killer enabled. [ 1624.415731][T28092] Restarting tasks ... [ 1624.420044][T32589] synth uevent: /devices/virtual/block/loop4: failed to send uevent [ 1624.423682][T32589] block loop4: uevent: failed to send synthetic uevent [ 1624.436089][T28092] done. [ 1624.436736][T28092] PM: Possible incorrect RTC due to pm_trace, please use 'ntpdate' or 'rdate' to reset it. 11:49:48 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x48da6ecc, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x300, 0x0) 11:49:48 executing program 2 (fault-call:6 fault-nth:18): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1624.444218][T28092] PM: suspend exit [ 1624.454235][T28134] PM: suspend entry (deep) [ 1624.459028][T28131] loop4: detected capacity change from 0 to 1 [ 1624.464840][T28134] Filesystems sync: 0.009 seconds [ 1624.467652][T28134] Freezing user space processes ... [ 1624.498751][T28131] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1624.501876][T28131] loop4: partition table partially beyond EOD, truncated [ 1624.504198][T28131] loop4: p1 start 10 is beyond EOD, truncated [ 1624.505443][T28131] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1624.508091][T28131] loop4: p3 start 9 is beyond EOD, truncated [ 1624.509780][T28131] loop4: p4 size 2 extends beyond EOD, truncated [ 1624.511268][T28131] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1624.512921][T28131] loop4: p6 start 9 is beyond EOD, truncated [ 1624.518604][T28134] (elapsed 0.050 seconds) done. [ 1624.519953][T28134] OOM killer disabled. [ 1624.520896][T28134] Freezing remaining freezable tasks ... (elapsed 0.003 seconds) done. [ 1624.527206][T28134] printk: Suspending console(s) (use no_console_suspend to debug) [ 1624.828555][T28134] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1625.580156][T28134] ACPI: Preparing to enter system sleep state S3 [ 1625.580238][T28134] PM: Saving platform NVS memory [ 1625.580242][T28134] Disabling non-boot CPUs ... [ 1625.584255][T28134] smpboot: CPU 1 is now offline [ 1625.587909][T28134] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 1625.587971][T28134] ACPI: Low-level resume complete [ 1625.588053][T28134] PM: Restoring platform NVS memory [ 1625.588061][T28134] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 1625.599631][T28134] Enabling non-boot CPUs ... [ 1625.599861][T28134] x86: Booting SMP configuration: [ 1625.599864][T28134] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1625.600020][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 1625.601082][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 1625.602473][T28134] CPU1 is up [ 1625.602746][T28134] ACPI: Waking up from system sleep state S3 [ 1626.056381][T28134] OOM killer enabled. [ 1626.057673][T28134] Restarting tasks ... [ 1626.060398][T32589] synth uevent: /devices/virtual/block/loop1: failed to send uevent [ 1626.064211][T32589] block loop1: uevent: failed to send synthetic uevent [ 1626.078851][T28134] done. [ 1626.080623][T28134] PM: Possible incorrect RTC due to pm_trace, please use 'ntpdate' or 'rdate' to reset it. [ 1626.084848][T28134] PM: suspend exit [ 1626.087227][T28141] FAULT_INJECTION: forcing a failure. [ 1626.087227][T28141] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.091472][T28141] CPU: 0 PID: 28141 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1626.092055][T28142] ISOFS: Unable to identify CD-ROM format. [ 1626.092894][T28141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.092904][T28141] Call Trace: [ 1626.092912][T28141] dump_stack+0x137/0x19d [ 1626.100361][T28141] should_fail+0x23c/0x250 [ 1626.101648][T28141] __should_failslab+0x81/0x90 [ 1626.103452][T28141] should_failslab+0x5/0x20 [ 1626.104769][T28141] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1626.106459][T28141] ? __kmalloc_node+0x30/0x40 [ 1626.106517][T28146] ISOFS: Unable to identify CD-ROM format. [ 1626.107175][T28141] ? ___cache_free+0x3c/0x300 [ 1626.107196][T28141] __kmalloc_node+0x30/0x40 [ 1626.111138][T28141] kvmalloc_node+0x81/0xf0 [ 1626.112692][T28141] rhashtable_init+0x352/0x550 [ 1626.113054][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1626.113599][T28141] ipc_init_ids+0x4d/0xa0 [ 1626.114396][T32589] loop5: partition table partially beyond EOD, [ 1626.115211][T28141] sem_init_ns+0x7f/0x90 [ 1626.115230][T28141] copy_ipcs+0x270/0x360 [ 1626.116827][T32589] truncated [ 1626.119712][T32589] loop5: p1 start 4362 is beyond EOD, truncated [ 1626.120124][T28141] create_new_namespaces+0x137/0x560 [ 1626.121383][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1626.122330][T28141] ? security_capable+0x91/0xa0 [ 1626.124377][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1626.125399][T28141] unshare_nsproxy_namespaces+0xe2/0x120 [ 1626.126578][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1626.127537][T28141] ksys_unshare+0x381/0x710 [ 1626.129898][T28141] __x64_sys_unshare+0x1b/0x20 [ 1626.131471][T32589] loop5: p5 size 100663296 extends beyond EOD, [ 1626.131471][T28141] do_syscall_64+0x4a/0x90 [ 1626.131484][T32589] truncated [ 1626.131495][T28141] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1626.133023][T32589] loop5: p6 start 9 is beyond EOD, [ 1626.133547][T28141] RIP: 0033:0x4665d9 [ 1626.134675][T32589] truncated [ 1626.135543][T28141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1626.135559][T28141] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1626.146403][T28141] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1626.148737][T28141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1626.151395][T28141] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1626.152924][T28141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1626.155112][T28141] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1626.169046][T28158] loop4: detected capacity change from 0 to 1 11:49:50 executing program 4: syz_read_part_table(0x7, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:50 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x60b0d88f, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:50 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a120000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x402, 0x0) 11:49:50 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001100)=""/4096}], 0x57, 0x0, 0xfffffffe) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) 11:49:50 executing program 2 (fault-call:6 fault-nth:19): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1626.195456][T28158] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1626.197013][T28158] loop4: partition table partially beyond EOD, truncated [ 1626.198640][T28158] loop4: p1 start 10 is beyond EOD, truncated [ 1626.200052][T28158] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1626.202795][T28158] loop4: p3 start 9 is beyond EOD, truncated [ 1626.204469][T28158] loop4: p4 size 2 extends beyond EOD, truncated [ 1626.206628][T28158] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1626.208112][T28158] loop4: p6 start 9 is beyond EOD, truncated [ 1626.211397][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1626.212745][T32589] loop4: partition table partially beyond EOD, truncated [ 1626.214684][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1626.216288][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1626.221584][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1626.223026][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1626.225156][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1626.227816][T32589] loop4: p6 start 9 is beyond EOD, truncated 11:49:50 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x8cffffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1626.255440][T28187] loop5: detected capacity change from 0 to 1 [ 1626.256959][T28194] PM: suspend entry (deep) 11:49:50 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x8fd8b060, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1626.276395][T28186] ISOFS: Unable to identify CD-ROM format. [ 1626.278624][T28189] ISOFS: Unable to identify CD-ROM format. [ 1626.283025][T28191] FAULT_INJECTION: forcing a failure. [ 1626.283025][T28191] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.286775][T28191] CPU: 0 PID: 28191 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1626.289956][T28191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.292581][T28191] Call Trace: [ 1626.293643][T28191] dump_stack+0x137/0x19d [ 1626.294640][T28191] should_fail+0x23c/0x250 [ 1626.296029][T28191] __should_failslab+0x81/0x90 [ 1626.297836][T28191] should_failslab+0x5/0x20 [ 1626.299343][T28191] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1626.301168][T28191] ? __kmalloc_node+0x30/0x40 [ 1626.302619][T28191] __kmalloc_node+0x30/0x40 [ 1626.303711][T28191] kvmalloc_node+0x81/0xf0 [ 1626.305009][T28191] rhashtable_init+0x352/0x550 [ 1626.306833][T28191] ipc_init_ids+0x4d/0xa0 [ 1626.308179][T28191] msg_init_ns+0x86/0x90 [ 1626.309216][T28191] copy_ipcs+0x278/0x360 [ 1626.310786][T28191] create_new_namespaces+0x137/0x560 [ 1626.312607][T28191] ? security_capable+0x91/0xa0 [ 1626.314131][T28191] unshare_nsproxy_namespaces+0xe2/0x120 [ 1626.315947][T28191] ksys_unshare+0x381/0x710 [ 1626.317002][T28191] __x64_sys_unshare+0x1b/0x20 [ 1626.318157][T28191] do_syscall_64+0x4a/0x90 [ 1626.319324][T28191] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1626.320485][T28191] RIP: 0033:0x4665d9 [ 1626.321117][T28191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1626.325563][T28191] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1626.327495][T28191] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1626.329492][T28191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1626.331415][T28191] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1626.332776][T28191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1626.334380][T28191] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1626.339864][T28187] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1626.341526][T28187] loop5: partition table partially beyond EOD, truncated [ 1626.343104][T28206] loop4: detected capacity change from 0 to 1 [ 1626.343706][T28187] loop5: p1 start 4618 is beyond EOD, truncated [ 1626.347667][T28187] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1626.349725][T28187] loop5: p3 start 9 is beyond EOD, truncated [ 1626.351780][T28187] loop5: p4 size 2 extends beyond EOD, truncated [ 1626.355651][T28187] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1626.358182][T28187] loop5: p6 start 9 is beyond EOD, truncated [ 1626.360581][T28187] ================================================================== [ 1626.362315][T28187] BUG: KCSAN: data-race in drop_nlink / vfs_getattr_nosec [ 1626.364559][T28187] [ 1626.365301][T28187] write to 0xffff88812cb37b38 of 4 bytes by task 19 on cpu 1: [ 1626.367316][T28187] drop_nlink+0x37/0x90 [ 1626.368128][T28187] shmem_unlink+0x1ab/0x1d0 [ 1626.369421][T28187] vfs_unlink+0x24a/0x400 [ 1626.370986][T28187] devtmpfs_work_loop+0x7bf/0x8d0 [ 1626.372576][T28187] devtmpfsd+0x3f/0x40 [ 1626.373439][T28187] kthread+0x1d0/0x1f0 [ 1626.374471][T28187] ret_from_fork+0x1f/0x30 [ 1626.375675][T28187] 11:49:50 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x97ffffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x406, 0x0) 11:49:50 executing program 2 (fault-call:6 fault-nth:20): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) 11:49:50 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xc0ed0000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1626.376497][T28187] read to 0xffff88812cb37b38 of 4 bytes by task 28187 on cpu 0: [ 1626.378596][T28187] vfs_getattr_nosec+0x1c1/0x2f0 [ 1626.379457][T28187] vfs_statx+0x128/0x290 [ 1626.380407][T28187] __se_sys_newstat+0x46/0x250 [ 1626.381349][T28187] __x64_sys_newstat+0x2d/0x40 [ 1626.383015][T28187] do_syscall_64+0x4a/0x90 [ 1626.383974][T28187] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1626.385486][T28187] [ 1626.386022][T28187] Reported by Kernel Concurrency Sanitizer on: [ 1626.387337][T28187] CPU: 0 PID: 28187 Comm: syz-executor.5 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1626.389461][T28187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.391501][T28187] ================================================================== [ 1626.399833][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1626.401442][T32589] loop5: partition table partially beyond EOD, truncated [ 1626.403653][T32589] loop5: p1 start 4618 is beyond EOD, truncated [ 1626.405289][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1626.409156][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1626.410851][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1626.413116][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1626.416918][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1626.418895][T28194] Filesystems sync: 0.159 seconds [ 1626.420258][T28194] Freezing user space processes ... [ 1626.424754][T28227] ISOFS: Unable to identify CD-ROM format. [ 1626.427075][T28206] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1626.428418][T28206] loop4: partition table partially beyond EOD, truncated [ 1626.429689][T28206] loop4: p1 start 10 is beyond EOD, truncated [ 1626.431194][T28206] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1626.433265][T28206] loop4: p3 start 9 is beyond EOD, truncated [ 1626.434847][T28206] loop4: p4 size 2 extends beyond EOD, truncated [ 1626.436443][T28206] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1626.438067][T28206] loop4: p6 start 9 is beyond EOD, truncated [ 1626.455766][T28194] (elapsed 0.035 seconds) done. [ 1626.457186][T28194] OOM killer disabled. [ 1626.458261][T28194] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 1626.460926][T28194] printk: Suspending console(s) (use no_console_suspend to debug) [ 1626.515728][T28194] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1627.268009][T28194] ACPI: Preparing to enter system sleep state S3 [ 1627.268069][T28194] PM: Saving platform NVS memory [ 1627.268073][T28194] Disabling non-boot CPUs ... [ 1627.271699][T28194] smpboot: CPU 1 is now offline [ 1627.275598][T28194] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 1627.275660][T28194] ACPI: Low-level resume complete [ 1627.275741][T28194] PM: Restoring platform NVS memory [ 1627.275750][T28194] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 1627.288531][T28194] Enabling non-boot CPUs ... [ 1627.288759][T28194] x86: Booting SMP configuration: [ 1627.288763][T28194] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1627.288933][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 1627.289865][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 1627.291252][T28194] CPU1 is up [ 1627.291564][T28194] ACPI: Waking up from system sleep state S3 [ 1627.758755][T28194] OOM killer enabled. [ 1627.759329][T28194] Restarting tasks ... [ 1627.766778][T32589] synth uevent: /devices/virtual/block/loop5: failed to send uevent [ 1627.769229][T32589] block loop5: uevent: failed to send synthetic uevent [ 1627.774074][T28194] done. [ 1627.774836][T28194] PM: Possible incorrect RTC due to pm_trace, please use 'ntpdate' or 'rdate' to reset it. [ 1627.778260][T28194] PM: suspend exit [ 1627.781460][T28234] FAULT_INJECTION: forcing a failure. [ 1627.781460][T28234] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.783877][T28234] CPU: 1 PID: 28234 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1627.786174][T28234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1627.787758][T28234] Call Trace: [ 1627.788590][T28234] dump_stack+0x137/0x19d [ 1627.789530][T28234] should_fail+0x23c/0x250 [ 1627.790243][T28234] __should_failslab+0x81/0x90 [ 1627.791093][T28234] should_failslab+0x5/0x20 11:49:51 executing program 4: syz_read_part_table(0x8, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x500, 0x0) 11:49:51 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a250000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:51 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) poll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, 0x80000000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000a, 0x30, r0, 0x93143000) unshare(0x6e040400) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) signalfd4(r1, &(0x7f0000000040), 0x8, 0x0) 11:49:51 executing program 2 (fault-call:6 fault-nth:21): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1627.791760][T28234] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1627.792629][T28234] ? __kmalloc_node+0x30/0x40 [ 1627.793583][T28234] __kmalloc_node+0x30/0x40 [ 1627.794238][T28234] kvmalloc_node+0x81/0xf0 [ 1627.794871][T28234] rhashtable_init+0x352/0x550 [ 1627.795626][T28234] ipc_init_ids+0x4d/0xa0 [ 1627.796257][T28234] shm_init_ns+0x89/0x90 [ 1627.797047][T28234] copy_ipcs+0x280/0x360 [ 1627.797713][T28234] create_new_namespaces+0x137/0x560 [ 1627.798483][T28234] ? security_capable+0x91/0xa0 [ 1627.799302][T28234] unshare_nsproxy_namespaces+0xe2/0x120 [ 1627.800239][T28234] ksys_unshare+0x381/0x710 [ 1627.800959][T28234] __x64_sys_unshare+0x1b/0x20 [ 1627.801758][T28234] do_syscall_64+0x4a/0x90 [ 1627.802759][T28234] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1627.803699][T28234] RIP: 0033:0x4665d9 [ 1627.804318][T28234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1627.806976][T28234] RSP: 002b:00007f0e31d9f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1627.808231][T28234] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1627.809415][T28234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1627.810685][T28234] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1627.811922][T28234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1627.813174][T28234] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 11:49:51 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xcc6eda48, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1627.860558][T28249] ISOFS: Unable to identify CD-ROM format. 11:49:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x600, 0x0) 11:49:51 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xdaffffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:51 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000400) [ 1627.880703][T28265] FAULT_INJECTION: forcing a failure. [ 1627.880703][T28265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1627.883347][T28265] CPU: 0 PID: 28265 Comm: syz-executor.2 Tainted: G W 5.13.0-rc3-syzkaller #0 [ 1627.885429][T28265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1627.887025][T28265] Call Trace: [ 1627.887625][T28265] dump_stack+0x137/0x19d [ 1627.888179][T28251] ISOFS: Unable to identify CD-ROM format. [ 1627.888303][T28265] should_fail+0x23c/0x250 [ 1627.889812][T28265] should_fail_usercopy+0x16/0x20 [ 1627.890592][T28265] _copy_to_user+0x1c/0x90 [ 1627.891373][T28265] simple_read_from_buffer+0xab/0x120 [ 1627.892176][T28265] proc_fail_nth_read+0xf6/0x140 [ 1627.892886][T28265] ? rw_verify_area+0x136/0x250 [ 1627.893944][T28265] ? proc_fault_inject_write+0x200/0x200 [ 1627.894902][T28265] vfs_read+0x154/0x5d0 [ 1627.895784][T28265] ? create_new_namespaces+0x333/0x560 [ 1627.896534][T28265] ? __fget_light+0xd0/0x260 [ 1627.897189][T28265] ? put_files_struct+0x34/0x1f0 [ 1627.897897][T28265] ? __cond_resched+0x11/0x40 [ 1627.898716][T28265] ksys_read+0xce/0x180 [ 1627.899561][T28265] __x64_sys_read+0x3e/0x50 [ 1627.900485][T28265] do_syscall_64+0x4a/0x90 [ 1627.901361][T28265] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1627.902299][T28265] RIP: 0033:0x41935c [ 1627.902872][T28265] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1627.905907][T28265] RSP: 002b:00007f0e31d9f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1627.907492][T28265] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c [ 1627.908745][T28265] RDX: 000000000000000f RSI: 00007f0e31d9f1e0 RDI: 0000000000000004 [ 1627.909879][T28265] RBP: 00007f0e31d9f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1627.911003][T28265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1627.912420][T28265] R13: 00007ffc37d48bcf R14: 00007f0e31d9f300 R15: 0000000000022000 [ 1627.922037][T28262] loop4: detected capacity change from 0 to 1 [ 1627.926514][T28261] loop5: detected capacity change from 0 to 1 11:49:51 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xeb1f0000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:52 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000002) 11:49:52 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xf6ffffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1627.953322][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1627.953490][T28261] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1627.954263][T32589] loop4: partition table partially beyond EOD, truncated [ 1627.954327][T32589] loop4: p1 start 10 is beyond EOD, [ 1627.955101][T28261] loop5: partition table partially beyond EOD, [ 1627.956435][T32589] truncated [ 1627.956439][T32589] loop4: p2 size 100663296 extends beyond EOD, [ 1627.957602][T28261] truncated [ 1627.957665][T28261] loop5: p1 start 9482 is beyond EOD, [ 1627.958520][T32589] truncated [ 1627.959002][T32589] loop4: p3 start 9 is beyond EOD, [ 1627.960028][T28261] truncated [ 1627.960033][T28261] loop5: p2 size 100663296 extends beyond EOD, [ 1627.960631][T32589] truncated [ 1627.960635][T32589] loop4: p4 size 2 extends beyond EOD, [ 1627.962318][T28261] truncated [ 1627.967222][T32589] truncated [ 1627.970567][T28261] loop5: p3 start 9 is beyond EOD, truncated [ 1627.971814][T28261] loop5: p4 size 2 extends beyond EOD, truncated [ 1627.975193][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1627.977624][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1627.981231][T28262] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1627.982259][T28262] loop4: partition table partially beyond EOD, truncated [ 1627.983872][T28262] loop4: p1 start 10 is beyond EOD, truncated [ 1627.985017][T28262] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1627.986450][T28261] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1627.988334][T28262] loop4: p3 start 9 is beyond EOD, truncated [ 1627.989568][T28262] loop4: p4 size 2 extends beyond EOD, truncated [ 1627.991147][T28262] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1627.992933][T28261] loop5: p6 start 9 is beyond EOD, truncated [ 1627.995580][T28262] loop4: p6 start 9 is beyond EOD, truncated [ 1628.041719][T28262] loop4: detected capacity change from 0 to 1 [ 1628.046422][T28282] ISOFS: Unable to identify CD-ROM format. [ 1628.051204][T28261] loop5: detected capacity change from 0 to 1 [ 1628.083634][T28262] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1628.085095][T28262] loop4: partition table partially beyond EOD, truncated [ 1628.087905][T28261] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1628.089291][T28261] loop5: partition table partially beyond EOD, truncated [ 1628.090987][T28261] loop5: p1 start 9482 is beyond EOD, truncated [ 1628.092082][T28261] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1628.095265][T28262] loop4: p1 start 10 is beyond EOD, truncated [ 1628.097040][T28262] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1628.099198][T28261] loop5: p3 start 9 is beyond EOD, truncated [ 1628.099403][T28262] loop4: p3 start 9 is beyond EOD, truncated [ 1628.100674][T28261] loop5: p4 size 2 extends beyond EOD, truncated [ 1628.102036][T28262] loop4: p4 size 2 extends beyond EOD, truncated [ 1628.108051][T28262] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1628.110682][T28261] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1628.110975][T28262] loop4: p6 start 9 is beyond EOD, truncated [ 1628.114206][T28261] loop5: p6 start 9 is beyond EOD, truncated 11:49:52 executing program 4: syz_read_part_table(0x9, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x604, 0x0) 11:49:52 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a260000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1628.164665][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1628.166160][T32589] loop4: partition table partially beyond EOD, truncated [ 1628.168075][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1628.169688][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1628.171992][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1628.173685][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1628.180795][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1628.184036][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1628.193807][T28344] ISOFS: Unable to identify CD-ROM format. [ 1628.195814][T28346] ISOFS: Unable to identify CD-ROM format. [ 1628.231750][T28349] loop4: detected capacity change from 0 to 1 [ 1628.233663][T28362] loop5: detected capacity change from 0 to 1 [ 1628.263665][T28349] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1628.263669][T28362] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1628.263676][T28362] loop5: partition table partially beyond EOD, [ 1628.265028][T28349] loop4: partition table partially beyond EOD, [ 1628.266492][T28362] truncated [ 1628.266605][T28362] loop5: p1 start 9738 is beyond EOD, [ 1628.268321][T28349] truncated [ 1628.268443][T28349] loop4: p1 start 10 is beyond EOD, [ 1628.269523][T28362] truncated [ 1628.269527][T28362] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1628.269859][T28362] loop5: p3 start 9 is beyond EOD, [ 1628.270375][T28349] truncated [ 1628.270379][T28349] loop4: p2 size 100663296 extends beyond EOD, [ 1628.271798][T28362] truncated [ 1628.272602][T28349] truncated [ 1628.273057][T28349] loop4: p3 start 9 is beyond EOD, [ 1628.274175][T28362] loop5: p4 size 2 extends beyond EOD, [ 1628.274792][T28349] truncated [ 1628.274797][T28349] loop4: p4 size 2 extends beyond EOD, [ 1628.276106][T28362] truncated [ 1628.279598][T28362] loop5: p5 size 100663296 extends beyond EOD, [ 1628.280140][T28349] truncated [ 1628.288653][T28362] truncated [ 1628.290044][T28349] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1628.291093][T28362] loop5: p6 start 9 is beyond EOD, truncated [ 1628.292276][T28349] loop4: p6 start 9 is beyond EOD, truncated [ 1628.296778][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1628.297845][T32589] loop4: partition table partially beyond EOD, truncated [ 1628.299842][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1628.301798][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1628.303962][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1628.305453][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1628.307955][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1628.310150][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1628.346551][T28362] loop5: detected capacity change from 0 to 1 [ 1628.354975][T28349] loop4: detected capacity change from 0 to 1 [ 1628.393585][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1628.393760][T28349] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1628.395194][T32589] loop5: partition table partially beyond EOD, [ 1628.396375][T28349] loop4: partition table partially beyond EOD, truncated [ 1628.396461][T28349] loop4: p1 start 10 is beyond EOD, [ 1628.397357][T32589] truncated [ 1628.397690][T32589] loop5: p1 start 9738 is beyond EOD, [ 1628.398683][T28349] truncated [ 1628.398688][T28349] loop4: p2 size 100663296 extends beyond EOD, [ 1628.399896][T32589] truncated [ 1628.399900][T32589] loop5: p2 size 100663296 extends beyond EOD, [ 1628.400500][T28349] truncated [ 1628.401097][T28349] loop4: p3 start 9 is beyond EOD, [ 1628.402281][T32589] truncated [ 1628.403384][T32589] loop5: p3 start 9 is beyond EOD, [ 1628.404448][T28349] truncated [ 1628.405031][T32589] truncated [ 1628.405035][T32589] loop5: p4 size 2 extends beyond EOD, [ 1628.406323][T28349] loop4: p4 size 2 extends beyond EOD, truncated [ 1628.410252][T28349] loop4: p5 size 100663296 extends beyond EOD, [ 1628.410398][T32589] truncated [ 1628.411345][T32589] loop5: p5 size 100663296 extends beyond EOD, [ 1628.412240][T28349] truncated [ 1628.412687][T28349] loop4: p6 start 9 is beyond EOD, [ 1628.413444][T32589] truncated [ 1628.415513][T32589] loop5: p6 start 9 is beyond EOD, [ 1628.415775][T28349] truncated [ 1628.426143][T32589] truncated [ 1628.427868][T28362] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1628.428639][T28362] loop5: partition table partially beyond EOD, truncated [ 1628.429754][T28362] loop5: p1 start 9738 is beyond EOD, truncated [ 1628.430956][T28362] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1628.432322][T28362] loop5: p3 start 9 is beyond EOD, truncated [ 1628.433487][T28362] loop5: p4 size 2 extends beyond EOD, truncated [ 1628.434938][T28362] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1628.436217][T28362] loop5: p6 start 9 is beyond EOD, truncated [ 1628.448561][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1628.449540][T32589] loop4: partition table partially beyond EOD, truncated [ 1628.450626][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1628.451729][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1628.453868][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1628.455140][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1628.456942][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1628.459087][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1628.484360][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1628.485350][T32589] loop5: partition table partially beyond EOD, truncated [ 1628.486629][T32589] loop5: p1 start 9738 is beyond EOD, truncated [ 1628.487645][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1628.490021][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1628.490911][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1628.492440][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1628.496845][T32589] loop5: p6 start 9 is beyond EOD, truncated 11:49:52 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a120000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:52 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xf8010000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x700, 0x0) 11:49:52 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000074) 11:49:52 executing program 4: syz_read_part_table(0xa, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:52 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a480000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x702, 0x0) 11:49:52 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000078) 11:49:52 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xf9010000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1628.797179][T28451] loop5: detected capacity change from 0 to 1 11:49:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x802, 0x0) 11:49:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={r1, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @dev}, 0x10) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r4, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000400)={r7, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000140)={r7, 0x1, 0x6, @dev}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x144, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x24002011}, 0x48090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x1, 0x70bd28, 0x0, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x8044) 11:49:52 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000079) [ 1628.831219][T28451] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1628.832193][T28451] loop5: partition table partially beyond EOD, truncated [ 1628.833399][T28451] loop5: p1 start 18442 is beyond EOD, truncated [ 1628.834643][T28451] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1628.850955][T28451] loop5: p3 start 9 is beyond EOD, truncated [ 1628.852254][T28451] loop5: p4 size 2 extends beyond EOD, truncated [ 1628.856273][T28457] ISOFS: Unable to identify CD-ROM format. [ 1628.857829][T28466] ISOFS: Unable to identify CD-ROM format. [ 1628.859471][T28465] ISOFS: Unable to identify CD-ROM format. [ 1628.860131][T28455] loop4: detected capacity change from 0 to 1 [ 1628.878624][T28451] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:52 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x800007a) 11:49:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x900, 0x0) [ 1628.880412][T28451] loop5: p6 start 9 is beyond EOD, truncated [ 1628.894135][T28455] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1628.895465][T28455] loop4: partition table partially beyond EOD, truncated [ 1628.896505][T28455] loop4: p1 start 10 is beyond EOD, truncated [ 1628.897453][T28455] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1628.899088][T28455] loop4: p3 start 9 is beyond EOD, truncated [ 1628.900641][T28455] loop4: p4 size 2 extends beyond EOD, truncated [ 1628.902301][T28455] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1628.906622][T28455] loop4: p6 start 9 is beyond EOD, truncated [ 1628.911973][T28486] device lo entered promiscuous mode [ 1628.918439][T28451] loop5: detected capacity change from 0 to 1 11:49:52 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfa010000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:52 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x80000a1) [ 1628.934070][T28486] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1628.939001][T28484] device lo left promiscuous mode [ 1628.940910][T28513] device lo entered promiscuous mode [ 1628.945104][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1628.946019][T32589] loop5: partition table partially beyond EOD, truncated [ 1628.947391][T32589] loop5: p1 start 18442 is beyond EOD, truncated [ 1628.948566][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1628.956042][T28500] ISOFS: Unable to identify CD-ROM format. [ 1628.957382][T28510] ISOFS: Unable to identify CD-ROM format. [ 1628.958511][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1628.958876][T28508] ISOFS: Unable to identify CD-ROM format. [ 1628.959468][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1628.963144][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1628.966562][T28484] device lo left promiscuous mode [ 1628.966668][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1628.969421][T28455] loop4: detected capacity change from 0 to 1 [ 1628.971622][T28451] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1628.972727][T28451] loop5: partition table partially beyond EOD, truncated [ 1628.974461][T28451] loop5: p1 start 18442 is beyond EOD, truncated [ 1628.975593][T28451] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1628.977143][T28451] loop5: p3 start 9 is beyond EOD, truncated [ 1628.978147][T28451] loop5: p4 size 2 extends beyond EOD, truncated [ 1628.979596][T28451] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1628.981032][T28451] loop5: p6 start 9 is beyond EOD, truncated 11:49:53 executing program 4: syz_read_part_table(0xb, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x902, 0x0) 11:49:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r1) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="df0727bd7000fddbdf250400000008000100060000000800020002000000080002000200000008000200027e39000000080002000200cf940000080003000100"], 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4008000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r3) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvfrom(r5, &(0x7f0000000040)=""/119, 0x77, 0x300, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0xf4) 11:49:53 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x80000c0) 11:49:53 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfb010000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:53 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a4c0000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1629.013951][T28455] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1629.014976][T28455] loop4: partition table partially beyond EOD, truncated [ 1629.016226][T28455] loop4: p1 start 10 is beyond EOD, truncated [ 1629.017227][T28455] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1629.018941][T28455] loop4: p3 start 9 is beyond EOD, truncated [ 1629.020207][T28455] loop4: p4 size 2 extends beyond EOD, truncated [ 1629.021442][T28455] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1629.022849][T28455] loop4: p6 start 9 is beyond EOD, truncated [ 1629.046501][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1629.047515][T32589] loop4: partition table partially beyond EOD, truncated [ 1629.048676][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1629.049811][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1629.051168][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1629.052363][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1629.055014][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1629.057166][T32589] loop4: p6 start 9 is beyond EOD, truncated 11:49:53 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfc010000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:53 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x80000f7) 11:49:53 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfd010000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1629.074280][T28563] loop5: detected capacity change from 0 to 1 [ 1629.079995][T28558] ISOFS: Unable to identify CD-ROM format. [ 1629.084007][T28562] ISOFS: Unable to identify CD-ROM format. 11:49:53 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x800010f) 11:49:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0xa00, 0x0) 11:49:53 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000110) [ 1629.114794][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1629.115703][T32589] loop5: partition table partially beyond EOD, truncated [ 1629.119262][T32589] loop5: p1 start 19466 is beyond EOD, truncated [ 1629.120242][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1629.130030][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1629.131332][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1629.132800][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1629.134731][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1629.138884][T28563] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1629.139831][T28563] loop5: partition table partially beyond EOD, truncated [ 1629.141166][T28563] loop5: p1 start 19466 is beyond EOD, truncated [ 1629.142118][T28563] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1629.144637][T28563] loop5: p3 start 9 is beyond EOD, truncated [ 1629.145766][T28563] loop5: p4 size 2 extends beyond EOD, truncated [ 1629.147257][T28563] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1629.148990][T28563] loop5: p6 start 9 is beyond EOD, truncated [ 1629.173475][T28602] loop4: detected capacity change from 0 to 1 [ 1629.177487][T28594] ISOFS: Unable to identify CD-ROM format. [ 1629.180120][T28603] ISOFS: Unable to identify CD-ROM format. [ 1629.233931][T28602] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1629.234165][T28563] loop5: detected capacity change from 0 to 1 [ 1629.234983][T28602] loop4: partition table partially beyond EOD, truncated [ 1629.235050][T28602] loop4: p1 start 10 is beyond EOD, truncated [ 1629.238415][T28602] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1629.240341][T28602] loop4: p3 start 9 is beyond EOD, truncated [ 1629.241447][T28602] loop4: p4 size 2 extends beyond EOD, truncated [ 1629.243437][T28602] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1629.245090][T28602] loop4: p6 start 9 is beyond EOD, truncated [ 1629.247343][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1629.248875][T32589] loop4: partition table partially beyond EOD, truncated [ 1629.250136][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1629.251116][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1629.252590][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1629.253724][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1629.255308][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1629.257201][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1629.273884][T28563] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1629.275427][T28563] loop5: partition table partially beyond EOD, truncated [ 1629.276432][T28563] loop5: p1 start 19466 is beyond EOD, truncated [ 1629.277447][T28563] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1629.279011][T28563] loop5: p3 start 9 is beyond EOD, truncated [ 1629.280106][T28563] loop5: p4 size 2 extends beyond EOD, truncated [ 1629.281767][T28563] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1629.283324][T28563] loop5: p6 start 9 is beyond EOD, truncated [ 1629.295007][T28602] loop4: detected capacity change from 0 to 1 [ 1629.305342][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1629.306217][T32589] loop5: partition table partially beyond EOD, truncated [ 1629.307593][T32589] loop5: p1 start 19466 is beyond EOD, truncated [ 1629.308799][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1629.310442][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1629.311512][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1629.313435][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1629.316896][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1629.333945][T28602] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1629.335123][T28602] loop4: partition table partially beyond EOD, truncated [ 1629.336449][T28602] loop4: p1 start 10 is beyond EOD, truncated [ 1629.337525][T28602] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1629.339333][T28602] loop4: p3 start 9 is beyond EOD, truncated [ 1629.340194][T28602] loop4: p4 size 2 extends beyond EOD, truncated [ 1629.341570][T28602] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1629.342933][T28602] loop4: p6 start 9 is beyond EOD, truncated 11:49:53 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2, 0x66a6845c) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) fchdir(r0) 11:49:53 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfdffffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:53 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000111) 11:49:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0xb00, 0x0) 11:49:53 executing program 4: syz_read_part_table(0xc, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:53 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a540000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fork() tkill(r1, 0x35) r2 = pidfd_open(r1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) poll(&(0x7f0000000040)=[{r2, 0x4001}, {r3, 0xa043}], 0x2, 0x200) fork() [ 1629.385056][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1629.386366][T32589] loop4: partition table partially beyond EOD, truncated [ 1629.387583][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1629.389549][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1629.391606][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1629.392575][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1629.401917][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1629.408071][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1629.417813][T28670] loop5: detected capacity change from 0 to 1 [ 1629.434233][T28676] ISOFS: Unable to identify CD-ROM format. 11:49:53 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfeff0000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:53 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000140) 11:49:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0xc00, 0x0) 11:49:53 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000180) 11:49:53 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfeffffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1629.453890][T28670] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1629.454906][T28670] loop5: partition table partially beyond EOD, truncated [ 1629.456289][T28670] loop5: p1 start 21514 is beyond EOD, truncated [ 1629.457476][T28670] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1629.466704][T28670] loop5: p3 start 9 is beyond EOD, truncated [ 1629.468079][T28670] loop5: p4 size 2 extends beyond EOD, truncated [ 1629.472545][T28670] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1629.475606][T28670] loop5: p6 start 9 is beyond EOD, truncated [ 1629.477083][T28680] loop4: detected capacity change from 0 to 1 [ 1629.479668][T28678] ISOFS: Unable to identify CD-ROM format. 11:49:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0xd00, 0x0) 11:49:53 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x80001c0) [ 1629.514190][T28680] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1629.515345][T28680] loop4: partition table partially beyond EOD, truncated [ 1629.516446][T28680] loop4: p1 start 10 is beyond EOD, truncated [ 1629.517526][T28680] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1629.526470][T28706] ISOFS: Unable to identify CD-ROM format. [ 1629.527945][T28670] loop5: detected capacity change from 0 to 1 [ 1629.529633][T28680] loop4: p3 start 9 is beyond EOD, truncated [ 1629.530790][T28680] loop4: p4 size 2 extends beyond EOD, truncated [ 1629.532426][T28680] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1629.540676][T28680] loop4: p6 start 9 is beyond EOD, truncated [ 1629.546161][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1629.547159][T32589] loop4: partition table partially beyond EOD, truncated [ 1629.548624][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1629.549998][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1629.552273][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1629.553929][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1629.555514][T28670] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1629.556576][T28670] loop5: partition table partially beyond EOD, truncated [ 1629.557855][T28670] loop5: p1 start 21514 is beyond EOD, truncated [ 1629.558338][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1629.558950][T28670] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1629.559385][T28670] loop5: p3 start 9 is beyond EOD, truncated 11:49:53 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xff030000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:53 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x80001d8) [ 1629.564099][T28670] loop5: p4 size 2 extends beyond EOD, truncated [ 1629.566510][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1629.577708][T28670] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1629.580539][T28670] loop5: p6 start 9 is beyond EOD, truncated [ 1629.587236][T28732] ISOFS: Unable to identify CD-ROM format. [ 1629.589012][T28743] ISOFS: Unable to identify CD-ROM format. [ 1629.599295][T28680] loop4: detected capacity change from 0 to 1 [ 1629.615488][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1629.616596][T32589] loop5: partition table partially beyond EOD, truncated [ 1629.618050][T32589] loop5: p1 start 21514 is beyond EOD, truncated [ 1629.619162][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1629.620868][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1629.621839][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1629.623252][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1629.626646][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1629.634194][T28680] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1629.635402][T28680] loop4: partition table partially beyond EOD, truncated [ 1629.636785][T28680] loop4: p1 start 10 is beyond EOD, truncated [ 1629.638053][T28680] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1629.639739][T28680] loop4: p3 start 9 is beyond EOD, truncated [ 1629.640736][T28680] loop4: p4 size 2 extends beyond EOD, truncated [ 1629.642042][T28680] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1629.643518][T28680] loop4: p6 start 9 is beyond EOD, truncated 11:49:53 executing program 4: syz_read_part_table(0xd, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:53 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xffff0000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1629.681221][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1629.682178][T32589] loop4: partition table partially beyond EOD, truncated [ 1629.683476][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1629.684522][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1629.688089][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1629.690610][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1629.692092][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1629.693681][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1629.725165][T28788] loop4: detected capacity change from 0 to 1 [ 1629.764084][T28788] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1629.765235][T28788] loop4: partition table partially beyond EOD, truncated [ 1629.766442][T28788] loop4: p1 start 10 is beyond EOD, truncated [ 1629.767783][T28788] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1629.769239][T28788] loop4: p3 start 9 is beyond EOD, truncated [ 1629.770137][T28788] loop4: p4 size 2 extends beyond EOD, truncated [ 1629.771528][T28788] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1629.773425][T28788] loop4: p6 start 9 is beyond EOD, truncated [ 1629.775759][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1629.776640][T32589] loop4: partition table partially beyond EOD, truncated [ 1629.777787][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1629.778854][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1629.780111][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1629.780996][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1629.782254][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1629.783564][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1629.836676][T28788] loop4: detected capacity change from 0 to 1 [ 1629.874215][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1629.875367][T32589] loop4: partition table partially beyond EOD, truncated [ 1629.876693][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1629.877704][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1629.879225][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1629.880498][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1629.882047][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1629.883656][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1629.887173][T28788] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1629.888474][T28788] loop4: partition table partially beyond EOD, truncated [ 1629.889978][T28788] loop4: p1 start 10 is beyond EOD, truncated [ 1629.891088][T28788] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1629.892791][T28788] loop4: p3 start 9 is beyond EOD, truncated [ 1629.893876][T28788] loop4: p4 size 2 extends beyond EOD, truncated [ 1629.895315][T28788] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1629.896803][T28788] loop4: p6 start 9 is beyond EOD, truncated [ 1629.944919][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1629.946041][T32589] loop4: partition table partially beyond EOD, truncated [ 1629.947225][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1629.948316][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1629.949805][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1629.950742][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1629.952348][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1629.953996][T32589] loop4: p6 start 9 is beyond EOD, truncated 11:49:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x4, 0x4, 0x1, 0x3}]}) syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000001a80)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x40) 11:49:54 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x80001da) 11:49:54 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a550000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0xe00, 0x0) 11:49:54 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfffffe00, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:54 executing program 4: syz_read_part_table(0xe, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:54 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xffffff7f, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1630.429476][T28858] ISOFS: Unable to identify CD-ROM format. 11:49:54 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x80001db) 11:49:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0xf00, 0x0) 11:49:54 executing program 0: r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3142) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x408180, 0x100) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2080) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) [ 1630.460383][T28864] loop4: detected capacity change from 0 to 1 [ 1630.467659][T28865] loop5: detected capacity change from 0 to 1 [ 1630.484440][T28864] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1630.485401][T28864] loop4: partition table partially beyond EOD, truncated [ 1630.487076][T28864] loop4: p1 start 10 is beyond EOD, truncated [ 1630.488199][T28864] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1630.490429][T28864] loop4: p3 start 9 is beyond EOD, truncated [ 1630.491435][T28864] loop4: p4 size 2 extends beyond EOD, truncated [ 1630.494592][T28864] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1630.499726][T28864] loop4: p6 start 9 is beyond EOD, truncated 11:49:54 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xffffff8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1020, 0x0) 11:49:54 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x80001f6) 11:49:54 executing program 0: r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3142) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x408180, 0x100) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2080) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) [ 1630.512416][T28865] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1630.515405][T28865] loop5: partition table partially beyond EOD, truncated [ 1630.528664][T28861] ISOFS: Unable to identify CD-ROM format. [ 1630.530809][T28884] ISOFS: Unable to identify CD-ROM format. [ 1630.533075][T28865] loop5: p1 start 21770 is beyond EOD, truncated [ 1630.535413][T28865] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1630.538155][T28886] ISOFS: Unable to identify CD-ROM format. [ 1630.538550][T28865] loop5: p3 start 9 is beyond EOD, truncated [ 1630.540131][T28865] loop5: p4 size 2 extends beyond EOD, truncated [ 1630.548167][T28865] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1630.554409][T28865] loop5: p6 start 9 is beyond EOD, truncated [ 1630.616099][T28865] loop5: detected capacity change from 0 to 1 [ 1630.616100][T28864] loop4: detected capacity change from 0 to 1 [ 1630.662588][T28865] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1630.663538][T28865] loop5: partition table partially beyond EOD, truncated [ 1630.664869][T28864] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1630.665718][T28864] loop4: partition table partially beyond EOD, truncated [ 1630.666889][T28864] loop4: p1 start 10 is beyond EOD, truncated [ 1630.667855][T28864] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1630.669921][T28865] loop5: p1 start 21770 is beyond EOD, truncated [ 1630.671195][T28865] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1630.677029][T28864] loop4: p3 start 9 is beyond EOD, truncated [ 1630.677293][T28865] loop5: p3 start 9 is beyond EOD, truncated [ 1630.678392][T28864] loop4: p4 size 2 extends beyond EOD, truncated [ 1630.679522][T28865] loop5: p4 size 2 extends beyond EOD, truncated [ 1630.681432][T28864] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1630.683445][T28865] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1630.685334][T28864] loop4: p6 start 9 is beyond EOD, truncated [ 1630.685369][T28865] loop5: p6 start 9 is beyond EOD, truncated 11:49:54 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a600000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1100, 0x0) 11:49:54 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x80001f7) 11:49:54 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xffffff97, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:54 executing program 0: r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3142) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x408180, 0x100) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2080) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 11:49:54 executing program 4: syz_read_part_table(0xf, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1200, 0x0) 11:49:54 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000240) 11:49:54 executing program 0: r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3142) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x408180, 0x100) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2080) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 11:49:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1300, 0x0) 11:49:54 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xffffffda, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:54 executing program 0: r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3142) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x408180, 0x100) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2080) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) [ 1630.777863][T28952] loop4: detected capacity change from 0 to 1 [ 1630.819432][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1630.820681][T32589] loop4: partition table partially beyond EOD, truncated [ 1630.822419][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1630.823500][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1630.830825][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1630.833094][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1630.835462][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1630.838049][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1630.842231][T28952] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1630.843985][T28952] loop4: partition table partially beyond EOD, truncated [ 1630.846582][T28952] loop4: p1 start 10 is beyond EOD, truncated [ 1630.847965][T28952] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1630.849785][T28952] loop4: p3 start 9 is beyond EOD, truncated [ 1630.851485][T28952] loop4: p4 size 2 extends beyond EOD, truncated [ 1630.853725][T28952] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1630.863188][T28952] loop4: p6 start 9 is beyond EOD, truncated [ 1630.872456][T28993] loop5: detected capacity change from 0 to 1 [ 1630.904440][T28993] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1630.905755][T28993] loop5: partition table partially beyond EOD, truncated [ 1630.907442][T28993] loop5: p1 start 24586 is beyond EOD, truncated [ 1630.908130][T28952] loop4: detected capacity change from 0 to 1 [ 1630.909328][T28993] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1630.909684][T28993] loop5: p3 start 9 is beyond EOD, truncated [ 1630.913969][T28993] loop5: p4 size 2 extends beyond EOD, truncated [ 1630.916151][T28993] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1630.917851][T28993] loop5: p6 start 9 is beyond EOD, truncated [ 1630.920515][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1630.921705][T32589] loop5: partition table partially beyond EOD, truncated [ 1630.923500][T32589] loop5: p1 start 24586 is beyond EOD, truncated [ 1630.924945][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1630.926806][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1630.928230][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1630.929745][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1630.931375][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1630.934793][T28952] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1630.936702][T28952] loop4: partition table partially beyond EOD, truncated [ 1630.938537][T28952] loop4: p1 start 10 is beyond EOD, truncated [ 1630.940422][T28952] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1630.942836][T28952] loop4: p3 start 9 is beyond EOD, truncated [ 1630.943822][T28952] loop4: p4 size 2 extends beyond EOD, truncated [ 1630.945729][T28952] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1630.947420][T28952] loop4: p6 start 9 is beyond EOD, truncated [ 1630.955844][T28993] loop5: detected capacity change from 0 to 1 [ 1630.994503][T28993] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1630.996456][T28993] loop5: partition table partially beyond EOD, truncated [ 1630.999580][T28993] loop5: p1 start 24586 is beyond EOD, truncated [ 1631.000814][T28993] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1631.006152][T28993] loop5: p3 start 9 is beyond EOD, truncated [ 1631.007270][T28993] loop5: p4 size 2 extends beyond EOD, truncated [ 1631.012060][T28993] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1631.014465][T28993] loop5: p6 start 9 is beyond EOD, truncated 11:49:55 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a630000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1400, 0x0) 11:49:55 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000280) 11:49:55 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfffffff6, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:55 executing program 0: r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3142) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x408180, 0x100) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 11:49:55 executing program 4: syz_read_part_table(0x10, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:55 executing program 0: r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3142) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 11:49:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1500, 0x0) 11:49:55 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfffffffd, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1631.055272][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1631.056227][T32589] loop5: partition table partially beyond EOD, truncated [ 1631.057830][T32589] loop5: p1 start 24586 is beyond EOD, truncated [ 1631.058962][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1631.060343][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1631.061741][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1631.062975][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1631.065136][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1631.090705][T29054] loop4: detected capacity change from 0 to 1 11:49:55 executing program 0: r0 = epoll_create1(0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3142) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 11:49:55 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x80002c0) [ 1631.124683][T29054] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1631.125749][T29054] loop4: partition table partially beyond EOD, truncated [ 1631.126899][T29054] loop4: p1 start 10 is beyond EOD, truncated [ 1631.127769][T29054] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1631.136992][T29054] loop4: p3 start 9 is beyond EOD, truncated [ 1631.138286][T29054] loop4: p4 size 2 extends beyond EOD, truncated [ 1631.139877][T29054] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1631.158048][T29054] loop4: p6 start 9 is beyond EOD, truncated 11:49:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1600, 0x0) [ 1631.187356][T29084] loop5: detected capacity change from 0 to 1 [ 1631.216387][T29054] loop4: detected capacity change from 0 to 1 [ 1631.244638][T29084] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1631.245868][T29084] loop5: partition table partially beyond EOD, truncated [ 1631.247538][T29084] loop5: p1 start 25354 is beyond EOD, truncated [ 1631.248629][T29084] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1631.250344][T29084] loop5: p3 start 9 is beyond EOD, truncated [ 1631.251447][T29084] loop5: p4 size 2 extends beyond EOD, truncated [ 1631.252704][T29084] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1631.254004][T29084] loop5: p6 start 9 is beyond EOD, truncated [ 1631.260648][T29054] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1631.261709][T29054] loop4: partition table partially beyond EOD, truncated [ 1631.262897][T29054] loop4: p1 start 10 is beyond EOD, truncated [ 1631.264065][T29054] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1631.266989][T29054] loop4: p3 start 9 is beyond EOD, truncated [ 1631.268145][T29054] loop4: p4 size 2 extends beyond EOD, truncated [ 1631.269795][T29054] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1631.272001][T29054] loop4: p6 start 9 is beyond EOD, truncated [ 1631.325726][T29084] loop5: detected capacity change from 0 to 1 [ 1631.355530][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1631.356689][T32589] loop4: partition table partially beyond EOD, truncated [ 1631.357762][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1631.358783][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1631.360585][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1631.361665][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1631.363293][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1631.364980][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1631.365934][T29084] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1631.367842][T29084] loop5: partition table partially beyond EOD, truncated [ 1631.369110][T29084] loop5: p1 start 25354 is beyond EOD, truncated [ 1631.370090][T29084] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1631.371346][T29084] loop5: p3 start 9 is beyond EOD, truncated [ 1631.372411][T29084] loop5: p4 size 2 extends beyond EOD, truncated [ 1631.373611][T29084] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1631.375252][T29084] loop5: p6 start 9 is beyond EOD, truncated 11:49:55 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfffffffe, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:55 executing program 0: r0 = epoll_create1(0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3142) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 11:49:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1700, 0x0) 11:49:55 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000300) 11:49:55 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a680000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:55 executing program 4: syz_read_part_table(0x11, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:55 executing program 0: r0 = epoll_create1(0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3142) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 11:49:55 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000340) 11:49:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1800, 0x0) 11:49:55 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x8000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:55 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x4}) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 11:49:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1900, 0x0) [ 1631.500974][T29150] loop4: detected capacity change from 0 to 1 11:49:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1a00, 0x0) 11:49:55 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000380) 11:49:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1b00, 0x0) [ 1631.540795][T29150] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1631.541945][T29150] loop4: partition table partially beyond EOD, truncated [ 1631.543627][T29150] loop4: p1 start 10 is beyond EOD, truncated [ 1631.544781][T29150] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1631.556358][T29150] loop4: p3 start 9 is beyond EOD, truncated [ 1631.557389][T29150] loop4: p4 size 2 extends beyond EOD, truncated [ 1631.559120][T29150] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1631.561237][T29150] loop4: p6 start 9 is beyond EOD, truncated [ 1631.570591][T29165] loop5: detected capacity change from 0 to 1 11:49:55 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1631.623180][T29165] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1631.624214][T29165] loop5: partition table partially beyond EOD, truncated [ 1631.634038][T29165] loop5: p1 start 26634 is beyond EOD, truncated [ 1631.635699][T29165] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1631.639660][T29165] loop5: p3 start 9 is beyond EOD, truncated [ 1631.640678][T29165] loop5: p4 size 2 extends beyond EOD, truncated [ 1631.652553][T29165] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1631.653851][T29150] loop4: detected capacity change from 0 to 1 [ 1631.656080][T29165] loop5: p6 start 9 is beyond EOD, truncated [ 1631.695298][T29150] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1631.697617][T29150] loop4: partition table partially beyond EOD, truncated [ 1631.699125][T29150] loop4: p1 start 10 is beyond EOD, truncated [ 1631.700424][T29150] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1631.706259][T29150] loop4: p3 start 9 is beyond EOD, truncated [ 1631.707428][T29150] loop4: p4 size 2 extends beyond EOD, truncated [ 1631.708764][T29150] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1631.710199][T29150] loop4: p6 start 9 is beyond EOD, truncated [ 1631.721518][T29165] loop5: detected capacity change from 0 to 1 [ 1631.757030][T29165] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1631.757759][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1631.758245][T29165] loop5: partition table partially beyond EOD, truncated [ 1631.759048][T32589] loop4: partition table partially beyond EOD, truncated [ 1631.759139][T32589] loop4: p1 start 10 is beyond EOD, [ 1631.760491][T29165] loop5: p1 start 26634 is beyond EOD, [ 1631.762138][T32589] truncated [ 1631.762143][T32589] loop4: p2 size 100663296 extends beyond EOD, [ 1631.763527][T29165] truncated [ 1631.763532][T29165] loop5: p2 size 100663296 extends beyond EOD, [ 1631.764460][T32589] truncated [ 1631.765009][T29165] truncated [ 1631.767435][T29165] loop5: p3 start 9 is beyond EOD, truncated [ 1631.769833][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1631.770188][T29165] loop5: p4 size 2 extends beyond EOD, truncated [ 1631.771085][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1631.772745][T29165] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1631.774045][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1631.776285][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1631.776300][T29165] loop5: p6 start 9 is beyond EOD, truncated 11:49:55 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a6c0000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1c00, 0x0) 11:49:55 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x4}) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 11:49:55 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x100000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:55 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x80003c0) 11:49:55 executing program 4: syz_read_part_table(0x12, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1d00, 0x0) 11:49:55 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x4}) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) [ 1631.859963][T29255] loop4: detected capacity change from 0 to 1 11:49:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1e00, 0x0) 11:49:55 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000402) 11:49:55 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xedc000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x1f00, 0x0) [ 1631.886566][T29255] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1631.887642][T29255] loop4: partition table partially beyond EOD, truncated [ 1631.889215][T29255] loop4: p1 start 10 is beyond EOD, truncated [ 1631.890250][T29255] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1631.891783][T29255] loop4: p3 start 9 is beyond EOD, truncated [ 1631.892853][T29255] loop4: p4 size 2 extends beyond EOD, truncated [ 1631.894766][T29255] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1631.896495][T29255] loop4: p6 start 9 is beyond EOD, truncated [ 1631.909535][T29274] loop5: detected capacity change from 0 to 1 [ 1631.944948][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1631.946061][T32589] loop5: partition table partially beyond EOD, truncated [ 1631.947461][T32589] loop5: p1 start 27658 is beyond EOD, truncated [ 1631.948430][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1631.949976][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1631.950938][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1631.952189][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1631.953922][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1631.959669][T29274] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1631.960641][T29274] loop5: partition table partially beyond EOD, truncated [ 1631.962256][T29274] loop5: p1 start 27658 is beyond EOD, truncated [ 1631.963458][T29274] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1631.965731][T29255] loop4: detected capacity change from 0 to 1 [ 1631.971052][T29274] loop5: p3 start 9 is beyond EOD, truncated [ 1631.972383][T29274] loop5: p4 size 2 extends beyond EOD, truncated [ 1631.974183][T29274] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1631.977248][T29274] loop5: p6 start 9 is beyond EOD, truncated [ 1632.004784][T29255] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1632.006366][T29255] loop4: partition table partially beyond EOD, truncated [ 1632.007646][T29255] loop4: p1 start 10 is beyond EOD, truncated [ 1632.008689][T29255] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1632.010420][T29255] loop4: p3 start 9 is beyond EOD, truncated [ 1632.010444][T29274] loop5: detected capacity change from 0 to 1 [ 1632.012127][T29255] loop4: p4 size 2 extends beyond EOD, truncated [ 1632.014795][T29255] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1632.016431][T29255] loop4: p6 start 9 is beyond EOD, truncated [ 1632.044735][T29274] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1632.045706][T29274] loop5: partition table partially beyond EOD, truncated [ 1632.047089][T29274] loop5: p1 start 27658 is beyond EOD, truncated [ 1632.048144][T29274] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1632.049736][T29274] loop5: p3 start 9 is beyond EOD, truncated [ 1632.050988][T29274] loop5: p4 size 2 extends beyond EOD, truncated [ 1632.052364][T29274] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1632.054296][T29274] loop5: p6 start 9 is beyond EOD, truncated 11:49:56 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a720000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:56 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3142) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x4}) epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0x0) 11:49:56 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000403) 11:49:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x2000, 0x0) 11:49:56 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:56 executing program 4: syz_read_part_table(0x13, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:56 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3142) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x4}) epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0x0) 11:49:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x2010, 0x0) 11:49:56 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3142) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x4}) epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0x0) 11:49:56 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xfeffff00000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1632.075918][T32589] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1632.077081][T32589] loop4: partition table partially beyond EOD, truncated [ 1632.078367][T32589] loop4: p1 start 10 is beyond EOD, truncated [ 1632.079260][T32589] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1632.080845][T32589] loop4: p3 start 9 is beyond EOD, truncated [ 1632.081971][T32589] loop4: p4 size 2 extends beyond EOD, truncated [ 1632.083688][T32589] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1632.088021][T32589] loop4: p6 start 9 is beyond EOD, truncated [ 1632.112722][T29353] loop5: detected capacity change from 0 to 1 11:49:56 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000404) 11:49:56 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000405) [ 1632.151511][T29353] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1632.153164][T29353] loop5: partition table partially beyond EOD, truncated [ 1632.156562][T29353] loop5: p1 start 29194 is beyond EOD, truncated [ 1632.158428][T29353] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1632.166328][T29353] loop5: p3 start 9 is beyond EOD, truncated [ 1632.167843][T29353] loop5: p4 size 2 extends beyond EOD, truncated [ 1632.175553][T29353] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1632.178998][T29349] loop4: detected capacity change from 0 to 1 [ 1632.194165][T29353] loop5: p6 start 9 is beyond EOD, truncated [ 1632.211715][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1632.213714][T32589] loop5: partition table partially beyond EOD, truncated [ 1632.216973][T32589] loop5: p1 start 29194 is beyond EOD, truncated [ 1632.218291][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1632.221618][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1632.223240][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1632.226284][T29349] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1632.226717][T32589] loop5: p5 size 100663296 extends beyond EOD, [ 1632.227357][T29349] loop4: partition table partially beyond EOD, truncated [ 1632.227403][T29349] loop4: p1 start 10 is beyond EOD, [ 1632.228999][T32589] truncated [ 1632.229436][T32589] loop5: p6 start 9 is beyond EOD, [ 1632.230917][T29349] truncated [ 1632.230922][T29349] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1632.238743][T32589] truncated [ 1632.245265][T29349] loop4: p3 start 9 is beyond EOD, truncated [ 1632.247070][T29349] loop4: p4 size 2 extends beyond EOD, truncated [ 1632.251861][T29349] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1632.254030][T29349] loop4: p6 start 9 is beyond EOD, truncated [ 1632.299179][T29349] loop4: detected capacity change from 0 to 1 [ 1632.301472][T29353] loop5: detected capacity change from 0 to 1 [ 1632.331735][T29349] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1632.332864][T29349] loop4: partition table partially beyond EOD, truncated [ 1632.334007][T29353] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1632.335732][T29349] loop4: p1 start 10 is beyond EOD, [ 1632.336661][T29353] loop5: partition table partially beyond EOD, truncated [ 1632.338005][T29349] truncated [ 1632.338010][T29349] loop4: p2 size 100663296 extends beyond EOD, [ 1632.339568][T29353] loop5: p1 start 29194 is beyond EOD, [ 1632.340367][T29349] truncated [ 1632.340914][T29349] loop4: p3 start 9 is beyond EOD, [ 1632.342073][T29353] truncated [ 1632.342078][T29353] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1632.343189][T29353] loop5: p3 start 9 is beyond EOD, [ 1632.343756][T29349] truncated [ 1632.343762][T29349] loop4: p4 size 2 extends beyond EOD, [ 1632.344495][T29353] truncated [ 1632.345989][T29349] truncated [ 1632.346738][T29353] loop5: p4 size 2 extends beyond EOD, [ 1632.351906][T29349] loop4: p5 size 100663296 extends beyond EOD, [ 1632.352202][T29353] truncated [ 1632.353624][T29353] loop5: p5 size 100663296 extends beyond EOD, [ 1632.354585][T29349] truncated [ 1632.355840][T29349] loop4: p6 start 9 is beyond EOD, [ 1632.356829][T29353] truncated [ 1632.358299][T29353] loop5: p6 start 9 is beyond EOD, [ 1632.358854][T29349] truncated [ 1632.365190][T29353] truncated [ 1632.367165][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1632.368425][T32589] loop5: partition table partially beyond EOD, truncated [ 1632.370181][T32589] loop5: p1 start 29194 is beyond EOD, truncated [ 1632.372135][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1632.375127][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1632.377155][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1632.379826][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated 11:49:56 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a740000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:56 executing program 0: r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1a3142) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 11:49:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x2100, 0x0) 11:49:56 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000406) 11:49:56 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x100000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) 11:49:56 executing program 4: syz_read_part_table(0x22, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="02010f0000000a000000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1632.381643][T32589] loop5: p6 start 9 is beyond EOD, truncated 11:49:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x2200, 0x0) 11:49:56 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x8000407) 11:49:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x2300, 0x0) 11:49:56 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) unshare(0x800041c) 11:49:56 executing program 0: r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1a3142) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 11:49:56 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x200000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '$+,'}}]}}) [ 1632.501642][T29472] loop5: detected capacity change from 0 to 1 [ 1632.534816][T29472] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1632.536426][T29472] loop5: partition table partially beyond EOD, truncated [ 1632.538068][T29472] loop5: p1 start 29706 is beyond EOD, truncated [ 1632.539853][T29472] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1632.545904][T29472] loop5: p3 start 9 is beyond EOD, truncated [ 1632.547821][T29472] loop5: p4 size 2 extends beyond EOD, truncated [ 1632.550086][T29481] loop4: detected capacity change from 0 to 1 [ 1632.552863][T29472] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1632.556076][T29472] loop5: p6 start 9 is beyond EOD, truncated [ 1632.559934][T32589] loop5: p1 < > p2 p3 p4 < p5 p6 > [ 1632.561379][T32589] loop5: partition table partially beyond EOD, truncated [ 1632.562798][T32589] loop5: p1 start 29706 is beyond EOD, truncated [ 1632.563913][T32589] loop5: p2 size 100663296 extends beyond EOD, truncated [ 1632.565781][T32589] loop5: p3 start 9 is beyond EOD, truncated [ 1632.567050][T32589] loop5: p4 size 2 extends beyond EOD, truncated [ 1632.568550][T32589] loop5: p5 size 100663296 extends beyond EOD, truncated [ 1632.570013][T32589] loop5: p6 start 9 is beyond EOD, truncated [ 1632.595023][T29481] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 1632.596402][T29481] loop4: partition table partially beyond EOD, truncated [ 1632.597923][T29481] loop4: p1 start 10 is beyond EOD, truncated [ 1632.599353][T29481] loop4: p2 size 100663296 extends beyond EOD, truncated [ 1632.601468][T29481] loop4: p3 start 9 is beyond EOD, truncated [ 1632.602848][T29481] loop4: p4 size 2 extends beyond EOD, truncated [ 1632.604434][T29481] loop4: p5 size 100663296 extends beyond EOD, truncated [ 1632.608706][T29481] loop4: p6 start 9 is beyond EOD, truncated [ 1632.616374][T29472] loop5: detected capacity change from 0 to 1 11:49:56 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="020185ffffff0a7a0000ff45ac0080ffff0600000000000000000000000680ffffff810000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) 11:49:56 executing program 0: r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1a3142) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4}) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 11:49:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x2400, 0x0) 11:49:56 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0, 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,